Systems software · Security · Infrastructure
I build dependable software at the edges of operating systems, security, and production infrastructure.
Currently working in Rust on secure filesystem operations at uutils/coreutils.
San Jose, California · Graduating May 2027
Selected work
Open source · Systems security
Fixed a TOCTOU symlink race in install found in a Canonical-funded Zellic audit, and extended uucore's fd-anchored traversal from Linux to all Unix targets. 30+ merged pull requests in the Rust coreutils that ship in Ubuntu 26.04.
CVE-2026-35356 · CVE-2026-35362
Rust · Developer tools for AI agents
A published Rust CLI that gives each agent its own real Git worktree, cloned copy-on-write from a shared baseline with APFS clonefile, Linux reflinks, or fuse-overlayfs, with a Claude Code plugin.
~10 MiB per vscode worktree instead of 567 MiB
Rust · Confidential computing
Verifies Intel TDX attestation tokens from Google Confidential Space so a dataset's key is released only to an attested workload, with fuzz targets and fail-closed data connectors.
Senior team project
Co-founder & CTO · Production backend
Led engineering for a fintech startup with about 200 users and $6.2M+ in connected assets: Plaid ingestion, a two-stage LLM pipeline, field-level encryption, and verified webhooks.
TypeScript · PostgreSQL · Azure Container Apps
How I work
Secure primitives should preserve the behavior people depend on.
A fix is more useful when it survives the boundaries between operating systems.
Performance, storage, and operational tradeoffs deserve concrete numbers.
Contact
I’m interested in systems, security, and infrastructure work where correctness matters.