What I work on
Automation that can find security flaws is powerful and dual-use. My work focuses on the part most tools skip: building the rails — authorization gating, scope enforcement, blast-radius limits, kill-switches, and tamper-evident audit — so that a discovery system cannot act outside what it's allowed to do. This is the subject of my Master's thesis and the research system behind it.
Highlights
Warren — safety-railed discovery pipeline
A research pipeline where discovery logic is subordinate to a non-bypassable enforcement layer. Built and evaluated against authorized lab targets only.
See projects →Ethics as architecture
Formalizing the safety rails automated discovery needs, and measuring the real trade-off between being safe and being effective.
Read more →Build log & field notes
Honest notes on method, safety engineering, and the papers I'm reading.
Go to blog →