•Building Caracal, an AI-agent security platform that enforces pre-execution authority checks before humans, agents, or services can trigger delegated actions
•Designing policy-driven AI execution controls for request routing, approval gates, revocation checks, and common human-to-agent and agent-to-service workflows
•Modeling delegation graphs that evaluate long and deep authority chains, resolve valid permission paths, and block unauthorized agent actions before execution
•Integrating a secret vault layer so AI agents can use API keys and service credentials through policy-approved access without exposing raw secrets
•Recording tamper-evident audit records and immutable proofs to a ledger-backed adapter for compliance, traceability, and AI-action accountability
•Extending the platform toward agent policy negotiation, security reasoning modules, decentralized identity, verifiable credentials, and audit-derived policy recommendations

AI SecurityAI AgentsPolicy EnginesDelegation GraphsSecret VaultsDLTAudit LogsDID/VCAgent Security

Google Summer of Code 2026

AI Intern, Sugar Labs

May 2026 - Present

Remote

Learning Modes

Architecture Layers

14+

Modules

16+

RAG Docs

•Building Activity On Demand, a constructionist AI workflow that helps learners create, inspect, modify, and remix real Sugar activities instead of passively receiving generated code
•Designing a GTK3 experience launched from Sugar's Home View with prompt ideation, template selection, provider policy, generation progress, and Use - Modify - Create learning modes
•Implementing the core Python architecture across ActivitySpec, template inference, RAG-grounded planning, Gemini/local provider flows, SQLite job history, session revisions, provenance, and validation
•Developing a guided Studio with file tree navigation, annotated source viewing, AST-based code explanations, editable-region challenges, live validation, version diffs, and reflection prompts
•Building classroom-ready safeguards with provider profiles, teacher-controlled settings, API-key storage, forbidden import/call validation, template fallback, and retry-on-validation loops
•Supporting the Sugar Labs community by reviewing contributor pull requests, onboarding new developers, discussing issues, and helping applicants clarify GSoC proposal problem statements

PythonGTK3SugarGemini APISQLiteASTRAGLLM Safety

Vercel OSS Program x VengenceUIVercel OSS ProgramxVengenceUI

Founder & Maintainer

Oct 2025 - Present

Remote

683

GitHub Stars

30,000 - 40,000

Monthly Visitors

120,000 - 200,000

Monthly Page Views

50+

V2 Components

•Selection: VengenceUI was chosen for Vercel's Winter 2026 Open Source Program in March 2026 as a composable, performance-first UI system for real-world product workflows
•VengenceUI v1: Founded the open-source animated component library in October 2025 and grew it to 683 GitHub stars, 40 forks, and a 10-contributor community
•Monthly traction: Grew from 30,000 to 40,000 monthly visitors and from 120,000 to 200,000 monthly page views while maintaining a 34% bounce rate
•VengenceUI v2: Rebuilt the product from the ground up with 50+ production-ready components, stronger visual consistency, improved documentation, and a faster component-discovery experience
•Developer experience: Designed copy-paste installation flows, reusable registry components, interactive previews, responsive documentation, and clearer integration guidance
•Engineering: Led architecture, design systems, component APIs, animation quality, performance optimization, accessibility, deployment, analytics, and community contributions across both versions

Next.jsReactTypeScriptTailwind CSSFramer MotionMDXVercel

Open Source Contributor

Sugar Labs, Joplin, kgateway & more

Sep 2025 - Apr 2026

Remote

Repositories

112

Pull Requests

Merged

Still Open

•Sugar Labs: Delivered 82 pull requests across Music Blocks, Music Blocks V4, and www-v2, covering performance, reliability, testing, accessibility, CI, and developer tooling
•Sugar Labs: Reduced memory usage by 70-120 MB through lazy bitmap caching and by 50-115 MB by fixing leaked Tone.js synthesizers
•Sugar Labs: Improved canvas rendering, block interactions, audio loading, retry and timer handling, crash recovery, Lighthouse CI, PR automation, and unit-test coverage
•Joplin: Authored 18 pull requests with 11 merged across desktop and mobile, improving global shortcuts, E2EE, plugins, sync, exports, editors, localization, updates, and rendering
•Joplin: Prevented failing plugins from blocking startup, removed JSDOM from the Turndown renderer, reused the master-password flow for E2EE, fixed duplicate code blocks and Ctrl+wheel zoom, and enriched frontmatter exports
•Kmesh: Authored a macOS development guide to make local setup and contributor onboarding clearer
•Additional work: Improved kgateway migration documentation and HTTPS security, alongside contributions to FOSSology, FOSSASIA Eventyay, Extralit, and React JSON Schema Form covering scheduler stability, SPDX compliance, authentication flows, and React 19 compatibility