Research & open systems

Research for AI systems that have to work in the real world.

I study what makes AI systems dependable when they generate code, coordinate work, call tools, operate close to sensitive data, or cross into the physical world. The work spans runtime controls, distributed execution, exact evaluation, local inference, robotics, and blockchain infrastructure.

Topic guides

Hard operational questions, worked through in detail

Each guide starts with a direct answer, then develops the architecture, implementation record, limitations, and questions teams usually ask next.

01 Technical guide

Governed AI agents

A practical architecture for governing tool-using AI agents with identity, purpose, action tiers, approvals, replayable evidence, and human stop conditions.

Read the guide →
02 Technical guide

Production agent reliability

How to design reliable AI agents using explicit state, durable checkpoints, idempotent effects, replay, evaluation, observability, and operator-owned recovery.

Read the guide →
03 Technical guide

AI-generated code correctness

Testing LLM-generated CUDA and Triton kernels with operator-aware oracles, adversarial inputs, reproducible failures, and false-positive controls.

Read the guide →
04 Technical guide

Multi-agent software engineering

How task claims, append-only coordination events, replica convergence, and pre-PR observability expose duplicate and conflicting work among coding agents.

Read the guide →
05 Technical guide

Local inference systems

A practical decision framework for local versus hosted inference, in-process model execution, formats, bindings, hardware backends, resource limits, and offline operation.

Read the guide →
06 Technical guide

Physical AI and robotics

The system boundary between natural-language robot planning, deterministic validation, capability constraints, edge execution, telemetry, recovery, and warehouse learning benchmarks.

Read the guide →
07 Technical guide

Agent-compatible tools

How to design CLIs, APIs, and MCP tools with discoverable capabilities, typed inputs, stable errors, dry runs, scoped credentials, approvals, and audit records.

Read the guide →
08 Technical guide

Blockchain and agent security

Design patterns for validator signing policy, atomic cross-rollup actions, compiler boundaries, and paper-first agent-operated market systems.

Read the guide →
Evidence map

Systems, papers, and delivery experience

Runtime policy, durable state, exact evaluation, local inference, physical AI, and protocol safety form one connected systems problem.

Public reference systems + delivery experience

Governed agents

High-impact agent actions remain permissioned, reviewable, interruptible, and explainable.

CloseGate demonstrates action tiers, segregation of duties, mandatory approval, materiality routing, and hash-chained audit. Regulus adds identity, purpose, privacy, residency, model-risk tiers, kill switches, and evidence export. Neither system has a published external certification or third-party deployment. At Aveni, I was part of the team in the first FCA Supercharged Sandbox cohort, working on AI for wholesale and compliance innovation.

Open source + arXiv preprint

Durable and coordinated agent systems

Agent work survives crashes, concurrent writers, and the distance between a decision and its side effect.

fast-langgraph explores durable state and checkpointing. Before the Pull Request studies coordination before code review; in its measured setup, duplicate or conflicting rework fell from 78% to 0%, useful throughput more than tripled, and replicas converged without silently dropped writes.

Open source + arXiv preprints

Exact evaluation for generated code

A fast generated kernel is useful only after the team can establish that it is correct.

gpuemu uses operator-aware test generation and reproducible failure artefacts for CUDA and Triton kernels. In the measured corpus, its seeded oracle caught 10 of 10 injected defects while 16 of 16 correct controls stayed clean across five GPU classes. That result does not estimate the defect rate of deployed LLMs.

Delivery experience + public benchmark

Local inference and physical AI

Keep model placement, physical constraints, review, execution, and recovery explicit from cloud plan to edge action.

At Orangewood Labs I built RobotGPT, which reduced collaborative-robot programming time by approximately 10× in that specific context, and worked on computer-vision and cloud-to-edge systems. WareMax is a separate deterministic warehouse benchmark for task allocation, reward design, causal delay attribution, and byte-identical replay. Cognisoc explores local inference across multiple language runtimes.

Delivery experience

Cloud and Day-2 AI operations

The deployment is the beginning: ownership, observability, budgets, secrets, retries, evaluation, rollback, and stop conditions make it operable.

Recent delivery includes agents on Azure AI Foundry and AKS/Kubernetes, custom sandboxing, and MCP in .NET. Earlier work includes Python and AWS document extraction, validation, routing, and LLM workflows. Customer architectures and scale remain confidential.

Public reference systems

Blockchain infrastructure and safety boundaries

Make signing policy, cross-chain state, compiler semantics, and agent authority explicit before money or keys move.

Cryptuon projects cover validator signing policy, atomic multi-rollup actions, commit-reveal timing, EVM and Solana compiler boundaries, and paper-first agent-operated markets. They are public design and implementation artefacts; they do not establish audits, mainnet adoption, returns, or production scale.

Selected publications

Papers and preprints

The federated-learning paper was accepted at FL-IJCAI 2020. The three 2026 works are arXiv preprints.

2026
arXiv preprint

Test-Input Generation for Tensor Programs: What Actually Finds Kernel Bugs

Seven strategies evaluated on a 26-operator corpus; boundary-only sampling reached 78% recall with 0% false positives on 16 controls.

Primary record ↗
2026
arXiv preprint

The Correctness Illusion in LLM-Generated GPU Kernels

In the measured corpus, 10/10 seeded defects were caught and 16/16 controls stayed clean across five GPU classes.

Primary record ↗
2026
arXiv preprint

Before the Pull Request: Mining Multi-Agent Coordination

A controlled study of coordination failures hidden by pull-request history, accompanied by a public code and data corpus.

Primary record ↗
2020
Accepted at FL-IJCAI 2020

Fed-Focal Loss for Imbalanced Data Classification in Federated Learning

More than nine absolute percentage points improvement on the unbalanced MNIST benchmark, with experiments across four datasets.

Primary record ↗
One systems thread

From policy to execution

  • CloseGate and Regulus put identity, purpose, policy, approval, evidence, and stop controls around agent actions.
  • fast-langgraph and grite deal with durable state, concurrent work, recovery, and coordination before code review.
  • gpuemu and the kernel studies test generated CUDA and Triton against operator-aware oracles and correct controls.
  • RobotGPT, WareMax, and Cognisoc connect planning to local inference, deterministic environments, edge execution, and physical constraints.
  • Cryptuon systems examine signing policy, cross-rollup state, compiler semantics, and supervised market actions.

Use the work, challenge it, or bring it to an audience.

The public systems are starting points for implementation, evaluation, talks, and workshops—not substitutes for validation in your environment.