Software engineer focused on backend engineering, applied AI and security. My experience at Visa includes enterprise application delivery, APIs and application controls. I build public developer tools with reproducible tests and clear evidence boundaries.
Can a workflow still perform an action after its authority becomes invalid? AuthDrift pauses synchronous Python workflows after permission observation, changes authority and checks the resulting effect independently.
- Positive, pre-revoked and mid-flight controls distinguish valid experiments from broken setups.
- Refund, delegation, session and consumed-approval examples compare vulnerable and corrected behavior.
- A reproducible showcase exports JSON reports and observed event history; CI runs on Windows and Ubuntu.
Run the walkthrough · Implementation evidence · Published package
The examples are synthetic fixtures, not production vulnerability discoveries. New main-branch examples may require the checkout rather than the v0.1.0 package examples.
Helps developers assess public GitHub repositories and find suitable contribution issues. Angular presents a FastAPI backend's six-dimension readiness assessment and ranked issue recommendations, including sample limits, confidence and source links.
The next layer adds source-linked issue investigation. LLM generation, hybrid retrieval, MCP and retrieval evaluation are planned extensions until their implementation and results are published.
- Integrating Dual Strengths: A Hybrid Architecture Merging Decentralized Trust with Server-Side Efficiency for Enhanced Secure Transactions. ICCSA 2024, Springer LNCS 14814, pp. 311–326. Publication
- StealthGuard: Advanced Detection and Classification of Fileless Malware and URL Phishing. ICSC 2024. Conference program
Python · C#/.NET · SQL · TypeScript/Angular · API design · authentication and authorization · automated testing · AI workflow integration · developer tooling