Backend & systems developer. I spend most of my time hunting edge-case bugs in large open-source codebases and building developer tools.
Website · LinkedIn · GitHub · Email
I like digging into code where things break in subtle ways—concurrency races, memory leaks, panics in edge cases, and unexpected state transitions.
Over the past year, I've opened 77 pull requests across 16 open-source projects (Kubernetes, gRPC, Redis, Grafana, OpenHands, Pixi, Rattler, and others), with 12+ merged directly upstream.
- kubernetes/kubernetes #141086 (Merged) — Added atomic struct markers to
EventSeriesto fix OpenAPI schema generation in the API machinery. - kubernetes/kubernetes #141089 (Open) — Fix node lifecycle controller to mark pods
NotReadyonFalse -> Unknownnode transitions. - kubernetes/kubernetes #141128 (Open) — Seed ClusterIP allocator metrics on
EnableMetrics().
- grpc/grpc #43432 (Open) — Route C-core fork handlers through Python's
os.register_at_forkto stop epollEBADFcrashes in multi-process apps. - grpc/grpc #43158 (Open) — Lazy-initialize
SharedBitGento prevent static init hangs on Windows. - grpc/grpc #43160 (Open) — Prevent missing dynamic clusters from stalling static xDS updates.
- redis/redis #15576 (Open) — Fix recursive crashes in signal handlers when child processes crash.
- redis/redis #15573 (Open) — Guard against null pointer dereference in
VRANDMEMBER. - redis/redis #15594 — Root-cause investigation on heap use-after-free and iterator invalidation in
handleClientsBlockedOnKey.
- grafana/grafana #129900 (Merged) — Fixed a UI race condition in Alerting rule editor where tooltip values were lost on outside click.
- prefix-dev/rattler-build #2266 (Merged) — Added command execution tracing in the bash runner while masking sensitive environment credentials in CI.
- prefix-dev/recipe-format #77 (Merged) — Authored the canonical
build.post_processschema and test suite for the recipe specification. - conda/rattler #2183 (Merged) — Fixed HTTP 404s when downloading from corporate proxy mirrors by enforcing RFC 3986 path joining.
- prefix-dev/pixi #5652 (Merged) — Handled CLI panics when running commands in deleted working directories.
- OpenHands #16444 (Merged) — Fixed workspace folder rendering so all files remain accessible past API pagination limits.
- QwenPaw #6833 (Merged) & #6615 (Merged) — Fixed driver gate channel routing and added recovery for corrupted agent config files.
- QwenPaw #6595 (Merged) — Blocked directory traversal in agent tool execution using strict
realpathcontainment. - cline #13101 (Open) — Optimized Levenshtein distance in
apply_patchto prevent UI thread hangs on large diffs.
- AgentGate — Runtime authorization firewall for AI agents. Intercepts bash/sql/webhook calls out-of-process and scores injection and blast radius in under 35ms using a fine-tuned Qwen 0.8B head + deterministic
policy.yaml. Includes a React dashboard, live Hugging Face Space, and published model checkpoints. - Relay — API gateway written in Go. Token-bucket rate limiting, non-blocking PostgreSQL audit logger, and a Next.js admin dashboard.
- Volt — Lightweight native terminal in Rust and Tauri with sub-100MB RAM usage, sub-40ms cold start, and AST-based command interception for dangerous operations.
- Kairo — Multi-process desktop browser built with Electron, TypeScript, and React with tab-level process isolation and automatic memory cleanup for idle tabs.
- Languages: Rust, C++, Go, TypeScript, Python, C
- Systems & Infra: Linux, POSIX Threads, AsyncIO, Docker, Kubernetes, PostgreSQL, Redis, gRPC




