Systems & Security Engineer

Identity-first infrastructure • Executable assurance • Kubernetes • Adversarial verification

What I build

I build systems where important claims have to survive contact with the runtime.

My work tends to start with questions like:

• Who actually had authority to do this?
• What state is authoritative?
• What evidence supports the conclusion?
• What happens when the dependency disappears?
• Can the system distinguish failure from uncertainty instead of quietly passing?

That has led me deep into workload identity, Kubernetes, software supply-chain controls, deterministic validation, fail-closed behavior, observability, and executable assurance.

I am less interested in whether a system says it is correct than in whether it can justify that conclusion.

TruthFast

TruthFast is my current flagship project: an executable assurance reference architecture for identity-bound consequential execution.

The question behind it is straightforward:

After software changes a system, what conclusion is actually justified about what ran, under whose authority, which guarantees held, and what the evidence proves?

TruthFast brings together:

• SPIFFE / SPIRE workload identity