Founder of Riptides: automatic non-human identities for workloads and AI agents, enforced from the Linux kernel.
Securing AI workflows. AI agents hold credentials they can be prompted into leaking. With Riptides the agent never holds the real credential: each agent process gets its own SPIFFE identity, and the kernel injects the actual token into outgoing requests on the wire. It works for the Claude API, AWS, GCP and MCP servers, with no code changes, whether the agent is a LangChain app, an MCP client or Claude Code in a terminal. More in AI Agents Have an Identity Crisis.
Previously: Bank-Vaults, Banzai Cloud Pipeline and Cisco R&D / open source.
Off the clock I hack on everyday home automation and audio: NAD C328 support for the Home Assistant NAD integration, a Raspberry Pi NAD Link remote for the L40 with a Home Assistant bridge, a Modbus CLI in C, and a patch to LosslessSwitcher for Apple Music sample-rate switching.
C · Go · Rust · Java · Python