Fifteen years building systems that can’t afford to fail. Now building the ones that can’t afford to lie.

The hard problem isn’t capability. It’s integrity. Once a system acts in the world, the useful question stops being what it can do and starts being what it actually did. Did the audited model run? On the claimed inputs? Inside policy? Can its behavior be replayed and attributed after the fact?

Deployment is running ahead of the verification layer. That’s the gap I work on. World-model evaluation, agent harness engineering, and cryptographic proofs of execution for autonomous systems you can actually audit.

Three things have to come together to make this work. Systems discipline from shipping under real conditions. Cryptographic guarantees from the ground up. ML depth to actually implement the models. The intersection is narrow. It’s the work I’ve spent the last decade moving toward.