Write-ups
Technical analysis, CTF solutions, and engineering logs.
Write-ups
Attesting What an AI Agent Was Allowed to Do
Signed, offline-verifiable evidence of an agent's actions after a guardrail miss: 138/138 classifier-missed cases contained, 9/140 to 0/140 on AgentDojo.
How I Made Windows Invisible to Screen Capture, and Why Exam Proctoring Is Broken
Documented window-capture settings achieved 100% evasion without capture artefacts in controlled laboratory simulations on tested Windows and macOS versions. Commercial proctoring products and Linux were not tested.
Building a Sub-Microsecond Matching Engine in C++20
How a three-layer data structure design achieves O(1) cancellation and sub-microsecond latency.
Anatomy of a Network Intrusion Detection System
Layered protocol dissection, Snort-inspired rules, and stateful threat detection at 500K+ packets/sec (single-thread parse, synthetic SYN).
Deep Dive: eBPF Runtime Monitoring
How to build safe, read-only kernel probes for container security.
Building Offline-First Security Tools with KMP
Sharing 100% of security logic across Android, iOS, and Web.
Securing Electron Apps: A Practical Guide
Handling secrets and IPC securely in modern desktop apps.
Research Papers
Papers: 5Original titles and PDFs are in English.
The Invisible Window: Exploiting OS-Level Display Affinity to Bypass WebRTC Proctoring Systems
13-page research paper documenting cross-platform screen-capture evasion and coordinated vendor disclosure.
(opens in a new tab)Project Simurgh: Privacy-Preserving Device Integrity Proofs for Capture-Resistant High-Stakes Sessions
12-page defensive follow-up to The Invisible Window, replacing visual surveillance with metadata-only integrity proofs.
(opens in a new tab)Privacy-Preserving Integrity Evidence for Student-Society Voting-Adjacent Workflows: A Phase C Pilot of Project Simurgh at Macquarie University
5-page voting-adjacent pilot reporting 31 consented sessions alongside a Macquarie student-society event, with ballot-choice exclusion, HMAC audit chaining, forbidden-field rejection, and 5/5 collection-closure gates.
(opens in a new tab)Banking Shield: Machine-Checked Absence Claims for Privacy-Sensitive AI Explanations
Fictional, non-bank research prototype that turns privacy and overclaim boundaries into machine-checkable evidence: a 46-name forbidden-field firewall whose rejections become audit events, a deterministic offline AI privacy firewall, and per-response privacy receipts anchored in per-session HMAC audit chains. At the evidence freeze all 417/417 unit tests, 43/43 end-to-end checks, and 27/27 security checks passed across three privacy audits and a no-egress static gate, with a formative five-tester dry run (30 sessions) recording zero sensitive values in evidence and 5/5 non-claim checklist comprehension.
(opens in a new tab)Aion-BibleQA: Evaluating Retrieval and Citation Faithfulness in Verse-Grounded Bible RAG Systems
8-page paper introducing a 40-question Bible RAG benchmark for citation faithfulness and false-premise robustness, with v3 retrieval reaching R@5 = 0.941, mean citation_support = 0.978, zero unsupported citations, and 6/6 false-premise refusals.
(opens in a new tab)