STAFF / PRINCIPAL / FORWARD DEPLOYED AI SYSTEMS

I build, break, and deploy AI systems.

Hands-on engineer across model tuning, inference infrastructure, offensive security, and regulated production. I lead from the code, the architecture, and the customer room.

HF snapshot

Model work that ships

I transform model behavior, quantize for real hardware, validate serving targets, and publish the artifacts with explicit evaluation limits.

Gemma 4 31B uncensored · format family

59 GB → 20 GBNVFP4 checkpoint · vLLM and SGLang validated

Result

BF16 evaluation: 0/686 effective refusals across four datasets. The 20 GB NVFP4 build, reduced from 59 GB, was validated in vLLM and SGLang. GGUF: 12–31 GB with 0–1/100 hard refusals across quant levels.

Evidence: BF16 (opens in a new tab)NVFP4 (opens in a new tab)GGUF (opens in a new tab)
Problem and decision
Problem

Remove refusal behavior from a 30.7B multimodal model without losing a deployable format set.

My contribution & decision

Applied weight-level abliteration, then carried the same model lineage through BF16, ModelOpt NVFP4, and a GGUF K-quant ladder. For multimodal NVFP4 serving, the vision tower, embedder, and lm_head stayed in BF16.

Read the engineering notes →

Ornith 1.0 35B · NVFP4

~69 GB → ~23 GBExperts-only NVFP4 · one Blackwell GPU

Result

About 23 GB versus 69 GB BF16, validated to load and generate with vLLM on an RTX PRO 6000 Blackwell.

Evidence: Ornith-1.0-35B-NVFP4 (opens in a new tab)
Problem and decision
Problem

Fit a 34.7B Qwen3.5-MoE reasoning checkpoint onto a single Blackwell workstation without quantizing every subsystem.

My contribution & decision

Quantized routed experts to NVFP4 with NVIDIA ModelOpt; kept attention QKV, shared experts, and the vision encoder at higher precision.

Read the engineering notes →

MiniMax-M3-uncensored · 428B MoE

428B · BF16Weight-level behavior work · 796 GB published

Result

0/16 hard refusals on the published sample; multimodal behavior, reasoning, and MoE routing were smoke-tested, not fully benchmarked.

Evidence: MiniMax-M3-uncensored (opens in a new tab)
Problem and decision
Problem

Study refusal behavior in a 428B multimodal MoE while preserving its reasoning and routing structure.

My contribution & decision

Modified attention o_proj and every residual-writing down_proj across all 60 layers; released the result as 796 GB BF16 in 59 shards.

Read the engineering notes →
View all Hugging Face releases (opens in a new tab)
All releases in the snapshot (28)
ModelFormatReleasedDownloads · 30 days
GLM-5.3-NVFP4 (opens in a new tab)NVFP4213
Ornith-1.5-35B-A3B-uncensored-MLX-8bit (opens in a new tab)MLX 8bit336
Ornith-1.5-35B-A3B-uncensored-MLX-6bit (opens in a new tab)MLX 6bit837
Ornith-1.5-35B-A3B-uncensored-MLX-4bit (opens in a new tab)MLX 4bit457
Ornith-1.5-35B-A3B-uncensored-MLX (opens in a new tab)MLX393
Ornith-1.5-9B-uncensored-MLX-8bit (opens in a new tab)MLX 8bit330
Ornith-1.5-9B-uncensored-MLX-6bit (opens in a new tab)MLX 6bit868
Ornith-1.5-9B-uncensored-MLX-4bit (opens in a new tab)MLX 4bit383
Ornith-1.5-9B-uncensored-MLX (opens in a new tab)MLX334
Ornith-1.5-35B-A3B-uncensored-GGUF (opens in a new tab)GGUF1,313
Ornith-1.5-35B-A3B-uncensored-NVFP4 (opens in a new tab)NVFP4631
Ornith-1.5-9B-uncensored-GGUF (opens in a new tab)GGUF1,055
Ornith-1.5-9B-uncensored-NVFP4 (opens in a new tab)NVFP4161
Ornith-1.5-397B-uncensored-NVFP4 (opens in a new tab)NVFP4403
Ornith-1.5-397B-uncensored-FP8 (opens in a new tab)FP848
Laguna-S-2.1-Uncensored (opens in a new tab)BF1641
MiniMax-M3-uncensored-NVFP4 (opens in a new tab)NVFP415,732
gemma-4-31B-it-uncensored-MLX-4bit (opens in a new tab)MLX 4bit182
gemma-4-31B-it-uncensored-MLX-5bit (opens in a new tab)MLX 5bit143
gemma-4-31B-it-uncensored-MLX-6bit (opens in a new tab)MLX 6bit139
gemma-4-31B-it-uncensored-MLX-8bit (opens in a new tab)MLX 8bit107
gemma-4-31B-it-uncensored-MLX-bf16 (opens in a new tab)MLX bf16146
MiniMax-M3-uncensored (opens in a new tab)BF16375
gemma-4-31B-it-uncensored-GGUF (opens in a new tab)GGUF1,407
gemma-4-31B-it-uncensored (opens in a new tab)BF1655
gemma-4-31B-it-uncensored-NVFP4 (opens in a new tab)NVFP4209
GRM-2.6-Plus-NVFP4 (opens in a new tab)NVFP49
Ornith-1.0-35B-NVFP4 (opens in a new tab)NVFP4839

Atom feedJSON

Attack the agent. Harden the system.

I connect model-behavior research with the controls needed around agents: red teaming, prompt injection, MCP attack paths, containment, policy enforcement, and auditability.

Model behavior

Abliteration, alignment analysis, refusal measurement, and adversarial evaluation across released checkpoints.

Agent attack surface

LLM red teaming, prompt injection, MCP scanning, tool poisoning, exfiltration paths, and tool-chain abuse.

Containment & audit

Runtime policy enforcement, egress controls, human approval, signed audit trails, and compliance evidence.

Production systems, end to end

The model is only one component. I build the Linux, GPU, Kubernetes, inference, networking, observability, and security path around it.

  1. WEIGHTSPublished checkpoints and model behavior
  2. TUNELoRA · behavior work
  3. QUANTIZENVFP4 · GGUF
  4. SERVEvLLM · SGLang
  5. ATTACKMCP · agents
  6. HARDENPolicy · audit

AI inference platform

I build and operate a GitOps-managed Talos/Kubernetes inference platform across NVIDIA and AMD GPUs, covering model preparation, backend readiness, streaming, and operational telemetry. The case study documents a vLLM-router implementation and its trade-offs from a specific point in that work.

Private platform · public architecture notes

Read the platform case study →

Audit-grade delivery

Technical delivery and evidence in FINMA, DORA, and TLPT environments.

FINMA · DORA · TLPT

Lead from the difficult technical work

I lead by reducing ambiguity, making the hard technical decisions, and staying with the problem until the system ships.

Selected work

Open-source AI-security tools and systems I build, publish, and operate.

Rust · React · PostgreSQL · AI workflows

paperless-archivist

Security-first AI automation for Paperless-ngx: resumable OCR and tagging workflows, validation-gated autopilot, human review, cited document chat, RBAC, and auditable actions.

Product code, shipped quietly

Twenty years of increasing technical scope

From Linux and high-availability systems to cloud, offensive security, model work, and global customer delivery.

Global offensive-security delivery

Embedded with C-level at Tier-1 banks, insurers, and automotive companies while remaining hands-on.

Cloud architecture to security practice

Practice building, APT simulation, and custom tooling shipped under engagement deadlines.

Infrastructure to automation

Configuration automation at scale, engineer training, and Go backend automation.

Linux engineering to solution architecture

High-availability systems in colocation, then a global IT rebuild with audited security.

Show full career history
  1. Associate Director, Offensive Security Global @ Kyndryl

    Embedded with C-Level at Tier-1 banks, insurers, automotive across 11 countries. 100+ on-site engagements. Custom tooling shipped under engagement deadlines. DORA / FINMA / TLPT.

  2. Senior Red Team Lead Engineer, Global @ Kyndryl

    Forward-deployed APT simulation for Fortune 500. Custom tooling and rapid prototyping in-engagement — 40% efficiency gain in delivery.

  3. Associate Partner Security @ Kyndryl

    Built consulting practice and GTM strategy after IBM spin-off. Pre-sales scoping and customer-embedded delivery model.

  4. Security Consultant & Cloud Architect @ IBM

    Cloud transformations — AWS, GCP, OpenShift, K8s. Founded consulting security division.

  5. DevOps Engineer Expert @ Avectris AG

    Founded Linux department. Backend automation in Go (80% workload reduction). Scrum Master.

  6. DevOps Engineer @ Swisscom AG

    Automation for Swisscom TV (300+ channels). Voice control system. 35+ engineers trained.

  7. Linux Architect @ EveryWare AG

    Enterprise infrastructure for Allianz, JobCloud, UBS AG.

  8. Linux DevOps Engineer @ CTBTO (United Nations)

    Migrated 600 nodes from CFEngine to Puppet. Near 100% config automation.

  9. Lead Solution Architect @ Schrack Seconet AG

    Rebuilt global IT (HQ + 16 branches). 100% security audit pass. ERP RPO: 1 day → 15 min.

  10. Linux Engineer @ Freelance

    HA systems in Interxion datacenters. 99.99% uptime.

Credentials

39 credentials across offensive security, Linux, automation, containers, and cloud.

Show all 39

Security & Offensive

CompTIA

Red Hat

Linux Foundation & LPI

LFCSLinux Foundation & LPI (opens in a new tab)LPI-3 (304)Linux Foundation & LPILPI-3 (303)Linux Foundation & LPI

Cloud & ITSM

Chef / DevOps

Extending ChefChef / DevOpsCertified Chef DeveloperChef / DevOpsDeploying CookbooksChef / DevOpsLocal Cookbook DevChef / DevOpsBasic Chef FluencyChef / DevOps

Interactive terminal

Explore the Evidence CLI, then optionally run a fictional local delivery mission. Commands and file content are never transmitted; writable files use origin-private storage only after you enable it.

Terminal output

Commands run only in this browser. Command and file content is never sent to a server.

Commands run only in this browser. Command and file content is never sent to a server.

Writable files are saved locally only after you enable them.

Some commands are hidden. Persistence pays.

Interactive features are unavailable. All evidence and contact paths remain available; only the terminal and display settings are inactive.

Build the hard system with me.

I am interested in hands-on Staff, Principal, and Forward Deployed roles at AI companies, plus selective technical collaboration.

Display settings

Display choices are remembered for this tab session only. No tracking.

Matrix background
Theme