WALKTHROUGH · 5 MIN

AI, cybersecurity, and the performance breakthroughs

Five minutes on the systems, the projects, and the numbers behind them.

AI / ML engineer  ·  Lahore, Pakistan

I build the systems that tell you when the model is wrong.

Most AI ships on the assumption that the output is right. I work on the other half: the verdict, the confidence attached to it, and the evidence behind both. Right now that means a five-tier pipeline deciding on live customer mail in under three milliseconds, at 99.6% precision.

99.6%classifier precision in production
2.66msaverage verdict, under 12 ms at p99
~2Mmessages a day on a single A100

Open to AI and ML engineering roles · remote, or relocating

7c426e02

In production

Deciding on other people's traffic right now.

Five-tier email classification

Data443 · deciding on live customer mail

A mail server cannot wait. Every millisecond of classification is a millisecond of delivery latency for a real customer, so the budget was single-digit milliseconds, and an LLM call is three orders of magnitude too slow to sit in that path. The answer was to stop treating classification as one decision. Cheap deterministic checks resolve the overwhelming majority, and only genuinely ambiguous mail escalates to the ML classifier and an asynchronous LLM pass, which is what keeps both latency and GPU cost viable at this volume. False-positive and false-negative reports route back as retraining samples, so the model tracks real traffic rather than a frozen dataset.

precision99.6% on the ML classifier
resolution99.7% resolved without escalation
latency2.66 ms average, under 12 ms p99
throughput~2M messages/day on one A100
modelGemma 3 4B, PEFT/LoRA, served on vLLM
loopFP/FN reports feed the retraining corpus
0384d2b7

Published

One install away. Every number below is checkable.

Avow

an autonomous build loop that refuses to trust itself

It writes a test suite, builds until the tests pass, then asks whether those tests were rigorous enough to believe: hold-out splits, mutation, property tests, reference oracles, differential fuzzing. It returns one calibrated confidence rather than a green tick, and escalates a pass it does not believe.

tests284
size8,625 lines of Python
licenceApache-2.0

Verbatim

an AI memory layer for engineering teams

Meetings, Slack threads, pull request discussions and calendars reconciled into one state graph of commitments, decisions and blockers that survives across sessions. Deadline tracking, contradiction detection, auto-standups, and an MCP server that hands that state to any agent. Runs on hosted models or entirely local ones.

tests519
size23,555 lines of Python
licenceMIT

Vaikora

a policy gateway for AI agent runtime control

Every agent action is checked against deterministic policy before it executes, and each decision is signed into a SHA-256 append-only chain that an auditor can replay without the vendor's cooperation. Adapters for OpenAI, Anthropic, Gemini and OpenRouter, across HTTP, MCP and agent-to-agent.

enforcementsub-500 ms p95
verdictsallow / log / constrain / block
sdksPyPI and npm
licenceMIT
2a083116

Shipped to users

Through app-store review and into people's hands.

Susanoo

a privacy transparency app, live on Google Play

Shows people which companies their installed apps are contacting, in real time. It reads DNS and TLS SNI through a local VpnService and attributes each hostname using an on-device classifier. Nothing leaves the phone, so the privacy claim is structural rather than a promise, and the classifier is open source so it can be checked.

packageio.susanoo.android
stackKotlin, VpnService, DNS + TLS SNI
openclassifier is public

Convaa

a realtime multi-user AI workspace, web and iOS

A team shares one live session and watches the same thread stream token by token: presence, revision history with diffs, comments that become assignable action items, and the ability to halt a response mid-flight while keeping whatever already arrived. The SwiftUI client adds OAuth handoff and an offline send queue so a prompt written without signal still sends.

webReact, Supabase realtime, Postgres RLS
ios14,613 lines of Swift
testsXCUITest driving the real screens

What I reach for

Chosen because a system had to run, not because it was on a list.

models and serving

vLLM · Unsloth · PEFT/LoRA · Gemma · Anthropic, OpenAI and Gemini APIs · MCP

training and evaluation

PyTorch · scikit-learn · gradient boosting · hold-out and mutation testing · calibration

systems

FastAPI · Kafka · Redis · PostgreSQL · Supabase · Kubernetes · Helm · Prometheus

languages

Python · TypeScript · Swift · Kotlin · Java · C · SQL

Every number here has a source.

If I claim 99.6% precision or 519 tests, you should be able to go and check. Three of these are one pip install away, one is on Google Play, and the code is public wherever the licence allows. I would rather be checked than believed.