Go developer working at the infrastructure layer — container runtimes, VMM internals, and the machinery underneath Kubernetes. I care about how systems actually work, not just how they're configured.
Most of what I build is open source: my own tooling for running and governing AI agents on Kubernetes, plus contributions merged into CNCF projects.
- everest-mcp — MCP gateway exposing Kubernetes database operations to AI agents, with RBAC governance
- mcp-control-tower — observability and governance for AI tool calls flowing through an MCP gateway
- ai-agent-sandbox — isolated sandbox for running AI agents safely
- Container runtimes & VMM internals — urunc (boots unikernels as OCI containers) · urunit (minimal init for Linux guests)
- CNCF & Kubernetes — Volcano · KubeArmor · KubeStellar · PipeCD · Headlamp · Koordinator
Go · Kubernetes · Docker · gRPC · Helm · Prometheus · Grafana · OpenTelemetry · PostgreSQL · GitHub Actions
Distributed systems internals · Go concurrency · runtime security · ArgoCD



