Swatantra Yadav, systems and backend engineer, Ayodhya
Use the left and right arrow keys to move through this carousel, or the previous and next buttons below it. You can also drag it sideways.
Swatantra Yadav, Ayodhya, India
A computer science undergraduate at KIET Group of Institutions building backend systems, cloud infrastructure, and low-level operating system internals. Contributor to Apache NuttX RTOS. Architect of AEGIS zero-trust IAM. Kernels, concurrency, distributed storage, and fault tolerance.
- backend engineer
- systems programmer
- open source contributor
Upcoming Next
Live work, not
shipped work. Open
in front of me now.
tip!Click on the image to explore
Guarded AgentsIn progressAutonomous Agent Security · CybersecurityA multi-layered software engineering architecture reducing autonomous LLM agent attack success from 48.7% to 4.4%.
Build, Break Prove
I build the system first, then the thing whose only job is to prove it wrong. Architecture is not scaffolding around the system, it is the foundation: an engine built for high concurrency, low latency, and distributed resilience. The claim is worth exactly what the adversary failed to break.
Merged contributions
Research
Published work, and what is currently open in front of me.
Autonomous AI agents developed using LLMs can reason, invoke tools, browse the web, and execute actions on behalf of users. The very autonomy of such agents creates a direct attack vector linking untrusted external text to side effects in runtime environments. In this paper, we formalize a five-category threat model covering prompt injection, privilege escalation, data exfiltration, destructive execution, and malicious tool invocation. We design a multi-layered software engineering architecture featuring origin tagging, a least-privilege policy engine with typed schemas, human-in-the-loop intervention, and container sandboxing with egress control. Across 1,000 empirical trials, the architecture slashes attack success rates from 48.7% to 4.4% (a 90.9% relative risk reduction) while preserving 88.7% task success.
Deterministic Replay & Fault Isolation in Concurrency Runtimes
In progress
Investigating non-deterministic race conditions and fault isolation across multi-threaded RTOS kernels (Apache NuttX) and distributed event-driven scalers (KEDA). When high-priority interrupt routines or concurrent state machines race, transient memory corruption leaves zero post-mortem crash telemetry. I am building deterministic execution harnesses that seed pseudo-random scheduler preemption and trace race windows at microsecond precision to guarantee bit-identical fault reproduction: same seed, same crash.
Same seed, same crash
A bug that only appears sometimes has not been found; it has been noticed. Every system here is built so that a failure carries a seed, and the seed replays the failure on any machine, in any order, as many times as you want.
That is the whole discipline: make the machine deterministic enough that its bugs can be handed to somebody else. contribution index.
What broke
tip!Hover, focus or swipe to read
-
A timer race that panicked the networking stack
Under rapid peer reconnects and TCP resets, a race between
tcp_timer_expiry()andtcp_stop_timer()referenced connection memory after teardown, causing use-after-free kernel panics. -
A double unlock that crashed the SMP kernel
When serial interrupts were suppressed in
esp32_txint, an early exit branch released the spinlock but left the normal return path to unlock it a second time, corrupting SMP locks under heavy TX load. -
A zero-offset edge case that scaled pods to max
When a new Kafka consumer group had not yet committed partition offsets, lag calculations evaluated uninitialized partitions as maximal lag, triggering immediate erroneous autoscaling to maximum replicas.
-
An unsynchronized fallback that cascaded OOMs
Concurrent requests hitting GPU memory exhaustion triggered unsynchronized CPU fallback routines, causing duplicate checkpoint reloading and thread deadlocks across in-flight batch evaluation workers.
Open source
Merged!
80 merged · 8 repositories · 5 organisations
Ordered by the name
you would recognise,
not by the date.
tip!Expand an organisation for its pull requests
- Apache NuttXTwenty-eight merged pull requests across Apache NuttX RTOS kernel, networking TCP timer concurrency, ESP32 SMP spinlocks, STM32 HAL drivers, and Apache Fory serialization.
- Cloud Native & SystemsContributions across CNCF KEDA for Kubernetes autoscaling transport, REA for reverse-engineering evidence pipelines, Laya for low-latency router query gating, and Hugging Face.
PR #20981boards/arm: Align ARM32 idle stack to AAPCS-32 requirement
Merged pull request #20981 to Apache nuttx. Resolved upstream defect/feature with verified conformance testing.
Open PR #20981 on Apache nuttxPR #20973ci/build: Skip heavy build matrix on draft pull requests
Merged pull request #20973 to Apache nuttx. Resolved upstream defect/feature with verified conformance testing.
Open PR #20973 on Apache nuttxPR #20908arch/arm: Bound SDMMC/SDIO command response wait by time
Merged pull request #20908 to Apache nuttx. Resolved upstream defect/feature with verified conformance testing.
Open PR #20908 on Apache nuttxPR #20894drivers/serial: Fix zero-length second TX DMA transfer descriptor on buffer wrap
Merged pull request #20894 to Apache nuttx. Resolved upstream defect/feature with verified conformance testing.
Open PR #20894 on Apache nuttxPR #20874cmake: Fix cross-compilation support in add_subdirectory mode
Merged pull request #20874 to Apache nuttx. Resolved upstream defect/feature with verified conformance testing.
Open PR #20874 on Apache nuttxPR #20820fs/vfs: Add FS_UIO to option out vector I/O
Merged pull request #20820 to Apache nuttx. Resolved upstream defect/feature with verified conformance testing.
Open PR #20820 on Apache nuttxPR #20787ci: reorganize ARM testlists by family and add chip build filter
Merged pull request #20787 to Apache nuttx. Resolved upstream defect/feature with verified conformance testing.
Open PR #20787 on Apache nuttxPR #20773arch/arm: remove undefined CONFIG_SPI_DMAPRIO references
Merged pull request #20773 to Apache nuttx. Resolved upstream defect/feature with verified conformance testing.
Open PR #20773 on Apache nuttxPR #20770arch/espressif: add stdatomic.h shim for ATOMIC_VAR_INIT
Merged pull request #20770 to Apache nuttx. Resolved upstream defect/feature with verified conformance testing.
Open PR #20770 on Apache nuttxPR #20769arch/xtensa/esp32: fix double spinlock unlock in esp32_txint
Merged pull request #20769 to Apache nuttx. Resolved upstream defect/feature with verified conformance testing.
Open PR #20769 on Apache nuttxPR #20765include/limits.h: decouple _POSIX_* invariant constants from Kconfig
Merged pull request #20765 to Apache nuttx. Resolved upstream defect/feature with verified conformance testing.
Open PR #20765 on Apache nuttxPR #20711arch/arm/cmake: support CONFIG_PIC with PIC flags and reserved r9
Merged pull request #20711 to Apache nuttx. Resolved upstream defect/feature with verified conformance testing.
Open PR #20711 on Apache nuttxPR #20706AVR DA/DB: support for zero latency interrupt handlers
Merged pull request #20706 to Apache nuttx. Resolved upstream defect/feature with verified conformance testing.
Open PR #20706 on Apache nuttxPR #20693libs/libc/netdb: separate h_errno from EAI error codes
Merged pull request #20693 to Apache nuttx. Resolved upstream defect/feature with verified conformance testing.
Open PR #20693 on Apache nuttxPR #20691libs/libc/netdb: default ai_protocol and multi-transport in getaddrinfo
Merged pull request #20691 to Apache nuttx. Resolved upstream defect/feature with verified conformance testing.
Open PR #20691 on Apache nuttxPR #20682libs/libm: support 128-bit quad-precision and universal fallback in truncl
Merged pull request #20682 to Apache nuttx. Resolved upstream defect/feature with verified conformance testing.
Open PR #20682 on Apache nuttxPR #20677AVR DA/DB: fix for build failure and other smaller fixes
Merged pull request #20677 to Apache nuttx. Resolved upstream defect/feature with verified conformance testing.
Open PR #20677 on Apache nuttxPR #20642arch/arm/stm32: fix invalid device pointer in adc_sampletime_cfg
Merged pull request #20642 to Apache nuttx. Resolved upstream defect/feature with verified conformance testing.
Open PR #20642 on Apache nuttxPR #20641net/tcp: fix use-after-free race and nullptr dereference in tcp_timer
Merged pull request #20641 to Apache nuttx. Resolved upstream defect/feature with verified conformance testing.
Open PR #20641 on Apache nuttxPR #20624docs/freedom-k64f: Migrate README.txt to RST
Merged pull request #20624 to Apache nuttx. Resolved upstream defect/feature with verified conformance testing.
Open PR #20624 on Apache nuttxPR #20623docs/teensy-3.x: Migrate README.txt to RST
Merged pull request #20623 to Apache nuttx. Resolved upstream defect/feature with verified conformance testing.
Open PR #20623 on Apache nuttxPR #20605docs/arduino-m0: Migrate README.txt to RST
Merged pull request #20605 to Apache nuttx. Resolved upstream defect/feature with verified conformance testing.
Open PR #20605 on Apache nuttxPR #20603docs/at32f437-mini: Migrate README.txt to RST
Merged pull request #20603 to Apache nuttx. Resolved upstream defect/feature with verified conformance testing.
Open PR #20603 on Apache nuttxPR #20586Documentation/netutils: add comprehensive guide for telnetd
Merged pull request #20586 to Apache nuttx. Resolved upstream defect/feature with verified conformance testing.
Open PR #20586 on Apache nuttxPR #20580ci: enable ccache persistence across CI workflow runs
Merged pull request #20580 to Apache nuttx. Resolved upstream defect/feature with verified conformance testing.
Open PR #20580 on Apache nuttxPR #20578Documentation/netutils: add comprehensive guide for netinit
Merged pull request #20578 to Apache nuttx. Resolved upstream defect/feature with verified conformance testing.
Open PR #20578 on Apache nuttxPR #20514Documentation/netutils: add comprehensive guide for ftpd
Merged pull request #20514 to Apache nuttx. Resolved upstream defect/feature with verified conformance testing.
Open PR #20514 on Apache nuttxPR #20513Documentation/netutils: add comprehensive guide for dhcpc
Merged pull request #20513 to Apache nuttx. Resolved upstream defect/feature with verified conformance testing.
Open PR #20513 on Apache nuttxPR #20493Documentation/netutils: add comprehensive guide for tftpc
Merged pull request #20493 to Apache nuttx. Resolved upstream defect/feature with verified conformance testing.
Open PR #20493 on Apache nuttxPR #20472Documentation/netutils: add comprehensive guide for webclient
Merged pull request #20472 to Apache nuttx. Resolved upstream defect/feature with verified conformance testing.
Open PR #20472 on Apache nuttxPR #3920audioutils: Add CMake build support for morsey and rtttl-c
Merged pull request #3920 to Apache nuttx. Resolved upstream defect/feature with verified conformance testing.
Open PR #3920 on Apache nuttxPR #3917ci/build: Skip heavy build matrix on draft pull requests
Merged pull request #3917 to Apache nuttx. Resolved upstream defect/feature with verified conformance testing.
Open PR #3917 on Apache nuttxPR #3913nshlib/nsh_netcmds: set AI_CANONNAME and SOCK_STREAM hints in cmd_nslookup
Merged pull request #3913 to Apache nuttx. Resolved upstream defect/feature with verified conformance testing.
Open PR #3913 on Apache nuttxPR #3891ci: reorganize ARM testlists by family to match nuttx PR #20787
Merged pull request #3891 to Apache nuttx. Resolved upstream defect/feature with verified conformance testing.
Open PR #3891 on Apache nuttxPR #3862games/nxdoom: add CMake build support
Merged pull request #3862 to Apache nuttx. Resolved upstream defect/feature with verified conformance testing.
Open PR #3862 on Apache nuttxPR #3861games: add CMake build support for snake, brickmatch, and match4
Merged pull request #3861 to Apache nuttx. Resolved upstream defect/feature with verified conformance testing.
Open PR #3861 on Apache nuttxPR #3856database/sqlite: add CMake build support
Merged pull request #3856 to Apache nuttx. Resolved upstream defect/feature with verified conformance testing.
Open PR #3856 on Apache nuttxPR #3833tools/check-hash: enhance hash validation and integrate with Make.defs, LVGL, and zlib
Merged pull request #3833 to Apache nuttx. Resolved upstream defect/feature with verified conformance testing.
Open PR #3833 on Apache nuttxPR #3809testing/ostest: shrink default round-robin getprime test duration
Merged pull request #3809 to Apache nuttx. Resolved upstream defect/feature with verified conformance testing.
Open PR #3809 on Apache nuttxPR #194ci: split website build and documentation build into separate jobs
Merged pull request #194 to Apache nuttx. Resolved upstream defect/feature with verified conformance testing.
Open PR #194 on Apache nuttxPR #193ci: build only affected documentation and preserve historical releases
Merged pull request #193 to Apache nuttx. Resolved upstream defect/feature with verified conformance testing.
Open PR #193 on Apache nuttxPR #192ci: upgrade GitHub Actions to Node.js 24 runtime
Merged pull request #192 to Apache nuttx. Resolved upstream defect/feature with verified conformance testing.
Open PR #192 on Apache nuttxPR #191download.md: append ?action=download to archive download links
Merged pull request #191 to Apache nuttx. Resolved upstream defect/feature with verified conformance testing.
Open PR #191 on Apache nuttxPR #4161Enforce registration freeze after first root serialize/deserialize operation
Merged pull request #4161 to Apache fory. Resolved upstream defect/feature with verified conformance testing.
Open PR #4161 on Apache fory
PR #8228issue I openedPrometheus Scaler: Refactor AWS SigV4 transport initialization
In `pkg/scalers/prometheus_scaler.go`, simplifies the AWS SigV4 HTTP client transport configuration in `NewPrometheusScaler`. The `err != nil` condition already handles error logging and returns early, making the subsequent `err == nil` che.
Open PR #8228 on CNCF kedaPR #1886Cron Scaler: Clarify time window semantics and suggest CronJobs
In `content/docs/2.21/scalers/cron.md` and `content/docs/2.22/scalers/cron.md`, clarifies that the Cron scaler defines an active time window during which target workloads remain scaled rather than executing recurring tasks. Suggests using Kubernetes native CronJobs or KEDA ScaledJobs for periodic workloads.
Open PR #1886 on CNCF keda-docs
PR #1286Preserve label text when renaming options without descriptions (#1285)
Merged pull request #1286 to Laya laya. Resolved upstream defect/feature with verified conformance testing.
Open PR #1286 on Laya layaPR #1201issue I openedValidate questions in predict before checkpoint load (#707)
Merged pull request #1201 to Laya laya. Resolved upstream defect/feature with verified conformance testing.
Open PR #1201 on Laya layaPR #1165Validate state is not None in route_batch before model load (#707)
Merged pull request #1165 to Laya laya. Resolved upstream defect/feature with verified conformance testing.
Open PR #1165 on Laya layaPR #1153Clear stale low_confidence marker at min_confidence 0.0 (#910)
Merged pull request #1153 to Laya laya. Resolved upstream defect/feature with verified conformance testing.
Open PR #1153 on Laya layaPR #1117issue I openedPort cached embedder to TypeScript SDK
Merged pull request #1117 to Laya laya. Resolved upstream defect/feature with verified conformance testing.
Open PR #1117 on Laya layaPR #967Add --eval, abstention threshold fitting, and before/after train_report.json (#887)
Resolves #887 (Phase 3). Follows up on #931.
Open PR #967 on Laya layaPR #962Ignore false positive sha256 checksums in gitleaks (#961)
# Security CI Incident Analysis: Gitleaks False Positive on Benchmark Artifacts.
Open PR #962 on Laya layaPR #931Add laya-train CLI and CSV/expected dataset loaders (#887)
Merged pull request #931 to Laya laya. Resolved upstream defect/feature with verified conformance testing.
Open PR #931 on Laya layaPR #912Accept and compose per-call hooks in predict_batch and route_batch (#909)
Merged pull request #912 to Laya laya. Resolved upstream defect/feature with verified conformance testing.
Open PR #912 on Laya layaPR #908 feat(hooks): add OptionStabilityHook for metamorphic reliability signal (#635)
Merged pull request #908 to Laya laya. Resolved upstream defect/feature with verified conformance testing.
Open PR #908 on Laya layaPR #902Port histogram-binning recalibration to laya-ts
Merged pull request #902 to Laya laya. Resolved upstream defect/feature with verified conformance testing.
Open PR #902 on Laya layaPR #900Port per-bucket minConfidence map to on-device engine
# feat(ts): port per-bucket minConfidence map to on-device engine.
Open PR #900 on Laya layaPR #883Reject non-finite hooks_timeout and enforce in API contract
Merged pull request #883 to Laya laya. Resolved upstream defect/feature with verified conformance testing.
Open PR #883 on Laya layaPR #882Accept sequences in hooks_installed and enforce in API contract
Merged pull request #882 to Laya laya. Resolved upstream defect/feature with verified conformance testing.
Open PR #882 on Laya layaPR #810issue I openedSynchronize GPU OOM fallback to protect concurrent in-flight inference (#649)
Merged pull request #810 to Laya laya. Resolved upstream defect/feature with verified conformance testing.
Open PR #810 on Laya layaPR #761Add SECURITY.md vulnerability reporting policy (#740)
Merged pull request #761 to Laya laya. Resolved upstream defect/feature with verified conformance testing.
Open PR #761 on Laya layaPR #723Per-checkpoint SHA-256 artifact verification in Router
Merged pull request #723 to Laya laya. Resolved upstream defect/feature with verified conformance testing.
Open PR #723 on Laya layaPR #684Add production use cases and architectural patterns (#675)
Merged pull request #684 to Laya laya. Resolved upstream defect/feature with verified conformance testing.
Open PR #684 on Laya layaPR #676Honour score minimum in structured projection (#663)
Merged pull request #676 to Laya laya. Resolved upstream defect/feature with verified conformance testing.
Open PR #676 on Laya layaPR #648Validate questions and reject null state before serialization (#607, #608)
Merged pull request #648 to Laya laya. Resolved upstream defect/feature with verified conformance testing.
Open PR #648 on Laya layaPR #644Port confidence-based abstention gating on answer_confidence (#361)
Merged pull request #644 to Laya laya. Resolved upstream defect/feature with verified conformance testing.
Open PR #644 on Laya layaPR #618Run missing test suites in CI and guard against test omission (#399)
Merged pull request #618 to Laya laya. Resolved upstream defect/feature with verified conformance testing.
Open PR #618 on Laya layaPR #566Forward and validate per-request token budget overrides (…
Merged pull request #566 to Laya laya. Resolved upstream defect/feature with verified conformance testing.
Open PR #566 on Laya layaPR #563Add automated npm release workflow with provenance (#288)
Merged pull request #563 to Laya laya. Resolved upstream defect/feature with verified conformance testing.
Open PR #563 on Laya layaPR #499Stringify score legend values and document serve choice limi…
Merged pull request #499 to Laya laya. Resolved upstream defect/feature with verified conformance testing.
Open PR #499 on Laya layaPR #492Port mixed-segment detection from Python analyse() (#384)
Merged pull request #492 to Laya laya. Resolved upstream defect/feature with verified conformance testing.
Open PR #492 on Laya laya
PR #4174issue I openedAdmit investigation tools into session lifecycle (#4002)
Admit investigation tools into active session supervision lifecycle to ensure tools register before consumer capability queries.
Open PR #4174 on morluto reaPR #4065Retain selected freshness requirement in comparison Evidence parameters
Preserved selected evidence freshness requirement through process comparison evidence parameters without dropping freshness bounds.
Open PR #4065 on morluto reaPR #3639Preserve overridden runner variables and test isolation on Windows
Preserved runner environment variables on Windows platform, ensuring test isolation across clean run directories.
Open PR #3639 on morluto rea
PR #34215in reviewMulti-modal inference cache and streaming pipeline bounds
Optimization for multi-modal generation pipeline memory consumption during concurrent batch evaluations across transformer checkpoints.
Open on Hugging Face
