The Backend Portfolio

Swatantra Yadav, systems and backend engineer, Ayodhya

Printed plate for Aegis: an inked slab fanning out through an IAM authorization routing graph into a grid of secure permission cells.AegisProduction IAM & SecurityEnterprise-grade IAM portal with OAuth 2.0, RBAC, MFA, Redis session caching, token rate limiting, and PostgreSQL audit logging.
All Work!

Systems I built,
engineered for scale,
concurrency, and resilience.

tip!Drag sideways to navigate

Printed plate for Vision: optical verification columns converging along fine ray lines into an authenticity focal point.VisionAutonomous Media VerificationAutonomous AI computer vision platform delivering tamper-proof media verification, environmental monitoring, and sustainability evidence.
Printed plate for EloNode: a stack of ranked tier nodes with an algorithmic percentile graph branching across competitors.EloNodePercentile Contest Rating EngineCoding contest platform calculating beaten-participant percentiles with transparent performance ratings and dynamic rank formula adjustments.
Printed plate for Go IaC Engine: automated infrastructure state nodes connected by cloud provisioning pipelines across AWS.Go IaC EngineCloud Infrastructure EngineHigh-performance Infrastructure as Code engine built in Go (Gin) for programmatic AWS resource provisioning, remote state locking, and REST-driven orchestration.
IndexAll WorkEvery project, from distributed backends to systems engines.

Use the left and right arrow keys to move through this carousel, or the previous and next buttons below it. You can also drag it sideways.

Swatantra Yadav, Ayodhya, India

SwatantraYadav
SystemsAdversary!
$ uname -a Linux backend-core 6.8.0-rc7 x86_64 user swatantra.yadav location ayodhya, india coords 26°47' N 82°12' E zone IST (UTC+05:30) build backend / systems / oss # focus BACKEND SYSTEMS DISTRIBUTED ARCHITECTURE CONTRIBUTOR - APACHE NUTTX POSIX APPS SYSCALL & VFS NUTTX SCHEDULER ZERO-COPY IPC ARCH & BOARD HAL DEVICE DRIVERS # backend metrics (production cluster) requests_total 2.45e+09 p99_latency_ms 12.4 error_rate 0.0004 consensus_violations 0 availability 99.999% p99 latency over time (ms) 120 + 80 | 40 | 0 +

A computer science undergraduate at KIET Group of Institutions building backend systems, cloud infrastructure, and low-level operating system internals. Contributor to Apache NuttX RTOS. Architect of AEGIS zero-trust IAM. Kernels, concurrency, distributed storage, and fault tolerance.

Swatantra in Ferrari F1 race suit
  • backend engineer
  • systems programmer
  • open source contributor
Harness
A perforated postage stamp: an orange crab holding a small ball marked GC, above the printed lines NAME, Swatantra Yadav, and DATE, 2005/08.

Upcoming Next

Live work, not
shipped work. Open
in front of me now.

tip!Click on the image to explore

Printed plate: seven measurement intervals stacked in rows, each a capped line with a dot at its centre, drifting further from a vertical reference rule and widening as they go, three of them in red, inside a ruled box with a tick scale along its foot.Guarded AgentsIn progressAutonomous Agent Security · CybersecurityA multi-layered software engineering architecture reducing autonomous LLM agent attack success from 48.7% to 4.4%.
Printed plate in two panels. Above, one inked node at the left with twelve lines fanning out to separate dots, the red ones at the top and bottom extremes. Below, a histogram of narrow bars, taller at both ends than in the middle, a few of them red.

Build, Break Prove

Build, BreakProve

I build the system first, then the thing whose only job is to prove it wrong. Architecture is not scaffolding around the system, it is the foundation: an engine built for high concurrency, low latency, and distributed resilience. The claim is worth exactly what the adversary failed to break.

Merged contributions

Research

Published work, and what is currently open in front of me.

  • Guarded Agents: Securing Autonomous AI Architectures

    IEEE / Preprint · Swatantra Yadav, Tanmay Krishna Gupta, Tanya Mishra, Suryanshi Singh

    Preprint

    Autonomous AI agents developed using LLMs can reason, invoke tools, browse the web, and execute actions on behalf of users. The very autonomy of such agents creates a direct attack vector linking untrusted external text to side effects in runtime environments. In this paper, we formalize a five-category threat model covering prompt injection, privilege escalation, data exfiltration, destructive execution, and malicious tool invocation. We design a multi-layered software engineering architecture featuring origin tagging, a least-privilege policy engine with typed schemas, human-in-the-loop intervention, and container sandboxing with egress control. Across 1,000 empirical trials, the architecture slashes attack success rates from 48.7% to 4.4% (a 90.9% relative risk reduction) while preserving 88.7% task success.

  • Deterministic Replay & Fault Isolation in Concurrency Runtimes

    No preprint yet · Systems research

    In progress

    Investigating non-deterministic race conditions and fault isolation across multi-threaded RTOS kernels (Apache NuttX) and distributed event-driven scalers (KEDA). When high-priority interrupt routines or concurrent state machines race, transient memory corruption leaves zero post-mortem crash telemetry. I am building deterministic execution harnesses that seed pseudo-random scheduler preemption and trace race windows at microsecond precision to guarantee bit-identical fault reproduction: same seed, same crash.

Same seed, same crash

Printed plate captioned CNCF, KEDA: a trace waterfall of nested spans as stacked bars, one of them in red where an event-scaler trigger was evaluated out of order.
Same
Printed plate captioned NuttX RTOS: a task scheduler execution tree branching down five levels, with one path and its leaf in red, the preemption race condition reproduced.
seed,
Printed plate captioned NVIDIA, garak: a probe and detector matrix, cells filled where an attempt got through and two of them in red.
same
crash

A bug that only appears sometimes has not been found; it has been noticed. Every system here is built so that a failure carries a seed, and the seed replays the failure on any machine, in any order, as many times as you want.

That is the whole discipline: make the machine deterministic enough that its bugs can be handed to somebody else. contribution index.

  • NVIDIA
  • CNCF
  • Apache NuttX
  • Hugging Face

What broke

tip!Hover, focus or swipe to read

Open source

Merged!

72 merged · 8 repositories · 5 organisations

Ordered by the name
you would recognise,
not by the date.

tip!Expand an organisation for its pull requests

  • Apache NuttXTwenty-eight merged pull requests across Apache NuttX RTOS kernel, networking TCP timer concurrency, ESP32 SMP spinlocks, STM32 HAL drivers, and Apache Fory serialization.
  • Cloud Native & SystemsContributions across CNCF KEDA for Kubernetes autoscaling transport, REA for reverse-engineering evidence pipelines, Laya for low-latency router query gating, and Hugging Face.

    • PR #20773Arch/arm: remove undefined CONFIG_SPI_DMAPRIO references

      Merged pull request #20773 to Apache nuttx. Resolved upstream defect/feature with verified conformance testing.

      Open PR #20773 on Apache nuttx

    • PR #20770Arch/espressif: add stdatomic.h shim for ATOMIC_VAR_INIT

      Merged pull request #20770 to Apache nuttx. Resolved upstream defect/feature with verified conformance testing.

      Open PR #20770 on Apache nuttx

    • PR #20769issue I openedArch/xtensa/esp32: fix double spinlock unlock in esp32_txint

      Merged pull request #20769 to Apache nuttx. Resolved upstream defect/feature with verified conformance testing.

      Open PR #20769 on Apache nuttx

    • PR #20765Include/limits.h: decouple _POSIX_* invariant constants from Kconfig

      Merged pull request #20765 to Apache nuttx. Resolved upstream defect/feature with verified conformance testing.

      Open PR #20765 on Apache nuttx

    • PR #20682Libs/libm: support 128-bit quad-precision and universal fallback in truncl

      Merged pull request #20682 to Apache nuttx. Resolved upstream defect/feature with verified conformance testing.

      Open PR #20682 on Apache nuttx

    • PR #20677AVR DA/DB: fix for build failure and other smaller fixes

      Submitted on behalf of Kerogit <kr.git@kerogit.eu> per the patch series and discussion on dev@nuttx.apache.org.

      Open PR #20677 on Apache nuttx

    • PR #20642issue I openedArch/arm/stm32: fix invalid device pointer in adc_sampletime_cfg

      Merged pull request #20642 to Apache nuttx. Resolved upstream defect/feature with verified conformance testing.

      Open PR #20642 on Apache nuttx

    • PR #20641issue I openedNet/tcp: fix use-after-free race and nullptr dereference in tcp_timer

      Merged pull request #20641 to Apache nuttx. Resolved upstream defect/feature with verified conformance testing.

      Open PR #20641 on Apache nuttx

    • PR #20624Docs/freedom-k64f: Migrate README.txt to RST

      Merged pull request #20624 to Apache nuttx. Resolved upstream defect/feature with verified conformance testing.

      Open PR #20624 on Apache nuttx

    • PR #20623Docs/teensy-3.x: Migrate README.txt to RST

      Merged pull request #20623 to Apache nuttx. Resolved upstream defect/feature with verified conformance testing.

      Open PR #20623 on Apache nuttx

    • PR #20605Docs/arduino-m0: Migrate README.txt to RST

      Merged pull request #20605 to Apache nuttx. Resolved upstream defect/feature with verified conformance testing.

      Open PR #20605 on Apache nuttx

    • PR #20603Docs/at32f437-mini: Migrate README.txt to RST

      Merged pull request #20603 to Apache nuttx. Resolved upstream defect/feature with verified conformance testing.

      Open PR #20603 on Apache nuttx

    • PR #20586Documentation/netutils: add comprehensive guide for telnetd

      Merged pull request #20586 to Apache nuttx. Resolved upstream defect/feature with verified conformance testing.

      Open PR #20586 on Apache nuttx

    • PR #20580Enable ccache persistence across CI workflow runs

      Merged pull request #20580 to Apache nuttx. Resolved upstream defect/feature with verified conformance testing.

      Open PR #20580 on Apache nuttx

    • PR #20578Documentation/netutils: add comprehensive guide for netinit

      Merged pull request #20578 to Apache nuttx. Resolved upstream defect/feature with verified conformance testing.

      Open PR #20578 on Apache nuttx

    • PR #20514Documentation/netutils: add comprehensive guide for ftpd

      Merged pull request #20514 to Apache nuttx. Resolved upstream defect/feature with verified conformance testing.

      Open PR #20514 on Apache nuttx

    • PR #20513Documentation/netutils: add comprehensive guide for dhcpc

      Merged pull request #20513 to Apache nuttx. Resolved upstream defect/feature with verified conformance testing.

      Open PR #20513 on Apache nuttx

    • PR #20493Documentation/netutils: add comprehensive guide for tftpc

      Merged pull request #20493 to Apache nuttx. Resolved upstream defect/feature with verified conformance testing.

      Open PR #20493 on Apache nuttx

    • PR #20472Documentation/netutils: add comprehensive guide for webclient

      Merged pull request #20472 to Apache nuttx. Resolved upstream defect/feature with verified conformance testing.

      Open PR #20472 on Apache nuttx

    • PR #3862Games/nxdoom: add CMake build support

      Merged pull request #3862 to Apache nuttx. Resolved upstream defect/feature with verified conformance testing.

      Open PR #3862 on Apache nuttx

    • PR #3861Games: add CMake build support for snake, brickmatch, and match4

      Merged pull request #3861 to Apache nuttx. Resolved upstream defect/feature with verified conformance testing.

      Open PR #3861 on Apache nuttx

    • PR #3856Database/sqlite: add CMake build support

      Merged pull request #3856 to Apache nuttx. Resolved upstream defect/feature with verified conformance testing.

      Open PR #3856 on Apache nuttx

    • PR #3833Tools/check-hash: enhance hash validation and integrate with Make.defs, LVGL, and zlib

      Merged pull request #3833 to Apache nuttx. Resolved upstream defect/feature with verified conformance testing.

      Open PR #3833 on Apache nuttx

    • PR #3809Testing/ostest: shrink default round-robin getprime test duration

      Merged pull request #3809 to Apache nuttx. Resolved upstream defect/feature with verified conformance testing.

      Open PR #3809 on Apache nuttx

    • PR #194Split website build and documentation build into separate jobs

      Merged pull request #194 to Apache nuttx. Resolved upstream defect/feature with verified conformance testing.

      Open PR #194 on Apache nuttx

    • PR #193Build only affected documentation and preserve historical releases

      Merged pull request #193 to Apache nuttx. Resolved upstream defect/feature with verified conformance testing.

      Open PR #193 on Apache nuttx

    • PR #191Download.md: append ?action=download to archive download links

      Merged pull request #191 to Apache nuttx. Resolved upstream defect/feature with verified conformance testing.

      Open PR #191 on Apache nuttx

    • PR #4161Enforce registration freeze after first root serialize/deserialize operation

      Merged pull request #4161 to Apache fory. Resolved upstream defect/feature with verified conformance testing.

      Open PR #4161 on Apache fory

    • PR #8228issue I openedPrometheus Scaler: Refactor AWS SigV4 transport initialization

      In `pkg/scalers/prometheus_scaler.go`, simplifies the AWS SigV4 HTTP client transport configuration in `NewPrometheusScaler`. The `err != nil` condition already handles error logging and returns early, making the subsequent `err == nil` che.

      Open PR #8228 on CNCF keda

    • PR #1886Cron Scaler: Clarify time window semantics and suggest CronJobs

      In `content/docs/2.21/scalers/cron.md` and `content/docs/2.22/scalers/cron.md`, clarifies that the Cron scaler defines an active time window during which target workloads remain scaled rather than executing recurring tasks. Suggests using Kubernetes native CronJobs or KEDA ScaledJobs for periodic workloads.

      Open PR #1886 on CNCF keda-docs

    • PR #1286Preserve label text when renaming options without descriptions (#1285)

      Merged pull request #1286 to Laya laya. Resolved upstream defect/feature with verified conformance testing.

      Open PR #1286 on Laya laya

    • PR #1201issue I openedValidate questions in predict before checkpoint load (#707)

      Merged pull request #1201 to Laya laya. Resolved upstream defect/feature with verified conformance testing.

      Open PR #1201 on Laya laya

    • PR #1165Validate state is not None in route_batch before model load (#707)

      Merged pull request #1165 to Laya laya. Resolved upstream defect/feature with verified conformance testing.

      Open PR #1165 on Laya laya

    • PR #1153Clear stale low_confidence marker at min_confidence 0.0 (#910)

      Merged pull request #1153 to Laya laya. Resolved upstream defect/feature with verified conformance testing.

      Open PR #1153 on Laya laya

    • PR #1117issue I openedPort cached embedder to TypeScript SDK

      Merged pull request #1117 to Laya laya. Resolved upstream defect/feature with verified conformance testing.

      Open PR #1117 on Laya laya

    • PR #967Add --eval, abstention threshold fitting, and before/after train_report.json (#887)

      Resolves #887 (Phase 3). Follows up on #931.

      Open PR #967 on Laya laya

    • PR #962Ignore false positive sha256 checksums in gitleaks (#961)

      # Security CI Incident Analysis: Gitleaks False Positive on Benchmark Artifacts.

      Open PR #962 on Laya laya

    • PR #931Add laya-train CLI and CSV/expected dataset loaders (#887)

      Merged pull request #931 to Laya laya. Resolved upstream defect/feature with verified conformance testing.

      Open PR #931 on Laya laya

    • PR #912Accept and compose per-call hooks in predict_batch and route_batch (#909)

      Merged pull request #912 to Laya laya. Resolved upstream defect/feature with verified conformance testing.

      Open PR #912 on Laya laya

    • PR #908 feat(hooks): add OptionStabilityHook for metamorphic reliability signal (#635)

      Merged pull request #908 to Laya laya. Resolved upstream defect/feature with verified conformance testing.

      Open PR #908 on Laya laya

    • PR #902Port histogram-binning recalibration to laya-ts

      Merged pull request #902 to Laya laya. Resolved upstream defect/feature with verified conformance testing.

      Open PR #902 on Laya laya

    • PR #900Port per-bucket minConfidence map to on-device engine

      # feat(ts): port per-bucket minConfidence map to on-device engine.

      Open PR #900 on Laya laya

    • PR #883Reject non-finite hooks_timeout and enforce in API contract

      Merged pull request #883 to Laya laya. Resolved upstream defect/feature with verified conformance testing.

      Open PR #883 on Laya laya

    • PR #882Accept sequences in hooks_installed and enforce in API contract

      Merged pull request #882 to Laya laya. Resolved upstream defect/feature with verified conformance testing.

      Open PR #882 on Laya laya

    • PR #810issue I openedSynchronize GPU OOM fallback to protect concurrent in-flight inference (#649)

      Merged pull request #810 to Laya laya. Resolved upstream defect/feature with verified conformance testing.

      Open PR #810 on Laya laya

    • PR #761Add SECURITY.md vulnerability reporting policy (#740)

      Merged pull request #761 to Laya laya. Resolved upstream defect/feature with verified conformance testing.

      Open PR #761 on Laya laya

    • PR #723Per-checkpoint SHA-256 artifact verification in Router

      Merged pull request #723 to Laya laya. Resolved upstream defect/feature with verified conformance testing.

      Open PR #723 on Laya laya

    • PR #684Add production use cases and architectural patterns (#675)

      Merged pull request #684 to Laya laya. Resolved upstream defect/feature with verified conformance testing.

      Open PR #684 on Laya laya

    • PR #676Honour score minimum in structured projection (#663)

      Merged pull request #676 to Laya laya. Resolved upstream defect/feature with verified conformance testing.

      Open PR #676 on Laya laya

    • PR #648Validate questions and reject null state before serialization (#607, #608)

      Merged pull request #648 to Laya laya. Resolved upstream defect/feature with verified conformance testing.

      Open PR #648 on Laya laya

    • PR #644Port confidence-based abstention gating on answer_confidence (#361)

      Merged pull request #644 to Laya laya. Resolved upstream defect/feature with verified conformance testing.

      Open PR #644 on Laya laya

    • PR #618Run missing test suites in CI and guard against test omission (#399)

      Merged pull request #618 to Laya laya. Resolved upstream defect/feature with verified conformance testing.

      Open PR #618 on Laya laya

    • PR #566Forward and validate per-request token budget overrides (…

      Merged pull request #566 to Laya laya. Resolved upstream defect/feature with verified conformance testing.

      Open PR #566 on Laya laya

    • PR #563Add automated npm release workflow with provenance (#288)

      Merged pull request #563 to Laya laya. Resolved upstream defect/feature with verified conformance testing.

      Open PR #563 on Laya laya

    • PR #499Stringify score legend values and document serve choice limi…

      Merged pull request #499 to Laya laya. Resolved upstream defect/feature with verified conformance testing.

      Open PR #499 on Laya laya

    • PR #492Port mixed-segment detection from Python analyse() (#384)

      Merged pull request #492 to Laya laya. Resolved upstream defect/feature with verified conformance testing.

      Open PR #492 on Laya laya

    • PR #4174issue I openedAdmit investigation tools into session lifecycle (#4002)

      Admit investigation tools into active session supervision lifecycle to ensure tools register before consumer capability queries.

      Open PR #4174 on morluto rea

    • PR #4065Retain selected freshness requirement in comparison Evidence parameters

      Preserved selected evidence freshness requirement through process comparison evidence parameters without dropping freshness bounds.

      Open PR #4065 on morluto rea

    • PR #3639Preserve overridden runner variables and test isolation on Windows

      Preserved runner environment variables on Windows platform, ensuring test isolation across clean run directories.

      Open PR #3639 on morluto rea

    • PR #34215in reviewMulti-modal inference cache and streaming pipeline bounds

      Optimization for multi-modal generation pipeline memory consumption during concurrent batch evaluations across transformer checkpoints.

      Open on Hugging Face