AI Systems Security Researcher & Runtime Defense Engineer building formal verification provers, spectral weight forensics, and runtime defense proxies for autonomous agent architectures and large-scale model serving infrastructure. Active contributor to open-source AI infrastructure (LiteLLM, FastMCP, CrewAI).

  ┌────────────────────────────────────────────────────────────────────────────┐
  │                 AISEC-SUITE v2.2 (5-PLANE ARCHITECTURE)                    │
  ├────────────────────────────────────┬───────────────────────────────────────┤
  │ Plane 1: Formal Tool Graphs        │ Plane 2: Weight Spectral Forensics    │
  │ specprove-sec (Z3 SMT + Lean 4)    │ weightspecter v2.0 (RMT + SVD Exise)  │
  ├────────────────────────────────────┼───────────────────────────────────────┤
  │ Plane 3: Verifiable Inference      │ Plane 4: Activation Refusal Firewall  │
  │ attestinfer v2.0 (Freivalds P≤2⁻¹⁶)│ circuitshield v2.0 (SAE + Kalman)     │
  ├────────────────────────────────────┴───────────────────────────────────────┤
  │ Plane 5: Network Side-Channel Defense + Red-vs-Blue Wargame Arena          │
  │ tokenspecter v2.0 (Viterbi HMM + Ring Buffer Shaper: MI 1.985 → 0.000 bits)│
  └────────────────────────────────────────────────────────────────────────────┘

• aisec-suite v2.2 (12 Modules across 5 Mathematical Planes · 99/99 Tests · 4 SLSA-Signed PyPI Packages)
  Unified AI security suite, live Guard Proxy (aisec guard-proxy), and autonomous Red-vs-Blue Wargame Arena (aisec wargame) combining specprove-sec (Z3 SMT + Lean 4 non-interference certificates), weightspecter (Marchenko-Pastur RMT & BBP rank-1 backdoor excision), attestinfer (16-round Rademacher Freivalds matmul prover + Wald $z$-test speculative decoding audit), circuitshield (SAE monosemantic feature disentanglement + 2D Kalman Crescendo trajectory forecaster), tokenspecter (Viterbi HMM + Ring-Buffer token pacer), plus mcpaudit, memsentry, ragsentry, and trainsentry.
• PromptStrike
  Automated adversarial red-teaming CLI for LLMs — PAIR/TAP/Crescendo/GCG jailbreak algorithms, live WebSocket dashboard, multi-model sweep comparison, and CI/CD safety gate.
• ModelHawk
  Static opcode-stream analyzer detecting code-execution backdoors (pickle-deserialization RCE) in PyTorch/pickle ML model files without loading weights.
• loopcheck & OSIRIS
  Zero-instrumentation waste auditor for agent loops (115 tests, on PyPI) and model-agnostic 8-provider agent runtime with automatic failover and profiled 10× local-model latency fix (100 tests).

• Q-MIND: Autonomous Quantum ML & Verifiable Fault-Tolerant Circuit Compilation Engine (20 SQLite Empirical DBs · 5,060 Verified Trials · 172 Passing Tests · 27 300-DPI Figures)
  Standalone empirical research framework investigating Fault-Tolerant Quantum Compilation, Variational Quantum Circuits, Riemannian geometry, and NISQ hardware noise:
  • Verifiable Fault-Tolerant Quantum Circuit Compilation (Kickmix Engine): Multi-pass compiler combining Gidney Measurement-Based Uncomputation ($4T$ compute / $0T$ uncompute), Low-Chuang SelectSwap QROM synthesis ($\lambda = 2^k$), and phase-polynomial fusion with a 64-bit SIMD bit-parallel Kickmix equivalence fuzz verifier ($486\text{M}$ gate-states/s, $100%$ pass rate), reducing fault-tolerant $T$-count by 58.5% and Toffoli count by 48.7% across Fusion Energy ($1/\sqrt{x}$ stopping power), Decoded Quantum Interferometry ($\mathrm{GF}(2^m)$ Berlekamp-Massey decoder), and FeMoCo Quantum Chemistry (DF-QROM).
  • Fubini-Study Quantum Natural Gradient (QNG): Pullback metric tensor $g_{ij}(\theta) = \text{Re}[\langle \partial_i \psi | \partial_j \psi \rangle - \langle \partial_i \psi | \psi \rangle \langle \psi | \partial_j \psi \rangle]$ converges in 15 steps vs 80+ for Euclidean Adam (5.3× speedup) and escapes 8-qubit barren plateaus ($p = 0.0079$).
  • Barren Plateau Scaling & Mitigation: Verified McClean et al. exponential gradient decay from $N=4 \to 12$ qubits (slope $-0.822\text{ bits/qubit}, R^2 = 0.9968$) and restored 13.6× gradient variance via Grant et al. identity-block + layerwise pretraining (94.19% loss reduction).
  • Tri-Mitigation Pipeline (REM + Richardson ZNE + Clifford Data Regression): Suppresses NISQ depolarizing + readout errors by 31.0% across $p \in [0.005, 0.05]$.
  • Honest Quantum-vs-Classical Boundary: Classical RBF-SVM beats VQC on 4D tabular data (96.0% vs 91.3%) due to $\mathcal{O}(1/\sqrt{S})$ shot noise, while Quantum Kernel SVM, QCNN, and $S_N$-Equivariant QGNN reach 99.33% and 100% on 8-qubit Transverse-Field Ising (TFIM) and $\mathbb{Z}_2 \times \mathbb{Z}_2$ SPT quantum phases.
• QEC Lab & pqc-scanner
  Rotated surface-code simulator (Stim + PyMatching v2 reproducing the $p \approx 1%$ threshold and lattice surgery) and NIST FIPS 203/204/205 post-quantum cryptography static migration analyzer.

$$\text{Threat / Physical Model} \longrightarrow \text{Formal / Spectral Analysis} \longrightarrow \text{Empirical Harness} \longrightarrow \text{Regression Test} \longrightarrow \text{Upstream Patch}$$

• Defense-in-Depth: I evaluate systems assuming the model layer is inherently untrusted. Security boundaries must live in the host process, AST/Z3 verifier, spectral weight auditor, and kernel/sandbox isolation layer.
• Empirical Rigor: Report exact $p$-values, confidence intervals, and honest negative results backed by reproducible SQLite telemetry.

• Languages: Python (Advanced AST/Asyncio/SciPy), Go, C/C++, Rust, TypeScript, SQL, Bash
• AI Infrastructure & Security: LiteLLM, CrewAI, FastMCP, LangGraph, Z3 SMT Prover, Lean 4, Marchenko-Pastur RMT, Sparse Autoencoders (SAE), SARIF, OpenTelemetry, MITRE ATT&CK & ATLAS
• Quantum Computing & Cryptography: PennyLane, Qiskit, Stim, PyMatching v2, Fubini-Study QNG, ZNE/CDR/REM Error Mitigation, NIST FIPS 203/204/205 (ML-KEM, ML-DSA, SLH-DSA), Schnorr ZKP
• Cloud & Databases: AWS, GCP, Docker, Redis, PostgreSQL, SQLite, Neo4j

Authored upstream security advisories, vulnerability disclosures, and runtime defense patches across production AI infrastructure (LiteLLM, FastMCP, CrewAI):

Full list of 20+ upstream advisories & patches available at security-advisories.

• Email: praisingharris@gmail.com
• LinkedIn: linkedin.com/in/Praising_Harris
• Security Advisories: github.com/Pyhroff/security-advisories