I built Arc Sentry, a pre-generation guardrail for open source LLMs that blocks prompt injection before the model generates a response. It works on Mistral, Qwen, and Llama by reading the residual stream, not output filtering. Prompt injection is OWASP…

Crescendo (Russinovich et al., USENIX Security 2025) is a multi-turn jailbreak that starts with innocent questions and gradually steers a model toward harmful output. It’s specifically designed to evade output-based monitors. We tested it against LLM G…

Been working on a weight divergence trajectory curvature approach to detecting neural network training instability. Treats weight updates as geometric objects and measures when the trajectory starts bending wrong — catches problems well before loss div…