I get bothered by
questions.
Then I build answers.
Researcher at the intersection of cybersecurity systems, AI governance, and policy implementation. The questions that bother me most tend to live at the edges where disciplines do not talk to each other but probably should.
It started with battery wires and a paper fan in rural India. Not a metaphor, literally a six-year-old trying to understand why the fan spun. That same itch, take it apart, understand the mechanism, rebuild it better, is what eventually led to penetration testing in high school, building telepresence robots in college, and designing security infrastructure for national-scale systems in Thailand.
I collaborate across institutions and domains, which is a polite way of saying no single label has stuck yet and everyone seems fine with that. My work sits at the intersection of cybersecurity architecture, AI governance, and technology policy, and I follow the question wherever it leads, regardless of which department owns the answer.
Not a specialist. A systems thinker. There is a difference, and I am still figuring out which one gets the better conference invitations.
AI Governance and Constitutional Constraints
How do you build AI systems that remain accountable when deployed at scale? Interested in constitutional AI frameworks as a mechanism for embedding ethical constraints into automated security systems without sacrificing effectiveness.
Access Control and Policy Implementation
The gap between how security policies are written and how they actually get implemented in real systems. Temporal and contextual extensions to RBAC and ABAC models, and why most deployments still get this wrong.
Technology Policy and Industrial Strategy
How legislative frameworks translate, or fail to translate, into working technical infrastructure. The CHIPS Act as a case study in ambiguity-conflict dynamics at the intersection of policy and systems design.
Threat Intelligence Systems
Distributed architectures for accumulating, trading, and operationalising threat data across organizational boundaries. What does nation-scale threat intelligence infrastructure actually require?
"Access control is fundamentally a social problem dressed as a technical one. We keep solving the wrong layer."
"Constitutional AI sounds elegant until you ask: constitutional according to whose values? The hard problem is not the mechanism, it is the legitimacy."
"The CHIPS Act assumes implementation fidelity. Most policy does. Most systems do not deliver it. That gap is where the interesting research lives."
"We call it threat intelligence but most of what gets shared is threat data. Intelligence implies synthesis. We are still mostly just moving files around."