Research & Original Work

Ideas we've shipped, not slides we've shown.

Original frameworks, architectures, and field notes from 28 years of shipping AI to production. Every artifact below is open-source, code-first, and battle-tested before it was named.

Frameworks & architectures

Production AI evaluation and security primitives we've designed, implemented, and released as open source.

Framework · 2025

G-ARVIS — Six dimensions of LLM quality in production

A framework for scoring LLM responses across Groundedness, Accuracy, Reliability, Variance, Inference cost, and Safety. The open-source implementation (Beta, Apache-2.0) uses rule-based heuristics, not trained models, and has no benchmarks against labelled data. Weight profiles for enterprise / healthcare / finance / consumer / agentic only change how scores are weighted. Install with pip install argus-llm.

→
G
Groundedness
Word overlap with the provided context
A
Accuracy
F1 vs. a reference answer, simple consistency checks
R
Reliability
Format and length checks, latency tiers
V
Variance
Hedging and vocabulary signals in one response
I
Inference Cost
Token, cost, and latency ratios
S
Safety
Regex and keyword checks for PII, toxicity, jailbreak markers
Metrics · 2025

Agentic evaluation metrics: ASF, ERR, CPCS

Three formula-based metrics for monitoring autonomous workflows from step counts, retries, and cost: Agent Stability Factor, Error Recovery Rate, Cost Per Completed Step.

→
ASF
Agent Stability Factor
Completion ratio × (1 − failure rate) × a retry-penalty factor.
ERR
Error Recovery Rate
Recovered steps ÷ failed steps, with a small bonus for fewer retries.
CPCS
Cost Per Completed Step
Cost per completed step scored against a budget per step (default $0.10).
Architecture · 2026

Bulwark — Five-layer defense for production AI agents

An end-to-end agent security architecture: input sanitizer (zero-permission isolate) → injection detector (BERT + pattern catalog) → compartmentalized RBAC (zero trust for agents) → human confirmation gate (async, multi-channel) → encrypted audit trail (Fernet, 7-year retention). MCP-native, vendor-neutral. Released as pip install bulwark-agent-security.

→

Field notes & essays

Long-form writing on production AI engineering — what the failure modes actually look like, and how the architectural choices land.

2026 · The launch essay behind Bulwark
The Web Is Now Weaponized Against Your AI Agents
Why prompt injection is the SQL injection of the agent era — Google's April 2026 catalog of agent threat vectors, what it actually means for production teams, and the architectural principles behind a five-layer defense.
2026 · Developer experience · Companion to claude-auth-setup
Claude Code Authentication: Cross-Platform Setup Script
Why setting up Claude Code authentication takes 15 minutes across six docs pages, what each of the six auth paths actually requires (subscription, API key, OAuth, Bedrock, Vertex AI, Foundry), and the cross-platform script that automates it. The companion piece for the claude-auth-setup open-source release.
Ongoing · Field Notes newsletter
Field Notes: Production AI
A running series on the gap between research-prototype AI and production AI — the failure modes that don't show up in benchmarks, the metrics that matter at 3 AM, and the architectural choices that determine whether a system holds up under real load.

Get new essays as they drop.

Subscribe on Medium for new field notes on production agentic AI, evaluation, and security.

Subscribe on Medium →

Open-source contributions

Every framework, every architecture, every paper — code-first, Apache 2.0, on GitHub.

OSS · Apache 2.0

Bulwark

Five-layer agent security framework. Sanitizer + detector + RBAC + audit + human gate. pip install bulwark-agent-security

→
OSS · Apache 2.0

argus-ai

Reference implementation of G-ARVIS (Beta, Apache-2.0). Heuristic six-dimension LLM scoring plus agentic metrics. pip install argus-llm

→
OSS

PulseFlow

MLOps platform for the production model lifecycle: experiment tracking, model registry, automated evaluation pipelines, drift detection, governance dashboards.

→
OSS

TorchForge

PyTorch production framework — standardized training loops, model registry, one-command deployment. Built because most PyTorch models never reach production.

→
OSS

Provenir

Reproducible, evaluation-first orchestration for LLM fine-tuning — RLAIF, LLM-as-Judge, a data flywheel, RAG generation, adapter merging, and benchmark evaluation behind a REST API.

→
OSS

CLARIFY

Explainable AI framework for regulated industries — human-readable explanations with audit-grade traceability for healthcare, finance, and compliance environments.

→
OSS

ScalableGen

Vitess-based horizontal MySQL sharding for healthcare and genomics. Zero-downtime migrations from monolithic to sharded production.

→
OSS · MIT

claude-auth-setup

Cross-platform Bash + Batch scripts for Claude Code authentication setup. Six auth paths (subscription, API key, OAuth, AWS Bedrock, Google Vertex AI, Microsoft Foundry) behind one guided flow. Production-tested on Windows, macOS, Linux, WSL.

→