At Stvor, I built an AI-agent payment verification service from API design through deployment, authentication, key handling, audit logging, and client integration. I created commit, verify, and settle flows that validate executed transactions against original intent and issue signed receipts.
I build in TypeScript and Node.js across REST APIs, SDKs, CLIs, browser verification, key registries, and offline receipt validation. My security work includes fail-closed key handling, key rotation, rate limiting, threat modeling, and responsible disclosure.
I also published IACR ePrint 2025/1713 and implemented a zero-dependency TypeScript SDK for post-quantum hybrid messaging using ML-KEM-768, X25519, AES-256-GCM, Ed25519, and Double Ratchet rekeying.
