jj1423

Python, TypeScript, Postgres, Docker. Static analysis and dependency graphs. Mostly I build systems that say yes or no to a machine, which is a different problem from reporting to a human.

How trust gets established in a supply chain where nobody reads the code anymore — signed build provenance, reachability, and which of them survive an agent installing 400 packages a minute.

VDB — the verification layer for code nobody wrote by hand. An agent proposes a dependency; something outside the model decides whether it enters the codebase. That decision is the product.

What breaks when software is assembled by machines: supply-chain trust, agent guardrails, measuring model behaviour honestly. Also security policy — I work on that side of it in Korea.