I build systems software in Rust — infrastructure that sits close to the kernel and the network, where security and privacy are design constraints rather than features bolted on afterwards.
Backend and systems engineer, studying Software Development at Anadolu University. My work sits where distributed systems, system-level security and AI infrastructure meet: middleware that has to stay up, peer-to-peer networks that have to stay reachable, and kernel-level enforcement that has to stay honest. I take on the backend bottlenecks other people route around.
An independent evaluation of Surya, the 366M-parameter heliophysics foundation model released by NASA and IBM. I ran the released checkpoint with the authors' own inference code on 1,146 forecast hours streamed from roughly 700 GB of raw SDO data, and scored the cheap baselines the benchmark never reports: an 11-feature logistic regression over past GOES X-ray flux matches the model, and the benchmark's effective sample turns out too small to rank either. Every number in the manuscript is recomputed by verify_paper.py — 161 of 161 claims.
Preprint · ESS Open Archive · heliofloor · code and data · Zenodo · ORCID
A kernel-level warden for AI coding agents. eBPF LSM hooks and tracepoints watch every file, exec and socket the agent touches, and refuse the ones policy forbids before the syscall completes — no kernel module, no agent cooperation required.
wardyn · Rust · AGPL-3.0 · open source
Runtime containment — kernel-level wardens and sealed execution environments for autonomous AI agents, enforced below the process rather than negotiated with it.
Verifiable privacy — transparent L7 data-masking proxies and zero-knowledge proofs, so a result can be trusted without trusting the machine that produced it.
Decentralised transport — offline disaster-communication nodes and enterprise API gateways coordinated by gossip protocols and CRDTs, built to survive the network being wrong.
From a kernel warden to an exchange matching engine, the through-line is the same: push the boundary where network optimisation meets machine learning, and keep latency and trust on the right side of it. Every one of these is public — read the code.
wardyn · low-latency-matching-engine · quaestor · petek · heliofloor · nabd · spacewasm-crossbuild
Thirteen patches merged into code other people's missions depend on: build-system and deployment correctness in F´, the NASA flight software framework flown on the Ingenuity Mars helicopter; decoder, host-interface and build fixes in spacewasm, NASA's flight-compliant WebAssembly interpreter; and toolchain, logging and test-suite fixes in CernVM-FS, the filesystem CERN uses to distribute LHC experiment software to computing sites worldwide. Reading an unfamiliar build system until the failure is obvious is the same work as reading a kernel path — only with a stricter review queue. More are in review.
nasa/fprime · #5675 · #5590 · #5576 · #5571 · #5559
nasa/spacewasm · #190 · #154 · #153 · #152
cvmfs/cvmfs · #4407 · #4396 · #4392 · cvmfs/doc-cvmfs · #265
I'm open to systems and infrastructure work — Rust services, kernel and network-level tooling, distributed architecture, and security engineering. If you need help or know someone who does, I'd appreciate an introduction.
kadir.can.yildirm@gmail.com



