Languages
Python, TypeScript, JavaScript, Go
AI safety research and agentic systems
Software engineer and independent AI safety researcher working on evaluation reliability and agent systems
I build production AI systems and study how to evaluate them reliably. My research covers post-training behavior, mechanistic interpretability, and the failure modes of tool-using agents. I also mentor research through SPAR.
Capabilities
Python, TypeScript, JavaScript, Go
PyTorch, Transformers, Hugging Face, LoRA/QLoRA, Gemini, evaluation harnesses and loops
Mechanistic interpretability, activation analysis, steering vectors, RLHF, red-teaming, safety evaluations
Django, DRF, Channels, Celery, Django-Q, Node.js, NestJS, retries, failure handling
AWS, Docker, Terraform, Cloudflare, Linux, CI, observability tooling, production hardening, latency and cost tradeoffs
React, Vite, Next.js, Redux Toolkit, Tailwind CSS, shadcn/ui
Experience
Research Mentor
Senior AI Software Engineer
Software Engineer
Software Engineer
Projects
A flight recorder and verifier for AI agent runs. Python records model and tool calls as OpenTelemetry spans; Go reconstructs runs and checks them deterministically. Every verdict includes evidence, and incomplete traces produce an explicit INCONCLUSIVE result.
Fault-injected benchmark for tool-using agents, with targeted planner repairs, transfer checks, and evidence-based monitoring pilots. Evaluates routing, recovery, and unsafe pre-write actions in stateful workflows.
Production agentic platform for chat, voice, and KYC workflows across Django services, async workers, retrieval and tool execution, and React delivery.
A synthetic multi-agent security testbed for shared-memory honeytokens. Compares decoy rotation with brokered containment, isolated trap namespaces, and quarantine while adaptive agents share information.
Research and Writing
A checkpoint-level audit of safety measurement during RLVR, following Tülu 3.1 8B across 12 checkpoints and 6,912 structured responses. The frozen tests found a late increase in answer-order sensitivity without detecting a persistent safety shift that met the study's threshold. The study covers one training lineage; a SPAR continuation is in progress.
Non-archival workshop paper. Developed through the BlueDot Technical AI Safety project.
Coauthored audit of 600 controlled tool-calling generations from Qwen3-1.7B and Qwen3-4B at FP16 and NF4. Quantization raised missed required tool calls from 6.0% to 17.3% in the 1.7B model, while the 4B comparison showed no change. Error profiles exposed a failure shift that aggregate accuracy obscured.
Non-archival workshop paper.
A reproducibility study comparing inoculation prompting and counterfactual reflection training for sycophancy in Qwen3-8B. Repeated training runs test suppression, disagreement with correct users, and whether prompting or steering restores the behavior. Both interventions have limits: reflection repair overcorrects into contrarianism, and generic prompting can re-elicit sycophancy in both.
Accepted workshop paper, Reproducibility Special Track (ACL Anthology proceedings track).
An audit of frozen DINOv2 fundus embeddings that separates disease decodability from image-quality and preprocessing signals. Patient-level splits, construction-matched nulls, and subspace removal test which signals remain recoverable. ODIR-5K provides an external check. The method is an embedding diagnostic, with limited causal claims.
Camera-ready paper available through MICCAI Open Access.
Digital Minds Research Sprint report on how language changes AI-wellbeing self-report measurements across three open models. Includes a released dataset and follow-up audits. Participant research, rather than an Apart Research publication.
Companion codeEarlier write-up comparing inoculation prompting and counterfactual reflection training through behavioral and mechanistic tests. The subsequent multi-seed study was accepted to BlackboxNLP 2026; its accepted-paper abstract contains the updated results.
Companion codeCase study on why AI coding agents need eval-first engineering and how coding agents should code agents.
Public writeup on wording confounds in contrastive activation extraction across 6 traits and 2 open-weight models. Companion to the Deconfounding Contrastive Interpretability project.
Companion codePublic writeup on mechanism-specific limits of introspective tamper detection in Qwen3-8B. Companion to the Neuron Suppression Awareness project.
Companion codeJournal
More of such stuff/takes actively shared on my Twitter.
the best design patterns explanations, the visual elements nailed it and that cheatsheet is on point.
Open linkfeedback loops over rigid plans. keep evolving :)
Open linkthis got me out of tutorial hell and into shipping early on in 2021.
Open linkit was a tossup between this and that DSA playlist, but this one means a whole lot more to me.
Open link3b1b for software engineers.
Open linkneat explanations to actually understand branching, rebasing, and merge flow.
Open linkContact
For collaboration, technical discussion, or product ideas, email is the best channel.
Email: aaliyan1230@gmail.com
"Make it work. Make it right. Make it fast. In that order."