Independent research in AI security, privacy, governance, and applied systems.
Research artifacts for the security and governance problems created by modern AI systems.
Axonome builds empirical studies, reproducible artifacts, and working systems across AI agent security,
sensitive-data discovery, secure code generation, compliance evidence, network cryptography, and AI governance.
The portfolio is intentionally claim-bounded: published artifacts are separated from active experiments,
product systems are separated from paper-ready evidence, and exploratory systems stay labeled until they
have reproducible benchmarks.
AI agent security
Portable agent skills, coding-agent rules, MCP tools, and runtime permissions create security behavior that cannot be evaluated from prompts alone.
Privacy-preserving discovery
Metadata-first and context-first discovery methods reduce raw content exposure while preserving useful recall for secrets and sensitive files.
Secure code generation
Persistent security rules and scanner-derived guidance are evaluated for how they change downstream coding-agent behavior.
Machine-readable governance
Evidence semantics, reviewer-gated promotion, AI BOM fairness evidence, and framework mapping for audit-sensitive workflows.
Network and cryptographic drift
Network CBOMs, TLS inventory, certificate posture, and post-quantum readiness framed as longitudinal measurement problems.
AI agent security High-readiness research artifact
SkillDiff
Project: trust-the-skill-but-verify
Differential testing for portable AI agent skills, measuring how runtime policy changes security outcomes under the same task and contract.
Claim boundary: Method and bounded evidence, not ecosystem prevalence or full commercial-runtime coverage.
Secure code generation Published artifact
Targeted Security Rules
Project: llm-framing-paper
A multi-model empirical study showing that targeted security rules reduce detector-counted insecure API use in coding agents.
Claim boundary: Claims are bounded to detector-counted insecure API use and labeled validation slices.
Privacy-preserving discovery High-readiness empirical study
Metadata-First Sensitive Data Discovery
Project: metadata-secret-scan-study
Context-first sensitive-data discovery that measures how much raw content exposure can be reduced without losing useful recall.
Claim boundary: Not a full DLP replacement. Primary privacy claims require deterministic arms and reproducible baselines.
Secure code generation Research/product system
PatchPilot CodeCoach
Project: patchpilot_codecoach
A closed-loop secure-code-generation system that converts scanner findings into persistent agent rules to reduce vulnerability recurrence.
Claim boundary: Recurrence claims stay controlled until repository, agent, CWE, and functional-correctness coverage expands.
Machine-readable governance System to paper
GRClaw
Project: grc / grclaw-standalone
Evidence semantics for AI-assisted compliance, designed to prevent workflow completion from being mistaken for audit-ready proof.
Claim boundary: Current evidence is architecture and bounded smoke evidence until reviewer or auditor evaluation exists.
Network CBOM Validation in progress
RADAR-Q
Project: radar
A network CBOM and cryptographic-drift platform for measuring TLS inventory, algorithm exposure, and post-quantum readiness over time.
Claim boundary: Demo and package readiness are separate from completed external validation or longitudinal evidence.