Skip to content
View u7k4rs6's full-sized avatar
:shipit:
:shipit:
10 followers · 4 following

Achievements

Achievement: Pull Sharkx4Achievement: Pair ExtraordinaireAchievement: QuickdrawAchievement: YOLO

Achievements

Achievement: Pull Sharkx4Achievement: Pair ExtraordinaireAchievement: QuickdrawAchievement: YOLO

Highlights

  • Pro

Block or report u7k4rs6

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
u7k4rs6/README.md
Utkarsh Bahuguna, AI systems and adversarial testing

CS at BITS Pilani. I work on AI infrastructure and spend most of my time trying to break it.
74 PRs merged upstream, 56 of them AI work, across 12 organisations including Microsoft, PyTorch, NVIDIA, Hugging Face and CNCF.

  • Nine of my patches are in GCC master, carried up from the gccrs tree by the project's syncs to gcc-patches with authorship kept.
  • 40 of those 74 fix bugs I found and reported myself, not tickets off a board. One was in my own merged code.
  • I found nondeterminism in vLLM's deterministic mode (vllm#51187): repeats match only if every token is reduced at the same RMSNorm block width.
  • Sole author of a COLM 2026 workshop paper. When Self-Consistency Backfires: majority voting lowers accuracy on 56–66% of GPQA Diamond problems.

Open source

Project Merged
microsoft/PyRIT 37 · the CodeAttack converter, plus fixes to TAP/PAIR, scale scorers and dataset loaders
gccrs · GCC Rust frontend 11 · match arm guards, left-to-right argument evaluation, a dead-code fix now in GCC master
PyTorch · executorch, torchtitan 8 · Inspector crashes on non-finite output, wandb tag splitting, scheduler range checks
jaeger-ui · CNCF 4 · GenAI span classification, media rendering, RFC wire-format corrections
pwndbg · GDB exploit-dev frontend 3 · a pointer-scan crash, its help text, negative-value searches
OpenEnv · was Hugging Face 2 · SSRF-safe URL parsing, Space subdomain resolution
meta-pytorch/tritonbench 2 · child runs failing unless started one exact way, A/B metrics crash
NVIDIA/garak 1 · fixed Bedrock scans that failed for every Claude 4.x user
Also llm-compressor ×2, AI Village ×2, openkruise/agents, openyurtio/raven

Building
Lockstep Verifies an inference engine returns the same tokens whatever else was batched. Caught vLLM 0.26.0 returning different logprobs for byte-identical requests (vllm#51187).
MIRR LLM agents diagnose a hidden fault across five noisy microservices under partial observability. Built for the Meta x PyTorch hackathon.
Tessera Verified-by-default distribution for ML models and datasets. Publishers sign once; untrusted mirrors can deny a model but cannot forge one.
Shadowbook A limit order book in Rust. 416ns p50 insert, 100M fuzzed ops against an oracle, zero divergences.
Flint An x86-64 kernel in Rust. Ring 3 isolation proven by a breakout harness.

More, including Thrice, Starling and CAIRN, at utkarshbahuguna.me.

I publish what the measurements say. When all-pairs comparison showed half of a Lockstep finding was an artifact, the retraction went next to the result.

Rust C++ Python CUDA/Triton Go Java TypeScript

Portfolio  ·  LinkedIn  ·  Email

Pinned Loading

  1. LockStep LockStep Public

    A verification harness for deterministic LLM inference. Finds non-determinism before your benchmarks do.

    Python 8

  2. Shadowbook Shadowbook Public

    A Rust limit order book matching engine, differentially fuzzed against an independent reference. The bugs were in the machinery checking the engine, not the engine

    Rust 1

  3. Starling Starling Public

    A from-scratch CRDT collaborative text editor in TypeScript. Real-time, offline-first, and provably convergent, with no server resolving conflicts.

    TypeScript 1

  4. Tessera Tessera Public

    Decentralized, poisoning-resistant distribution for ML models and datasets. Publishers sign once, untrusted mirrors distribute, and any consumer verifies the exact signed bytes with full provenance.

    Python 1

  5. CAIRN CAIRN Public

    Self-hosted Git host on a from-scratch VCS engine in Java: content-addressable object store, packfiles with delta compression, three-way merge, and smart-HTTP transport, all cross-verified against …

    Java 1

  6. Flint Flint Public

    x86-64 kernel written from scratch in Rust and inline asm. Paging, frame allocator, kernel heap, preemptive scheduler, IDT/PIC interrupt path, and a shell. Runs under QEMU.

    Rust 1