| Project | What it is | Lang | My focus there |
|---|---|---|---|
| Kubescape | CNCF Kubernetes security posture scanner | scan pipeline · SBOM · anonymiser | |
| Boa | Embeddable JavaScript engine in Rust | VM semantics · built-ins · Fetch runtime | |
| HAMi | CNCF heterogeneous GPU virtualisation | vGPU metrics hardening | |
| Besu | Ethereum execution client | JSON-RPC trace & debug APIs |
What that work actually looked like
- Kubescape - scan pipeline internals: control filtering, output formats, SBOM emission, an MCP server surface, and the anonymiser that scrubs identifying data before results leave the cluster.
- Boa - VM completion-record semantics for
Yield/Return, ECMAScript built-ins (Iterator.concat,atob/btoa), and the WHATWG Fetch runtime includingAbortControllerandRequest/Response.clone(). - HAMi - hardened the vGPU monitor's metrics scrape path against panics on malformed or uninitialised device state.
- Besu - fixed unhandled exceptions and off-by-one validation in the JSON-RPC trace and debug APIs; enriched the readiness endpoint with diagnostics.




