adarsh.arun
INIT/ 001

Bengaluru, India · AI Safeguards Engineer

Adarsh Arun

$

CS undergrad at BNMIT working at the seam between machine learning and security — guardrails for agentic AI, prompt-injection defense, and detection pipelines that turn raw telemetry into decisions.

currentlyguardrails for agentic healthcare AI @ XelerAITsince Aug 2026

> loading profileok

> mounting /skillsok

> guardrails.policyenforced

> sessionready

> shellpress /

view payloads
MANIFEST/ 002

WHAT I BUILD

I work where ML systems meet adversaries. Most of what I build answers one question: what happens when this model is given something it should refuse?

At XelerAIT I design guardrails for production agentic AI in healthcare — safety, reliability, and compliance enforced at the framework layer rather than bolted on after an incident.

At Nife Labs I built an enterprise AI management layer that let organizations route traffic to external LLMs under their own security policy, with token-optimization strategies that cut inference cost and latency.

Outside of work I build agentic systems end to end — a Google ADK pipeline over an MCP tool server that scores third-party vendor risk deterministically — and contribute upstream, most recently to Roost's Osprey trust & safety engine.

The rest is detection engineering: RAG pipelines mapped to MITRE ATT&CK, contextual-bandit triage agents, and DFIR automation that removes the manual grind from intrusion analysis.

  • principles
  • Threat-model before you optimize.
  • A guardrail you cannot audit is a guess.
  • Latency and cost are safety properties too.

prompt security pipeline

PROMPT
untrusted input
BROKER
regex + metaprompt
SCHEMA
structured json
MODEL
policy-bound call
AUDIT
verdict log
SYSTEM_PROFILE/ 003

SYSTEM PROFILE

.operatorAdarsh Arun
.roleAI Safeguards Engineering Intern @ XelerAIT
.locationBengaluru, IN
.educationBE CSE, BNMIT — CGPA 9.70
.focusAI guardrails / LLM security / detection eng
.shellUNIX / WSL
.languagesPython, TypeScript, Java, C/C++, SQL
.ml stackLangChain, LlamaIndex, ADK, TensorFlow, sklearn
.cloudAWS, GCP, Docker
.open sourceroostorg/osprey — PR #451 merged
.uptimesince Aug 2023

github · live

.public repos--
.followers--
.total stars--
.contributions (1y)--

AI / ML

LangChain · LlamaIndex · Google Agent Development Kit (ADK) · Gemini API · Claude API · TensorFlow · Scikit-learn · AutoAI · RAG · Contextual Bandits · Model Context Protocol (MCP) · Multi-agent orchestration

SECURITY

LLM guardrails · Prompt-injection defense · MITRE ATT&CK mapping · DFIR pipelines · MDE investigation packages · Alert triage & escalation · Compliance architecture

SYSTEMS

Next.js · React · Tailwind CSS · Node.js · Express · FastAPI · Streamlit · MongoDB · Docker · Git · AWS · GCP · Java Sockets (TCP/IP)

LANGUAGES

Python · TypeScript · JavaScript · Java · C/C++ · SQL · HTML/CSS

TOOLING

Pandas · NumPy · Matplotlib · Plotly · OpenCV · Node-RED · IBM Tools · Arduino IDE · UNIX/WSL

PAYLOADS/ 004

SELECTED WORK

Grouped by category — filter the same data from the shell with projects --category security.

SECURITY01

Prompt Enhancement Engine

ISTVON framework — a security broker for LLM prompts

  • Streamlit AI security engine that analyzes, enhances, and secures LLM prompts before they reach a model.
  • Dual-layer security broker combining regex screening with metaprompts to block injection attacks and semantic threats.
  • ISTVON JSON framework structures and sanitizes unstructured text, isolating malicious payloads.
  • Audit trail plus unit-testing suite logs verdicts and keeps threat detection high-fidelity.
PythonStreamlitGemini API
AI / ML02

Automated Vendor Risk Assessor

Hierarchical multi-agent pipeline for third-party cyber risk

Kaggle Agentic AI Competition · Jun 2026

  • Hierarchical agent pipeline on the Google Agent Development Kit: CVE and OSINT research agents run in parallel and feed a narrative synthesis agent.
  • All external capabilities exposed through a Model Context Protocol tool server (FastMCP) over NIST NVD and web-search backends.
  • Risk score computed deterministically in Python — the LLM writes prose, never the number.
  • Interchangeable LLM back-ends per entry point via a model factory: Ollama locally for CLI, Gemini and Hugging Face for web, wrapped in LiteLLM.
  • Ships both a FastAPI dashboard with SSE job streaming and a rich CLI, containerized with Docker Compose.
PythonGoogle ADKMCPFastAPILiteLLMDocker
SECURITY03

Telecom SOC Simulation

DFIR automation with RAG-backed ATT&CK mapping

  • Python DFIR pipeline automating ETL and threat detection via MDE Investigation Packages.
  • AutoAI for predictive threat scoring; LLMs for automated, structured incident reporting.
  • RAG architecture maps simulated attack patterns directly onto the MITRE ATT&CK framework.
  • Automated log parsing and visualization to cut manual investigation overhead.
PythonRAGLLMsAutoAI
AI / ML04

Adaptive Triage Engine

Contextual-bandit RL for SOC alert prioritization

  • Incident triage agent that optimizes response workflows and accelerates escalations.
  • Contextual Bandit (RL) policy scores and triages alerts dynamically from forensic feature data.
  • Data pipelines ingest, normalize, and parse raw security logs into structured real-time telemetry.
  • Policy stability evaluated with reward distributions, confusion matrices, and precision-recall trade-offs.
PythonContextual BanditsScikit-learn
SYSTEMS05

roostorg/osprey — OSS Contribution

Fixed the Windows checkout path for Roost's safety rules engine

PR #451 · merged upstream · Aug 2026

  • Osprey is Roost's high-performance trust & safety rules engine for real-time event processing at scale.
  • Diagnosed why `docker compose up` failed on Windows: with Git's default `core.autocrlf=true`, `*.sh` files check out with CRLF, turning the shebang into `#!/bin/bash\r` and failing with a misleading `no such file or directory`.
  • Traced the gap to enforcement timing — the repo's pre-commit hook fixes line endings at commit time, but nothing enforced LF at checkout time.
  • Verified the blobs already stored LF (`git show HEAD:entrypoint.sh | od -c`), so a `.gitattributes` policy was the complete fix with zero content churn.
  • Two added lines, merged upstream, unblocking the stock onboarding path for every Windows contributor.
GitDocker ComposeBashPython
AI / ML06

Satellite Land-Use Classification

Three CNN architectures benchmarked on EuroSAT imagery

2026

  • Land-use classification over EuroSAT satellite imagery, built as a head-to-head comparison rather than a single model.
  • Custom CNN with Swish activation trained from scratch as the baseline.
  • ResNet50 and VGG16 fine-tuned via transfer learning and evaluated against that baseline.
  • Streamlit app wraps the trained models for interactive single-image inference.
PythonTensorFlowResNet50VGG16Streamlit
AI / ML07

Educational Feedback System

NLP analysis of student writing and code, with actionable feedback

2025

  • Streamlit application that scores text and code, then explains what to fix rather than only grading it.
  • Sentiment via both VADER and RoBERTa, plus Flesch/Kincaid readability, vocabulary richness, and structure metrics.
  • Grammar and style checks for run-on sentences, passive voice, and weak words; subject-specific misconception detection.
  • Python code path checks syntax, logic, efficiency, and PEP 8 compliance with improvement suggestions.
  • Batch mode compares multiple submissions with Plotly visualizations and session-tracked history.
PythonStreamlitRoBERTaVADERPlotly
AI / ML08

Retail Analytics Dashboard

Market basket analysis and RFM segmentation over a year of transactions

2025

  • Interactive dashboard over the UCI Online Retail dataset — a year of transactions from a UK non-store retailer.
  • Apriori association rules surface item combinations that co-occur, driving product recommendations.
  • RFM analysis segments customers by recency, frequency, and monetary value to target promotional strategy.
  • Country-level revenue, product, and customer performance drillable at monthly, weekly, and daily granularity.
PythonStreamlitAprioriPandas
SYSTEMS09

Multi-Client Group Chat

Low-latency messaging over raw TCP/IP sockets

  • Real-time messaging platform built on Java socket programming for low-latency communication.
  • Multi-threaded server handles concurrent client connections with synchronized broadcasting.
  • Asynchronous Swing/AWT GUI keeps chat sessions dynamic and lag-free.
JavaTCP/IP SocketsSwing/AWT
TRACE_LOG/ 005

TRACE LOG

  1. BE CSE @ BNM Institute of Technology

    [in progress]

    Aug 2023 — present

    Computer Science and Engineering, Bengaluru. CGPA 9.70.

  2. PwC Launchpad — SAP S/4HANA Track

    [shipped]

    2026

    Industry training across SAP S/4HANA, Java, SQL, MongoDB, and generative AI; hands-on ERP and enterprise app development.

  3. 3rd Place — HackFusion 1.0

    [shipped]

    Sept 2025

    Maharaja Institute of Technology, Mysore. AI-based solution built in a 24-hour national-level hackathon.

  4. Kaggle Agentic AI Competition

    [shipped]

    Jun — Jul 2026

    Built the Automated Vendor Risk Assessor — a hierarchical Google ADK agent pipeline over an MCP tool server, with deterministic Python scoring.

  5. First upstream merge — roostorg/osprey

    [shipped]

    Aug 2026

    PR #451 merged into Roost's open-source trust & safety rules engine: a .gitattributes policy that fixes CRLF-broken shell scripts on Windows checkouts.

  6. Software Development Intern — Nife Labs

    [shipped]

    Nov 2025 — May 2026

    Enterprise-grade AI management solution for secure, compliant interactions with external LLMs. Configurable compliance architecture and token-optimization strategies.

  7. AI Safeguards Engineering Intern — XelerAIT

    [in progress]

    Aug 2026 — present

    Guardrails framework for AI-driven healthcare; safety, reliability, and compliance for production agentic AI.

  8. Deeper into AI red-teaming

    [queued]

    next

    Evaluation harnesses for agentic systems, adversarial robustness, and more upstream contributions to open-source trust & safety tooling.

CONNECT/ 006
shell