Skip to content
View jersonboydmilan's full-sized avatar
🎯
Focusing
🎯
Focusing

Achievements

Achievement: Pull SharkAchievement: Quickdraw

Achievements

Achievement: Pull SharkAchievement: Quickdraw

Block or report jersonboydmilan

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
jersonboydmilan/README.md

Jerson Boyd Milan

AI systems, autonomous agents, and Physical AI — local-first, practical intelligence.

Website CUDA-Q contributor Open-source PRs

I build agent systems that can act with real capability without handing the agent, or an attacker who compromises it, unrestricted power. Most of my time goes into authority and safety architecture for autonomous agents, and into upstream fixes for the open-source tools I build on.

Now

  • Designing authority boundaries for agents: deny-by-default policy, non-transitive delegation, tamper-evident audit.
  • Contributing to NVIDIA CUDA-Q: docs fixes and Python bridge fixes, each verified against the real runtime.
  • Exploring Physical AI data pipelines and agent tooling.

Featured projects

Sentinel
An authority-attenuating immune architecture for AI agents. Detects and contains compromised agents without giving defenders unrestricted authority.
Python · agent security

Capgate
A runtime authority boundary for autonomous agents: the agent proposes, the harness authorizes, the executor acts. Deny-by-default policy, non-transitive delegation, tamper-evident audit.
Python · MCP gateway · isolation

Agent-Skills-Compendium
An open registry of fully specified AI agent skills, with taxonomy, canonical schema, composer, governance model, and a fleet runner.
TypeScript · multi-agent systems

QUANTUM-CUDA
The analysis, runnable verification, and patches behind my CUDA-Q contributions. Every claim is checked against what CUDA-Q actually executes, not transcribed from comments.
Python · quantum computing

Open-source contributions

Status badges are live and update as PRs are reviewed.

Project Contribution Status
NVIDIA CUDA-Q Documented exp_pauli, givens_rotation and fermionic_swap, and fixed a sign error in the applyExpPauli doc comment every simulator backend inherits #5459
Documented qvector targets for custom ops in Python vs C++. Its review led the architect to state the DSL's overload rules; the maintainers then removed the Python-only behavior in #5652 #5609
Fixed the custom KrausChannel example under cudaq.apply_noise, which crashes as printed #5608
Single-target broadcast for custom operations (#5646), verified on the real runtime; direction under discussion after #5652 #5649
Made the Observe examples on "Executing Kernels" runnable on their own (#3409) #5655
"Building Kernels" now shows the state each example prepares instead of a bare call (#3384) #5658
NVIDIA Physical AI Data Factory Fixed a NameError crash in the Video Data Augmentation pre-submit guard's model-cache check #22
Microsoft Agent Governance Toolkit A 240-scenario red-team measurement suite that scores real detector catch/miss rates on canonical and evasion prompt-injection probes #4346
AgentKit x-/X- extension fields in the Agentkitfile, so values can be defined once and reused through YAML anchors #71
Every Agentkitfile validation error names its file and line, and carries a BuildKit source location so Docker shows the surrounding lines #75
guardrail docker_container_guard: blocks docker run/create flags that break container isolation #52
RepoLens A --schema flag exporting the JSON Schema of the machine-readable report #5

Also filed on request of the CUDA-Q architect: Python bridge bugs #5646 and #5647. #5647 is now resolved on main by #5652.

How I work

  • Verify, don't transcribe. Every claim in a PR is checked against what the code actually does, using the real runtime, a reproducer, or a numerical check, and the script goes into the repo.
  • Small, reviewable changes. One concern per PR, history traced through the linked issues, and open questions left to the maintainers instead of settled unilaterally.
  • Honest scope. What I couldn't verify is stated in the PR, not glossed over.

Focus areas

Agent authority & permission boundaries · Multi-agent governance · Skill composition · Physical AI · Local-first AI

Pinned Loading

  1. cuda-quantum cuda-quantum Public

    Forked from NVIDIA/cuda-quantum

    C++ and Python support for the CUDA Quantum programming model for heterogeneous quantum-classical workflows

    C++

  2. Nvidia-Physical-AI-Data-Factory Nvidia-Physical-AI-Data-Factory Public

    Shell

  3. QUANTUM-CUDA QUANTUM-CUDA Public

    Analysis, numerical verification, and the patch behind NVIDIA/cuda-quantum#5459 — documenting exp_pauli, givens_rotation and fermionic_swap

    Python

  4. Sentinel Sentinel Public

    SENTINEL: an authority-attenuating immune architecture for AI agents. Detect and contain compromised agents without giving the defenders unrestricted authority.

    Python 5 2

  5. Agent-Skills-Compendium Agent-Skills-Compendium Public

    An open registry of 76 fully specified AI agent skills — taxonomy, canonical schema, composer, governance model, and a fleet runner that deploys hundreds of agents against one objective and rehears…

    TypeScript 6 3

  6. Capgate Capgate Public

    Capgate — runtime authority boundary for autonomous AI agents: the agent proposes, the harness authorizes, the executor acts. Deny-by-default policy, non-transitive delegation, tamper-evident audit…

    Python 5