Pergamon
The public record of a transition: from a decade of computer science and traditional cybersecurity into AI security. Out in the open, in real time.
For ten years my home turf has been computer science and classic security, malware analysis, and penetration testing. But the ground is moving. The systems worth defending now have models at their centre, and the attacks that matter are moving there too. So I’m making a deliberate turn: to go deep in AI security, and to do it in public rather than quietly in a private lab.
Pergamon is that record. It’s named for the ancient library that invented parchment when its supply of papyrus was cut off, a small act of sovereignty under pressure. Here I write down the transition as it happens: what I’m learning, what I’m building, what breaks, and what it takes to go from strong in one field to genuinely dangerous in the next.
And it’s not a solo climb. To everyone teaching me, reviewing the work, pointing me at the right papers, and pushing me to publish before I feel ready: thank you. This record is partly a way to show that help compounding into something real.
Model internals & red-teaming
Taking models apart to see how alignment really sits in the weights, and where it gives way. You cannot secure what you have not learned to break.
Agent hardening
Securing AI agents against the attacks that actually land: prompt injection, tool shadowing, memory poisoning. Building for a world where the model itself is the thing under attack.
Recent artefacts
Precision abliteration, with receipts. It removes the refusal behaviour from an open-weight language model, then measures what the removal cost.
A privacy-focused steganography toolkit that hides encrypted messages inside everyday images and audio without raising eyebrows.
A strict superset of CommonMark that renders rich, interactive graphics in the browser, with no build step and no loss of plain markdown readability.
A maintained, comprehensive steganography toolkit in a Docker image, picking up where the long dead stego-toolkit left off.