Sanchit Sahay

OpenSSF initiative to augment Software Bills of Materials (SBOMs) with build time in-toto attestations.

WebAssembly sandbox for isolating unmodified POSIX applications, with 3i routing system calls through composable userspace policies.

Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.

A kernel module implementing Apple's HFS+ filesystem for FreeBSD 14 — modernizing the VFS-layer APIs, removing Darwin dependencies, and building the mount_hfs, newfs_hfs, and fsck_hfs userland utilities.

Contributor to Cargo, Rust's official package manager and build system.

A POSIX tail that supports grepping a log stream while it is still being written, via --follow.

A local stand-in for Google App Engine, so services can be run and tested without deploying to GCP. Grew out of the CI/CD work at LegalAI.

Compares LLM fine-tuning strategies and documents the trade-offs between them: PEFT (LoRA, QLoRA, GoRA), quantization, and distributed-GPU training (DDP and FSDP).

Benchmarks optimization techniques for Learned Bloom Filters, weighing false-positive rate against memory use across Projection Hashing, Caching, and LoRA.

A single place for college students to keep their academic and professional data. It pulls from Notion and Gmail to track job applications, and uses RAG over personal notes so they can be queried in plain language.

Predicts NYC subway ridership from temporal and fare-class features, and clusters stations to surface neighborhood-level traffic patterns.