I'm Rahul Vishwakarma (rahulxf), a software engineer and open source contributor working on developer tools and software supply chain security.
I'm an active contributor to CNCF's in-toto project, where I work on Witness and Archivista. I also work on aflock, signed and verifiable policies that constrain what AI agents can do, and rookery, a modular attestation framework around Witness.
I'm a Google Summer of Code '24 alum (Submitty), an LFX mentee & mentor (KubeStellar), and a member of Kubernetes and Kubernetes SIGs. I currently contract with TestifySec.
| Date | Title | Event | Links |
|---|---|---|---|
| June 2026 | Oops, My AI Agent Just Deleted All My Email: Locking Down Agents With Signed Policies | Open Source Summit India 2026 | Recording |
| June 2026 | In-toto Attestations for What Really Happens in Your Build Pipeline, With Witness | KubeCon + CloudNativeCon India 2026 | Recording |



