Ph.D. candidate at NYU working on software supply chain security at Secure Systems Lab. Especially interested in dependency graph security and behaviors in build systems. Maintainer of in-toto. Operator of NYU’s Arch Linux rebuilders.