AI systems and AI-assisted software engineering
Architecture and workflow guidance for AI systems and AI-assisted engineering, including model and deployment trade-offs (frontier APIs vs. local / open-weight) and reliability concerns.
Independent Technical Advisor for Software Systems
Hands-on technical consulting on software architecture, AI engineering, and distributed systems, with deep expertise in software reliability.
Architecture and workflow guidance for AI systems and AI-assisted engineering, including model and deployment trade-offs (frontier APIs vs. local / open-weight) and reliability concerns.
Testing strategy for complex and stateful behavior using property-based testing, model-based testing, fuzzing, executable specifications, test oracles, and deterministic simulation.
Design and review of distributed, protocol-driven, and stateful systems, including consensus, ledgers, payments, blockchains, smart contracts, control planes and reconciliation loops.
Practical application of model checking, executable specifications, and proof-oriented methods using tools such as TLA+, Lean, Alloy, and related verification tooling.
Assessment and design of reliability and verification tooling, CI/test infrastructure, adoption paths, product maturity, build-vs-buy decisions, and workflows that fit engineering teams.
Architecture review, reliability assessment, technical diligence, tooling and vendor evaluation, and security-oriented review for blockchain, smart contract, and protocol systems.
Formally modeled a stateful on-chain governance protocol before it became critical infrastructure. The work covered cross-contract behavior across voting rounds, upgrades, staking, slashing, permissions, execution paths, and time-dependent phases.
Checked 125 invariants and 992 verification conditions, combining executable specifications, model checking, SMT-based analysis, manual review, and LLM-assisted formalization.
Assessed competitive differentiation, practical limits, product maturity, and adoption barriers in software-reliability tooling.
Formal modeling and verification of accountability, a fundamental safety property, in Ethereum's 3-slot finality consensus design.
Cross-validated the model across TLA+/Apalache, Alloy, and CVC5 to reduce tool-specific risk.
Identified high- and medium-severity vulnerabilities across Solidity/EVM, Stellar, Algorand, and Cosmos protocols, including private competitive audit work for Sherlock, a Web3 security review platform.
Long-running technical advisory role for the Vienna Ball of Sciences. Responsible for technical advice and oversight around the event's IT needs, including webshop and online payment systems.
Designed and delivered hands-on workshops on distributed-systems reliability with executable specifications and protocol fuzzing for technical audiences at DevConf and Protocol Berg.
Contributed to Quint and Apalache tooling for TLA+-style executable specifications, simulation, symbolic model checking, and protocol reliability.
Built Apalache Cloud, a parallel batch-execution engine that delivered 10× speedups on protocol-verification workloads. Work included AWS, Python, Go, Scala, TLA+, and TypeScript.
Conducted security reviews and audits of Cosmos SDK and IBC components.
At Google Research, contributed to ML pipeline tooling and authored large-scale on-device evaluation workflows for mobile ML models.
At Google Cloud, built an automated-reasoning tool for machine-health telemetry inconsistencies using C++ and Z3 SMT.
Conducted PhD-level research in automated reasoning, concurrent-program verification, and complexity analysis.
Teaching included programming languages, object-oriented programming, formal methods, software verification, and information design.
I am available for independent advisory, consulting, technical assessment, architecture review, and specialist implementation work. Engagements are scoped around the technical question, not packaged as products.
Longer technical material on executable specifications, formal verification, model checking, fuzzing, model-based testing, and AI-assisted software reliability lives at blltprf.xyz.
Apalache, symbolic model checker for TLA+ and Quint specifications. Maintainer. Linux Foundation project.
Quint, executable TLA+-style specification tooling. Early development team at Informal Systems, including language design.
Recent workshops include distributed-systems reliability with executable specifications at DevConf and hands-on protocol fuzzing at Protocol Berg.
For advisory work, technical assessment, speaking, or specialist implementation: hello@thpani.net.
Based in Vienna, Austria. Available across Europe and internationally.