AI systems architecture and strategic AI consulting
Architecture choices, evaluation workflows, local and open-weight model exploration, embeddings, multimodal systems, and the reliability of AI-assisted software engineering.
Independent Technical Advisor for Software Systems
Advice on software architecture, AI systems, reliability, developer tooling, advanced testing, and distributed systems. Strategic assessment, architecture review, specialist implementation, and technical workshops.
Architecture choices, evaluation workflows, local and open-weight model exploration, embeddings, multimodal systems, and the reliability of AI-assisted software engineering.
Property-based testing, model-based testing, fuzzing, executable specifications, test oracles, deterministic simulation, and techniques for making difficult stateful behavior testable.
Consensus, concurrency, blockchains, smart contracts, ledgers, control planes, reconciliation loops, payment and state workflows, and protocol risk. Typical questions involve ordering, retries, and failure handling.
Model checking and proof-oriented methods with tools such as TLA+, Lean, and Alloy. Used selectively, where they add evidence or clarify engineering decisions.
Internal tools, verification tooling, CI/test infrastructure, adoption barriers, product maturity, build-vs-buy questions, and practical workflows that fit how engineering teams actually work.
Architecture and reliability review, technical diligence, tooling/vendor assessment, protocol and security risk, and written analysis for technical and non-technical decision-makers.
Formally modeled a stateful on-chain governance protocol before it became critical infrastructure. The work covered cross-contract behavior across voting rounds, upgrades, staking, slashing, permissions, execution paths, and time-dependent phases.
Checked 125 invariants and 992 verification conditions, combining executable specifications, model checking, SMT-based analysis, manual review, and LLM-assisted formalization.
Assessed competitive differentiation, practical limits, product maturity, and adoption barriers in software-reliability tooling.
Formal modeling and verification of accountability, a fundamental safety property, in Ethereum's 3-slot finality consensus design.
Cross-validated the model across TLA+/Apalache, Alloy, and CVC5 to reduce tool-specific risk.
Identified high- and medium-severity vulnerabilities across Solidity/EVM, Stellar, Algorand, and Cosmos protocols, including private competitive audit work for Sherlock, a Web3 security review platform.
Long-running technical advisory role for the Vienna Ball of Sciences. Responsible for technical advice and oversight around the event's IT needs, including webshop and online payment systems.
Designed and delivered hands-on workshops on distributed-systems reliability with executable specifications and protocol fuzzing for technical audiences at DevConf and Protocol Berg.
Contributed to Quint and Apalache tooling for TLA+-style executable specifications, simulation, symbolic model checking, and protocol reliability.
Built Apalache Cloud, a parallel batch-execution engine that delivered 10× speedups on protocol-verification workloads. Work included AWS, Python, Go, Scala, TLA+, and TypeScript.
Conducted security reviews and audits of Cosmos SDK and IBC components.
At Google Research, contributed to ML pipeline tooling and authored large-scale on-device evaluation workflows for mobile ML models.
At Google Cloud, built an automated-reasoning tool for machine-health telemetry inconsistencies using C++ and Z3 SMT.
Conducted PhD-level research in automated reasoning, concurrent-program verification, and complexity analysis.
Teaching included programming languages, object-oriented programming, formal methods, software verification, and information design.
I am available for independent advisory, consulting, technical assessment, architecture review, and specialist implementation work. Engagements are scoped around the technical question, not packaged as products.
Longer technical material on executable specifications, formal verification, model checking, fuzzing, model-based testing, and AI-assisted software reliability lives at blltprf.xyz.
Apalache, symbolic model checker for TLA+ and Quint specifications. Maintainer. Linux Foundation project.
Quint, executable TLA+-style specification tooling. Early development team at Informal Systems, including language design.
Recent workshops include distributed-systems reliability with executable specifications at DevConf and hands-on protocol fuzzing at Protocol Berg.
For advisory work, technical assessment, speaking, or specialist implementation: office@thpani.net.
Based in Vienna, Austria. Available across Europe and internationally.