Shikhar Goel

Software Engineer · distributed systems, static analysis, native apps — and the AI layer on top

I build durable backend systems and developer tooling — crash-safe storage, fault-tolerant dispatch, and analyzers that produce a working exploit rather than a warning. The agent and evaluation work runs on the same stack: deterministic checks around probabilistic models.

Selected work merged or landed upstream. Every row links to the merge or landing commit.

Project	What it is
conveyor-job-queue Go Connect RPC Protobuf Prometheus	Durable distributed job queue built around crash-safety: a CRC32C-checksummed, length-prefixed write-ahead log with torn-write detection, flushed with F_FULLFSYNC rather than plain fsync; group commit so N concurrent submitters share one flush; lease and fencing logic with jittered backoff and dead-lettering. 32,232 submissions/sec, 7.7 ms recovery for 100K records. The hard part: a worker that stalls for 30 seconds and comes back must not be able to acknowledge a job someone else now owns. The badges above are regenerated by CI, not typed here.
redoscope TypeScript Node ≥22.18 zero deps	ReDoS static analysis that verifies its own findings. Parses the full ECMAScript regex grammar, compiles to an NFA modelling real backtracking, detects exponential and polynomial paths via product automata, then generates a witness attack string and times it inside a killable child process. Benchmarked on 627 real-world regexes: a star-height heuristic gave 10 false positives and missed 14 real vulnerabilities; this pipeline hit 0 false positives and 0 misses. The hard part: "looks risky" is not a vulnerability. The tool has to produce a concrete string that actually hangs the engine, and prove it with a measured growth curve.
rescuerelay Next.js 15 TypeScript Leaflet Recharts	Explainable crisis-resource coordination platform. Camps and clinics report needs, providers register available resources, and a deterministic matching engine ranks compatible pairings by priority, distance, availability and fairness — with a plain-language explanation attached to every recommendation. Offline-capable field intake for low-connectivity reporting.
LiveEnv — private repo Next.js SQLite WebSocket IndexedDB MapLibre	Local-first, decay-based geospatial social platform across four surfaces. Geohash-partitioned SQLite serving a hot TTL-swept table alongside durable transactional tables; paid placements settled through an append-only double-entry ledger so money never moves without minting the pin; IndexedDB offline outbox with idempotent client-ID-keyed sync.
AgentBar — private repo Swift Xcode Keychain SQLite	Native macOS menu bar app unifying usage tracking across Codex, Claude Code, Gemini, Cursor, OpenCode and Z.ai into one stacked bar with per-service metrics. Secure credential handling through macOS Keychain across heterogeneous sources; shipped as a signed .dmg under MIT.

stateDiagram-v2
    direction LR
    [*] --> Pending: Submit, appended to WAL and flushed before ack
    Pending --> Leased: Lease granted, epoch incremented
    Leased --> Done: Ack carrying the current epoch
    Leased --> RetryWait: Nack, or lease timeout reclaim
    RetryWait --> Pending: backoff with jitter
    RetryWait --> DeadLetter: retry budget exhausted
    Leased --> Leased: Ack carrying a stale epoch — rejected
    Done --> [*]
    DeadLetter --> [*]

The epoch is the fencing token. A lease timeout and an explicit Nack decrement the same retry budget, so a poison-pill job cannot loop forever without reaching the dead-letter queue.

AI Intern — Bharat Electronics Limited, Bengaluru · Jul – Aug 2026 Backend API integrations in FastAPI, a React/Vite analytics dashboard turning application data into usage, latency and performance views, and improvements to the project's RAG pipeline.

Remote AI Intern — Facillima · May – Jun 2026 Shipped an AI-native EdTech platform end to end in Next.js/TypeScript — technical SEO, structured data, analytics instrumentation, third-party LMS integration — and led evaluation of the company's LLM observability stack.

Certifications — Anthropic AI Fluency, MCP, Agent Skills and Subagents · Walmart Global Tech Advanced Software Engineering · Deloitte Cyber · Google Ads Apps

Languages

AI & agents — where most of my work sits

Agent runtimes & interfaces

Protocols, platforms & orchestration

Concepts: RAG · autonomous agents · multi-agent orchestration · deterministic verification · model evaluation & benchmarking · release gating · prompt engineering · LLM observability

Tools: LangSmith · Braintrust · Zod · Ajv · Vitest · agent skills & persistent memory

Machine learning & data

Concepts: ensemble methods · CNNs & Grad-CAM explainability · feature engineering · model calibration · ROC-AUC / permutation importance

Systems & infrastructure

Concepts: write-ahead logging · crash recovery & durability · fencing tokens · lease-based dispatch · group commit · static analysis / automata · local-first & offline sync

Backend, frontend & stores

Core CS: data structures & algorithms · DBMS · object-oriented programming · distributed systems · software testing (pytest, Vitest, Playwright, Ruff)

_{Conveyor's crash-safety and throughput figures are re-measured on every push by verify.}