I find real bugs in real open-source projects, verify them empirically, and ship fixes upstream.
- Verified upstream contributions — bug fixes with regression tests that fail pre-fix and pass post-fix. No drive-by PRs.
- Dogfood, don't reinvent — use existing tools hard, then fix them instead of building parallel versions.
- Work in the open — research, code, and verification are public by default.
- Upstream contributions to open-source projects I actually use
- Maintaining the interventus org (being rebuilt from scratch)
Every fix ships with proof: failing test first, green suite after. 😐