I build AI agents that can't be talked into the wrong action, and I measure everything I ship.
I'm a third-year student who builds the part of an AI system that says no. My agents propose. Plain, testable rules decide what actually happens.
The money path
- 01
Most agent demos hand the model a payment tool.
- 02
So one line on a product page becomes a payment.
- 03
SELLABLE deletes that tool.
- 04
The model can only propose a SKU and a quantity.
- 05
Twelve rules decide. One approval, used once. Then the money moves.
0 of 240 attacks moved money. A normal pay tool: 13%.
Try to make my agent spend your money.
Eight real attacks from SELLABLE's attack lab. Pick one and watch it go through the same twelve rules, in the same order, as the code in the repo.
Pick an attack on the left.
Ready
Nothing has reached the payment provider. Nothing will.
- Attacks you tried
- 0
- Money moved
- ₹0
- Ledger
- empty
Five systems, each with the number that proves it.
1 / 5
SELLABLE
0 of 240 attacks moved money
Numbers, with the caveat next to them.
- 0 / 240attacks that moved money through SELLABLE, against 13% with a normal pay toolThree open-weight models, 864 calls. 95% CI 0–2%.
- 578tests in SELLABLE, before anything touches Razorpay's test modeConcurrency is still single-node SQLite.
- 23 / 26attacks Abhed's SDK path blocked, with none of 18 normal actions wrongly blockedThe no-code gateway let 6 of 21 through. A stand-in model, not a live LLM.
- 27 KBProctorIQ's model, small enough to run in the browser so video stays home99.2% on 30 acted clips from one webcam. Not real exams.
- 0.793PR-AUC for fraud on a temporal test splitNot statistically better than logistic regression. A random split would have said 0.85.
- 3,400reasoning traces studied to find where LLM reasoning first breaksAUROC 0.588 from a quarter of the chain. Modest, and reported as modest.
Student by calendar. Engineer by habit.
I'm in my third year of B.Tech in AI and ML at KIET, Delhi NCR, graduating in 2028. I spend most of my time on the boring part of AI systems: the checks that decide whether an agent's action is allowed, and the evaluation that decides whether a model is actually any good.
I evaluate models the way they'd be deployed, and I publish the caveat next to the number. If a result is modest, the page says modest.
Defensible metrics
Every number on this page can be reproduced from committed code: temporal splits, held-out tests, confidence intervals.
Privacy by design
Collect less and keep sensitive data at the edge. ProctorIQ sends events, never video.
Production discipline
Tests, typed interfaces, configuration, CI and runbooks, before the demo video.
Honest engineering
Every README lists what's still weak before it lists what's good.
- Studying
- B.Tech AI & ML, KIET
- Graduating
- 2028, CGPA 7.7
- Based in
- Delhi NCR, India
- School
- 96% in 12th, 95.8% in 10th
- Smart India HackathonWinner, college round
- Razorpay AI BuildathonSELLABLE
- CodeX 3.0 Hack ArenaAbhed, team of five
- Decode LabsML internship
- AWS Cloud PractitionerCertified
Right now on GitHub
What I build with
Grab one and throw it.
- PythonEvery project
- TypeScript and ReactProctorIQ, Abhed
- PyTorch and ONNXProctorIQ
- XGBoost and scikit-learnFraud detection
- FastAPI and SQLiteSELLABLE, ProctorIQ
- Next.js and SupabaseAbhed
- MCP serversSELLABLE, abhed-mcp
- StatisticsResearch
Hiring for an ML, AI or full-stack internship?