════════════════════════════════════════════════════════════════════════════════
W A R R A N T self-issued · 2026-08-27
════════════════════════════════════════════════════════════════════════════════
A warrant is a signed statement that one party may act on another's
behalf. That is the thing I build, so this page is one.
Everything here is signed twice — Ed25519 for today, ML-DSA-44 for the
decade after RSA stops being a good idea. Neither signature asks you to
trust me, or GitHub. Clone this and run the verifier yourself.
── SUBJECT ─────────────────────────────────────────────────────────────────────
udaya vijay anand
new york, ny · ms quantum science and technology, columbia
── CAPABILITIES ────────────────────────────────────────────────────────────────
agent.memory:write erys
An ambient macOS agent that watches your work,
remembers what you committed to, and follows
through on it.
erys.app
agent.delegation:prove warrant
A delegation-proof layer for AI agents, built on
post-quantum signatures. If an agent acts for you,
there should be proof you allowed it.
graph.professional:read know
Professional network intelligence for B2B teams,
co-founded with a friend.
useknow.io
── PRIOR ───────────────────────────────────────────────────────────────────────
USENIX Security first-author paper on adversarial attacks against
LLM-powered security tooling
KPMG incident response
DBS Bank vulnerability assessment
Purdue cybersecurity and network engineering
── WHAT THE SIGNATURE MEANS ────────────────────────────────────────────────────
It proves this document has not changed since I signed it, and that
it was signed by the holder of the key below. That is all a signature
has ever proved. It does not attest that the section above is true —
for that you ask the institutions, not the maths.
Knowing exactly where that line falls is most of my work.
── SIGNATURE ───────────────────────────────────────────────────────────────────
payload warrant.json sha-256 d19854919c7c9bc6e58e65a0
ed25519 public key uFw36gOqXuYypeP738toblt8
signature TBUqa3dUt+2vmjUDy5GHDFzc
ml-dsa-44 public key sha-256 df6753cdb6d545f3700a0b24
signature sha-256 e3364f75300c6058d690297f
Full keys and signatures are in warrant.sig.json. The ML-DSA public
key is 1312 bytes and its signature 2420, against 32 and 64 for
Ed25519. That size difference is the price of the next thirty years.
pip install cryptography dilithium-py
$ python3 verify.py
[ ok ] sha-256 d19854919c7c9bc6e58e65a0
[ ok ] ed25519 signature valid
[ ok ] ml-dsa-44 signature valid FIPS 204
warrant intact.
── NOT UNDER WARRANT ───────────────────────────────────────────────────────────
Some things do not need proving.
I photograph people. Sony A7III, mostly the 85mm. The practice is
called Sora. thesora.io
I was a competitive inline speed skater in India and I am slowly
finding my way back to it in New York.
I keep returning to the Mahabharata, especially the Tamil retellings.
── OPEN ────────────────────────────────────────────────────────────────────────
— What does it mean to prove an agent was allowed to act?
— Which of today's signatures will still mean anything in 2040?
— How much can software do for you before it stops being yours?
════════════════════════════════════════════════════════════════════════════════