abbas tolgay yılmaz

Interposed

Remote · 2026 – Present

A governance and enforcement layer for AI coding agents. A per-host Linux daemon and a fleet operator put every action an agent takes — exec, file, network — under policy: the agent uses a cooperative intent plane to pre-clear its work, trusted actions pass, and anything gray-area waits for a human. Built in Go, validated end to end on a live fleet.

• Agent harness: wraps coding agents (Claude Code, pi.dev) so every session runs under enforcement, and injects a cooperative intent/MCP layer (declare_intent / query_policy / request_approval) so the agent plans around policy instead of trial-and-error — the human approves fewer, clearer things.
• Governed agent capabilities: push curated agent extensions and skills to a fleet and pre-stage the exact trust footprint each one needs — learned automatically from what a real run actually touched (per-session kernel audit) — so an agent's tooling runs without a storm of prompts.
• LSM-BPF kernel enforcer (8 hooks: exec, file_open, socket_connect, ptrace, and more) over a watched-PID tree; a policy broker gates every non-trusted action, with a signed fleet-wide trust/quarantine baseline and live policy reload.
• On-device intent oracle annotates each approval with the action's likely intent using a local model, so a human decides with context rather than a raw syscall — and nothing leaves the host.
• Hardware-rooted, multi-factor approval: policy sealed on disk under a FIDO2 key (or PIN / phone), so an agent cannot rewrite its own permissions; Ed25519-signed per-host audit relayed to S3 Object-Lock (WORM) and OTLP/SIEM; offline licensing and zero telemetry for air-gapped networks.
• Fleet operator (desktop app) manages many hosts over mutual Noise_IK (WireGuard's crypto core — pinned keys, no CAs, one TCP port): identity/org management, fleet policy, tap-gated remediation, a live embedded terminal, and over-the-wire daemon updates.
• Contributor to aauth-go, a Go implementation of the IETF AAuth draft the broker builds on (agent identity and cross-domain authorization): github.com/aauth-dev/auth-go.

ConsAuth Systems

Remote · 2025 – Present

Consent-first identity platform: custom IdP + OAuth2/OIDC (Ory Hydra), Go services, PostgreSQL/Redis. SSO across apps with user-owned preferences and Solid/WebID-aligned flows; optional private pod provisioning.

• Owned protocol and service design around Hydra: authorization & token issuance, client/developer lifecycle, consent and scope modelling. The same mental model as scaling trusted auth and app-to-app permission flows for many consumers.

Governate Oy

Helsinki, 1.2025 – Present

Post-quantum file security platform built from scratch in Go on GCP: hybrid AES-256-GCM + Kyber-1024 encryption, policy-based access control, and cross-platform clients.

• Go Fiber backend with mTLS, WebAuthn, MFA, and audit logging to ClickHouse; real-time layer over NATS and Redis; Grafana + Prometheus observability; GitHub Actions CI/CD.

Start a World Peace Teknoloji A.Ş.

2023 – Present

Freelancing, open-source contributions, and building and experimenting with products.

Vattenfall Energy Trading GmbH

Hamburg, 2019 – 2022

• Contributed building a containerized data platform aggregating real-time feeds from 50+ wind turbines at Princess Alexia Wind Park.
• Designed modeling pipelines processing 5M+ telemetry events/day using Kafka and Cassandra.
• Improved energy trading accuracy by 18% through turbine curtailing and production scheduling optimizations.
• Reduced forecast deviation by 25%, increasing revenue from wind asset trading.
• Engineered secure infrastructure for EV charging networks, supporting 1,000+ active charging sessions/day.
• Secured SCADA communications for power plants including CHP and nuclear facilities, strengthening cybersecurity compliance with OpenMUC library.

Element Insurance AG

Lübeck, 2018 – 2019

• Enhanced and scaled insurance microservices serving 100K+ policyholders across multiple internal teams.
• Delivered 5+ new platform capabilities by integrating APIs and shared services across departments.
• Led cloud migration efforts, moving 70% of workloads to AWS, improving system reliability.
• Implemented Infrastructure-as-Code (Terraform) reducing environment setup time by 80%.
• Built and optimized React dashboards used daily by 50+ internal users.

Türkiye İş Bankası A.Ş.

Istanbul, 2017 – 2018

• Reverse-engineered and integrated legacy SOAP/WSDL endpoints using SmartBear SoapUI's Java SDK, enabling automated testing of the bank's internal service infrastructure.
• Built and maintained internal web tools with Spring Boot backend and jQuery/vanilla JS, HTML, CSS frontends.
• Optimized API testing workflows, improving reliability and reducing manual verification overhead across core banking services.
• Collaborated with cross-functional banking teams to document and standardize internal service contracts, improving onboarding for new engineers.