Skip to Main Content

Divyansh Shukla

Report

Indian FOSS contributor based in Jaipur, focused on reproducible correctness and security boundaries in AI-agent tooling and software supply chains. Four merged upstream AgenTrust pull requests: TPM reference-simulator conformance vectors (agentrust-io/agent-manifest#323); TDX signature parsing delegation (agentrust-io/cmcp#528); delegation-chain verification (agentrust-io/ca2a#120); and Shadow AI identity/compatibility corrections (agentrust-io/integrations#221). Public research: github.com/devdiv07/when-is-a-screenshot-evidence, an Apache-2.0 study of visual-evidence provenance and its limits. Reported a reproducible PEP 751 parsing defect in aquasecurity/trivy Discussion #11402, later tracked by a maintainer as issue #11411; did not author the issue or fix. I use AI assistants in portions of research, implementation, and tests and document provenance and independent-verification limitations. GitHub profile provides links and technical evidence. Funding is requested for future public contributions, not to release an unvalidated private product.

Projects

When Is a Screenshot Evidence?

spdx:Apache-2.0

Existing public Apache-2.0 research on the limits of screenshot provenance and source attribution in computer-using AI agents. This is a public research baseline and a possible location for further reproducible provenance evidence. The requested fellowship supports the individual's related upstream contributions and public research; it does not seek funding on behalf of third-party maintainers or claim that their projects are owned by the applicant.

Funding Plans

Three-month individual FOSS contributor fellowship

One-time · INR

Three months of part-time FOSS work (INR 30,000/month) on correctness and provenance in AI-agent security tools. Month 1: choose a concrete upstream question and publish a scoped audit/reproducer. Month 2: submit evidence-based tests/fixes if warranted, or document negative results. Month 3: verify results and publish a community write-up. Upstream merges are not guaranteed. Full proposal: https://github.com/devdiv07/devdiv07/blob/main/FELLOWSHIP_PROPOSAL.md

90000 INR
Funding Channels
Private-Bank-Transfer
Bank
Bank transfer information will be supplied privately after a funding decision. No banking information is published in this manifest.