/uses
What I use
The version-pinned production stack as of 2026-05-03. Inspired by uses.tech. Every line cites a primary source where one exists. Updated by hand when the stack changes.
Editor + agent loop
The two surfaces that touch every line of code I ship.
Cursor
Primary IDE.
Claude Code v2.1.117+
source: Claude Code v2.1.117+ primary source (opens in a new tab)Agent loop with sandbox subprocess isolation enabled (CLAUDE_CODE_SUBPROCESS_ENV_SCRUB=1, PID-namespace isolation). proofloop (the rubric I ship) is verified against this version.
tmux + neovim
Long-running sessions, paired with Cursor for review-on-cursor and ship-on-tmux.
Models in production rotation
Cascading router: simple → small models, complex reasoning → Claude Opus / Sonnet / OpenAI GPT Pro. Google Gemini Pro is eval-only. Named by model family, not version.
Claude Opus
Strategy + planning + nuanced long-context.
Claude Sonnet
Default workhorse for the Agentify orchestrator.
Claude Haiku
Routing + pre-classification.
OpenAI default.
OpenAI GPT Pro
Hard-reasoning cases.
Google Gemini Pro
source: Google Gemini Pro primary source (opens in a new tab)Eval-only, not in production rotation. Used to triangulate when Anthropic + OpenAI disagree.
Active eval. Reasoning-toggleable; agent-runtime evals only, not yet in production routing fallback chain.
Runtime
Python 3.13
FastAPI, Pydantic v2, asyncio everywhere.
Node 22 LTS
Frontend + Edge runtimes.
Next.js 16.x
App Router, RSC, Edge + Node runtimes per route. Pinned ≥ 16.3.6, the security patch floor CI enforces.
TypeScript strict
All frontend + most scripts.
Rust
mnemo + critical infra paths, anywhere I need tight memory control + predictable latency.
Infrastructure
AWS Amplify Hosting
Hosts this portfolio: Next.js SSR behind CloudFront.
Vercel
Frontend + Edge functions for the agent-airlock demo surfaces.
AWS Lambda + ECS
Long-running agent workloads at Attri.ai.
AWS Bedrock Managed Agents (Codex / OpenAI GPT, limited preview)
source: AWS Bedrock Managed Agents (Codex / OpenAI GPT, limited preview) primary source (opens in a new tab)Limited preview, Apr 28 2026. Wraps any Bedrock Codex / OpenAI GPT invocation with the agent-airlock sandbox + capability-lease envelope. Optional bedrock_invocation_arn field shipped in /api/quote/schema.json v0.2.
E2B microVMs
Code execution sandbox for unverified agent-written code. Zero production incidents to date.
Azure WebPubSub
Real-time multi-tenant collaboration in Agentify.
PostgreSQL + pgvector
Primary store. Vector search lives next to the source of truth.
Agent identity (3-layer)
The non-human-identity stack as of mid-2026. See /writing/capability-lease for the manifesto + working wire format.
Okta for AI Agents (NHI binding, opt-in default-off, GA 2026-04-30)
source: Okta for AI Agents (NHI binding, opt-in default-off, GA 2026-04-30) primary source (opens in a new tab)Okta Universal Directory now hosts non-human identities (NHIs) for agents alongside humans. Lifecycle, audit, revocation are first-class. Opt-in module in the consulting starter from today; existing engagements get a one-line patch that binds capability leases to Okta NHI tokens.
W3C DID + Verifiable Credential
source: W3C DID + Verifiable Credential primary source (opens in a new tab)Cryptographic identity layer. /api/quote already accepts agent_identity.did + verifiable_credential per draft-2020-12 schema; verification on the v0.4 roadmap.
Capability-lease envelope (per-call authorization)
source: Capability-lease envelope (per-call authorization) primary source (opens in a new tab)Time-bounded, scope-bounded lease per call with audit-emit channel. Anthropic Project Deal · Cloudflare Mesh · Cisco AWI converge on this shape.
Security tooling (open-source, mine)
I ship and dogfood the agent-security stack I write about. agent-airlock, agent-audit-kit and Provael are Apache-2.0; proofloop is MIT.
Type-checker and contract layer for agent tool calls, deny-by-default and in-process: strict argument validation, ghost-argument stripping, optional PII masking, RBAC, and sandboxed execution.
agent-audit-kit
source: agent-audit-kit primary source (opens in a new tab)SAST scanner for agentic systems: OWASP Agentic Top-10 + MCP Top-10 + 14-framework compliance reporting (SARIF).
7-dimension quality rubric for Claude Code; auto-hooks into the agent loop.
Red-team & assurance for physical AI: attacks vision-language-action robot policies in simulation, reports an attack-success rate with a 95% CI + benign control. The action-layer counterpart to agent-audit-kit's text-layer scanning.
Observability
Datadog
Tracing + metrics across the multi-agent fleet.
Sentry
Error capture, frontend + backend.
PostHog
Product analytics + feature flags.
OpenTelemetry
Trace surface for agent steps.
Hardware
MacBook Pro M-series
Primary daily driver.
External 4K + ergonomic mech keyboard
12+ hour days demand it.
Physical AI (VAJRA hardware + Provael simulation)
Two tracks: VAJRA (build-in-public robot, see /vajra) on the hardware side, and Provael (VLA red-teaming, see /provael) on the simulation side.
Jetson Orin Nano Super (8 GB)
Edge compute. JetPack 6.3 (L4T r36.4.x).
Intel RealSense D435i
Depth + IMU sensing. Sourced, integration in progress.
Custom rover chassis
Differential-drive base, 5-DOF arm + parallel gripper. In fabrication.
ROS 2 Jazzy 0.13
source: ROS 2 Jazzy 0.13 primary source (opens in a new tab)Migrating from Humble; Nav2 stack on top.
NanoOWL @ 0.4.2
source: NanoOWL @ 0.4.2 primary source (opens in a new tab)TensorRT-optimized OWL-ViT for open-vocabulary detection. Pinned commit-sha checked into the build manifest.
GR00T N1.7 (reference impl)
source: GR00T N1.7 (reference impl) primary source (opens in a new tab)NVIDIA April 2026 release. Used as architectural reference, pinned to a specific commit-sha in the build manifest.
Cosmos 3 sim assets v3.1
Synthetic-data factory for affordance training.
LIBERO + robosuite + MuJoCo
source: LIBERO + robosuite + MuJoCo primary source (opens in a new tab)Simulation suites Provael red-teams VLA policies inside. Deterministic, CPU-first for CI.
LeRobot (SmolVLA / π0)
source: LeRobot (SmolVLA / π0) primary source (opens in a new tab)Hugging Face VLA policies Provael targets. SmolVLA is the primary measured checkpoint.
Provael's Python 3.12 env + build toolchain: reproducible lockfile, fast CI.
lib/models.ts (families, not versions). Feedback: sattyamjain96@gmail.com.