BlogsExperimentsTalks
Gufran Mirza

I build and break systems.

Systems & security engineer working on confidential computing, hardware roots of trust, and the low levels of the stack. I write about what I learn along the way.

Read the blogGet in touch
GitHubXLinkedIn
Gufran Mirza

Latest writing

All posts →
Security

Intent Alignment for Humans and Agents in the Browser

An account’s permissions describe what is available, not what belongs to the task. A practical boundary for people and agents working in the browser.

Oct 2026 · 2 min read
Security

No Rule Was Broken

Every control around the browser sees where you went and what bytes moved. Identity tells you whose credentials were used, never who was driving. A human, or an AI agent?

Aug 2026 · 8 min read
Confidential Computing

TLS with Remote Attestation (aTLS) | Machine-to-Machine Secure Channel

An Attested TLS channel is a TLS channel that integrates remote attestation validation as part of the TLS channel establishing process.

Apr 2024 · 5 min read

Explore

Experiments

3

Proofs of concept and things I've hacked on — portable operating systems, cloud desktops, and compute sticks.

View projects →

Talks

8

Conference sessions, guest lectures, and meetup talks on Go, service meshes, and systems security.

View talks →

Where I've worked

Senior Staff Engineer · Palo Alto NetworksAug 2025 — PresentSan Fracisco, CA · Runtime security for enterprise AI — protecting models, agents, and inference in production.Senior Software Engineer · Protect AIAug 2024 — Sep 2025Seattle, WA · AI infrastructure and security, through to the Palo Alto Networks acquisition.Co-Founder · TrustCore SystemsAug 2022 — Jul 2024San Francisco, CA · Confidential computing for the enterprise — TEEs, confidential VMs, containers, and Kubernetes.Senior Software Engineer · IBM / RedHatMar 2021 — Aug 2022Bengaluru, India · NIST-compliant cloud infrastructure — Terraform providers, Kubernetes operators, and Istio / Linkerd service mesh.Software Engineer · ConnectWiseJul 2019 — Mar 2021Pune, India · Microservices and APIs — introduced gRPC for ~7× throughput and built a CDN for software and OS-patch delivery.

New posts, now and then.

No newsletter, no spam — just deep dives on systems and security when I finish one. Follow along wherever you already are.

Follow on GitHubGet in touch