════════════════════════════════════════════════════════════════════════════════
W A R R A N T                                           self-issued · 2026-08-27
════════════════════════════════════════════════════════════════════════════════

A warrant is a signed statement that one party may act on another's
behalf. That is the thing I build, so this page is one.

Everything here is signed twice — Ed25519 for today, ML-DSA-44 for the
decade after RSA stops being a good idea. Neither signature asks you to
trust me, or GitHub. Clone this and run the verifier yourself.

── SUBJECT ─────────────────────────────────────────────────────────────────────

  udaya vijay anand
  new york, ny · ms quantum science and technology, columbia

── CAPABILITIES ────────────────────────────────────────────────────────────────

  agent.memory:write        erys
                            An ambient macOS agent that watches your work,
                            remembers what you committed to, and follows
                            through on it.
                            erys.app

  agent.delegation:prove    warrant
                            A delegation-proof layer for AI agents, built on
                            post-quantum signatures. If an agent acts for you,
                            there should be proof you allowed it.

  graph.professional:read   know
                            Professional network intelligence for B2B teams,
                            co-founded with a friend.
                            useknow.io

── PRIOR ───────────────────────────────────────────────────────────────────────

  USENIX Security           first-author paper on adversarial attacks against
                            LLM-powered security tooling
  KPMG                      incident response
  DBS Bank                  vulnerability assessment
  Purdue                    cybersecurity and network engineering

── WHAT THE SIGNATURE MEANS ────────────────────────────────────────────────────

  It proves this document has not changed since I signed it, and that
  it was signed by the holder of the key below. That is all a signature
  has ever proved. It does not attest that the section above is true —
  for that you ask the institutions, not the maths.

  Knowing exactly where that line falls is most of my work.

── SIGNATURE ───────────────────────────────────────────────────────────────────

  payload      warrant.json          sha-256  d19854919c7c9bc6e58e65a0
  ed25519      public key                     uFw36gOqXuYypeP738toblt8
               signature                      TBUqa3dUt+2vmjUDy5GHDFzc
  ml-dsa-44    public key   sha-256           df6753cdb6d545f3700a0b24
               signature    sha-256           e3364f75300c6058d690297f

  Full keys and signatures are in warrant.sig.json. The ML-DSA public
  key is 1312 bytes and its signature 2420, against 32 and 64 for
  Ed25519. That size difference is the price of the next thirty years.

  pip install cryptography dilithium-py

  $ python3 verify.py
  [ ok ] sha-256     d19854919c7c9bc6e58e65a0
  [ ok ] ed25519     signature valid
  [ ok ] ml-dsa-44   signature valid   FIPS 204
  warrant intact.

── NOT UNDER WARRANT ───────────────────────────────────────────────────────────

  Some things do not need proving.

  I photograph people. Sony A7III, mostly the 85mm. The practice is
  called Sora.                                             thesora.io

  I was a competitive inline speed skater in India and I am slowly
  finding my way back to it in New York.

  I keep returning to the Mahabharata, especially the Tamil retellings.

── OPEN ────────────────────────────────────────────────────────────────────────

  — What does it mean to prove an agent was allowed to act?
  — Which of today's signatures will still mean anything in 2040?
  — How much can software do for you before it stops being yours?

════════════════════════════════════════════════════════════════════════════════