# Robert DeLanghe — Senior Software Engineer

> AI agents ship code. I write the contracts that keep them in check.

I'm Bobby. I build the controls that keep AI agents inside the job you gave them.

I'm a senior engineer at Aura, where I built the controls for shipping AI-written code after unreviewed agent commits reached main. I open-sourced the approach as prx: agent changes land as merged PRs, each git write checked against the capability the agent holds.

Brooklyn · Aura · Recurse Center · Bennington

## Open to new roles
Senior / founding engineering on agent infrastructure: agent safety and code provenance

Senior engineering on teams building agentic products. I bring direct experience shipping agent-authored systems and the controls that make them trustworthy. Brooklyn · NYC · remote.

## Background
- **Aura** · Senior Software Engineer · Commerce Team (Oct 2023 – present) — The team owns Aura's website and business-operations systems on a Ruby backend, spanning fulfillment, accounting, and third-party integrations. I build the automation on AWS (ECS, RDS, S3, CloudFront) and the contract-and-validation layer behind inventory-purchasing.
- **L2L** · Software Engineer (Apr 2021 – Sep 2023) — Owned the quality gates and developer experience for a 20-engineer team on a Python/Django backend, deployed single-tenant per customer (EC2/ECS, RDS, S3, Lambda). Drove static-analysis CI, a design system, and frontend-performance work.
- **Pioneer Works** · Contract Software Engineer (Nov 2018 – Feb 2021) — Built the event-planning platform's backend for a major Brooklyn arts center — Python and JavaScript on AWS Lambda and Postgres, integrating Square POS over webhooks.
- **Kaleida** · Contract Software Engineer (Jun 2019 – Mar 2020) — Built the just-in-time production automation for an augmented-reality and print-making studio on Postgres, with heavy third-party API integration.
- **Recurse Center** · Participant (Sep 2019 – Dec 2019) — Studied type theory in Haskell, using the type system to make invalid states unrepresentable. It's the root of the capability work: push correctness to the boundary, and violations can't compile.
- **Scope of Work** · Contract Software Engineer (Oct 2018 – Feb 2019) — Built the job-postings CMS behind the manufacturing publication's newsletter, and the publication's customer segmentation, on Postgres — integrating outside tools through their APIs.

### Education
- **Bennington College** · BA, Architecture & Sculpture (Sep 2009 – Dec 2012)

## Selected work
- [prx](https://github.com/bounded-systems/prx): The agent-run work-unit CLI: capability-scoped agents whose privileged effects are verified against a signed owner, driving a work unit through one signed pipeline to a merged PR.
- [guest-room](https://github.com/bounded-systems/guest-room): Guest-agnostic room+door capability runtime — an agent reaches the outside world only through the door references it's handed.
- [claude-box](https://github.com/bounded-systems/claude-box): A capability-secured box for agent sessions — its authority is the door references it holds (keeper/scout/concierge/net), parent-agnostic.
- [door-kit](https://github.com/bounded-systems/door-kit): In-box door-client SDK for claude-box's capability doors (keeper/scout/concierge/spawn), over the guest-room protocol.
- [ocap-provenance](https://github.com/bounded-systems/ocap-provenance): Capability-use provenance — a schema + SLSA mapping binding each privileged effect to a signed owner and an auditable chain.
- [string-audit](https://github.com/bounded-systems/string-audit): Cost-aware, grounded content auditor — typed string symbols, type-scoped audits, CAS-memoized LLM calls.

## Links
- [GitHub](https://github.com/bounded-systems)
- [LinkedIn](https://www.linkedin.com/in/rdelanghe/)
- [Résumé](https://robertdelanghe.dev/resume)
- cv [at] robertdelanghe [dot] dev