Rushil Jaiswal

I build AI systems that have to be right, and I audit the things that decide whether they are.

Claremont McKenna ’29 · CS at Harvey Mudd · Claremont, CA

See the work GitHub Email

Latest What agents don’t test: an RL task where the newest model fails most runs →

About

I work on the layer that decides whether an AI system is right. In reinforcement learning a verifier scores the model’s work, so the verifier is what “good” means. Most people check whether it can be gamed. I check the other direction, whether it rejects work that is correct but different: vaudit found that three of five published grading strategies rank a blank screen above a correct implementation. The same question shows up in agent security. Airlock pays real invoices and was fooled once in 39 injection attacks, but never moved money, because payment destinations come from records instead of from anything a model read.

I’m a software engineering intern at a 140-person IT staffing firm and the sole engineer on their AI candidate-sourcing platform. It runs in daily production across about 80 open requisitions a month. Most matching tools rank résumés by keyword overlap with the job description. Mine ranks candidates on who actually got placed, and on what recruiters said about them.

Before college I started Wrapit Recovery, a patented athletic-recovery sleeve. 600 units and about $15K across five gym partnerships, with the manufacturing and support done myself.

Every project here lists what’s wrong with it. Most pages end with the part I couldn’t solve, and seven of the projects are dead.

Experience

Software Engineering Intern, IT staffing firm Current May 2026 to now Sole engineer on an AI candidate-sourcing platform in daily production at a 140-person firm. I own retrieval and ranking end to end across FastAPI, Postgres, Pinecone and React, serving about 80 live requisitions a month. Found a silent failure in the deduplication path that was dropping every previously-sourced candidate from later searches, which restored 24 candidates per requisition. Built the system’s first evaluation harness and used it to show the LLM scorer was non-deterministic at temperature 0, cutting a 34-point mean spread to about 10.
VP of Partnerships, Claremont VC Current 2026 to now Student venture group across the Claremont Colleges. I run partnerships, building the relationships with funds and founders that the rest of the club’s work depends on.
Founder, Wrapit Recovery Shipped High school Designed, patented and sold an athletic-recovery sleeve. 600+ units and $15K+ in revenue across five gym and athletic-program partnerships, with manufacturing, fulfilment and support done myself.

Selected work

Telos Internship 2026 to now AI candidate sourcing in daily production at a 140-person IT staffing firm, serving about 80 open requisitions a month. Ranks candidates on placement history rather than keyword overlap; I own the retrieval and ranking end to end. FastAPI · Postgres · Pinecone · React · JobDiva API Airlock Hackathon 2026 Agents will get fooled. Getting fooled shouldn’t move money. Zero unauthorized payments across 39 injection attacks. A finance team of AI agents reads invoices from email, disputes overcharges with other companies’ agents, and verifies bank changes against the vendor’s phone on file. FastAPI · Claude · Primitive · Inkbox · Stripe · MCP vaudit Research 2026 A correct emulator scored below a blank screen. Three of five published grading strategies rank a blank screen above a correct implementation. Five CHIP-8 ROMs, each isolating one platform quirk and pre-registered before its bytes existed; a follow-up falsified 4 of its own 14 predictions. Python 3.13 · NumPy · pytest · CI on every push What agents don’t test Research 2026 Opus 5.5 solves 4 of 9 runs on the third version of this RL coding task. Every failing run fuzzed against a reference implementation, reported a match, and missed exactly the rules its fuzzer never generated; three pilots in a real codebase came back clean and surfaced a bug now fixed upstream. Python · Docker · Claude Code · 33 graded runs · 1 upstream PR Vibecheck Shipped 2026 Paste a GitHub repo, get a plain-English security report, then one click opens a PR fixing the top issues. Semgrep, Gitleaks and OSV run inside a sandboxed engine that never executes the target code; the LLM only translates findings and writes patches. Next.js · FastAPI · Semgrep · Gitleaks · OSV · Claude Goodhart Research 2026 Hardens RL verifiers against reward hacking: a red-team swarm finds answers that pass the grader but fail an independent oracle, then a green team patches the grader. Reports a before/after robustness number against held-out ground truth. Finalist, HUD × Y Combinator. Python · Anthropic SDK · FastAPI + WebSocket Hindsight Hackathon 2026 Grades your past predictions against what actually happened and corrects future advice for your blind spots. The concept shipped into GBrain two days later as the “Hindsight calibration wave”; 4th place, GStack × GBrain. TypeScript · Express · GBrain skills · Chrome extension Envoy Hackathon 2026 A voice agent you hand a real errand to: it calls the venue, negotiates with a live host, and books the table. After one breach it writes itself a guardrail that took credential-leak refusal from 0/5 to 5/5 under an independent judge. Pipecat · NVIDIA Nemotron · Twilio · Cekura Yaad Hackathon 2026 A Hindi/English voice companion for people with early dementia. Answers come from a retrieved memory graph or not at all; below a confidence threshold it says it doesn’t know. LiveKit · Pipecat · MiniMax · Moss · FastAPI

All 26 projects, including the dead ones →

Stack

Languages

Python, TypeScript, SQL, Java

Backend

FastAPI, Next.js, Node.js, Postgres, Supabase

AI

PyTorch, Claude, GPT-4o, Pinecone, Pipecat, LiveKit

Data

pandas, NumPy, scikit-learn, statsmodels

Infra

Vercel, Railway, Docker, GitHub Actions, Git, Linux

Interests

  • Hip-hop
  • Poker
  • Hiking
  • Travel
  • Track & Field

~/R