# Borys Tsyrulnikov

> Borys Tsyrulnikov researches hardware attestation, confidential computing, and authority boundaries in AI agents and MCP servers.

This is Borys Tsyrulnikov's personal website. The HTML pages are canonical, and the Markdown alternates contain the core public text for agents.

## Profile and disclosures

- [About Borys Tsyrulnikov](https://borystsyrulnikov.dev/about.md): Research focus, method, public work, AIR, and contact.
- [Public security work](https://borystsyrulnikov.dev/index.md): Published vulnerabilities, upstream corrections, accepted reports, and external evidence.

## Writing

- [Two bugs in Intel's TDX guest crate](https://borystsyrulnikov.dev/posts/tdx-guest-l2-vm-bugs.md): Root-cause and impact analysis of CVE-2026-20763 and CVE-2026-20765.

## Technical work

- [AIR Internet-Draft](https://datatracker.ietf.org/doc/draft-tsyrulnikov-rats-attested-inference-receipt/): Attestation-linked AI inference receipts.
- [GitHub](https://github.com/tsyrulb): Public code and research tools.

## Contact

- [Email Borys Tsyrulnikov](mailto:tsyrulnikov.borys@gmail.com): Research and coordinated disclosure contact.