Skip to content

Sashi Kumar

I architect enterprise AI systems.

I design production-grade agentic systems, AI platforms and cloud-native data architectures — from identity, context and memory to MCP, governance, observability and scale.

  • Agentic AI
  • Multi-Agent Systems
  • MCP
  • Bedrock AgentCore
  • Context Engineering
  • AI Security
  • Knowledge Systems
SK
  • Agentic AI
  • Multi-Agent Systems
  • MCP
  • Bedrock AgentCore
  • Context Engineering
  • AI Security
  • Knowledge Systems
  • Data Platforms

Featured Architectures

Enterprise systems I have designed — the patterns, boundaries and production considerations behind them.

View all architectures

Agentic Data Operations Platform

  1. Code
  2. Knowledge
  3. Graph
  4. Agents
  5. Validation
  6. Deployment

AI-native data engineering with lineage-aware automation, governed transformation and human-controlled deployment.

Agentic Data Engineering · Knowledge Graphs · Lineage Intelligence · Metadata AI

Explore Architecture

Agentic Software Intelligence

  1. Requirements
  2. Code
  3. Tests
  4. Evidence

Connecting requirements, code, tests and evidence through AI-driven software lifecycle intelligence.

Software Agents · Requirements Intelligence · Traceability · Test Generation

Explore Architecture

Secure Aerospace Knowledge Center

  1. Identity
  2. Authorization
  3. Knowledge
  4. Retrieval
  5. AI

Identity-aware engineering knowledge retrieval across millions of controlled technical documents.

Enterprise RAG · Fine-Grained Authorization · Engineering Knowledge · Hybrid Search

Explore Architecture

Enterprise Document Intelligence

  1. Documents
  2. Understanding
  3. Validation
  4. Knowledge

Transforming complex enterprise documents into structured, searchable and decision-ready knowledge.

Intelligent Document Processing · Multimodal AI · Semantic Extraction · Confidence Routing

Explore Architecture

Enterprise Agent Security

  1. Identity
  2. Context
  3. Tools
  4. Memory
  5. Execution

Defense-in-depth controls across identity, context, tools, memory, data and autonomous execution.

Agent Security · Prompt Injection Defense · Tool Authorization · Memory Security

Explore Architecture

Featured Thinking

Deep dives into the parts of enterprise AI that only become interesting in production.

All writing

Selected Work

Enterprise systems and architecture problems I've worked on. Described by sector and scale — the customers are confidential, the architecture is the point.

  1. 01

    Fortune 50 · Aerospace

    Enterprise Knowledge Platform

    Problem

    Millions of engineering documents across decades of programmes, where who may read what is itself part of the domain.

    My Role

    Architecture and production readiness, discovery through delivery.

    Architecture

    • Identity-aware search
    • Fine-grained authorization
    • AI-assisted retrieval
    • Document-level entitlements

    Key Decisions

    • Authorization evaluated before retrieval, not after — filtering results a model has already seen leaks them.
    • Entitlements resolved per request rather than cached per session.
  2. 02

    Fortune 10 · Technology

    Agentic Data Platform

    Problem

    Onboarding many developers onto a data estate nobody could hold in their head, where the metadata was more valuable than the data.

    My Role

    Platform architecture and the agent/human boundary.

    Architecture

    • Metadata intelligence
    • Data lineage
    • Transformation agents
    • Knowledge graphs
    • Enterprise governance

    Key Decisions

    • Agents propose transformations; a human approves anything irreversible.
    • Lineage treated as a first-class artifact rather than a reporting by-product.
  3. 03

    Digital Analytics Platform

    Enterprise Natural-Language-to-SQL

    Problem

    Analytics for people who will not write SQL, against a schema where a wrong join is a wrong business answer rather than an error.

    My Role

    End-to-end architecture, evaluation strategy and guardrails.

    Architecture

    • Multi-agent orchestration
    • Metadata intelligence
    • Query execution
    • Visualization
    • Enterprise controls

    Key Decisions

    • Generated SQL validated against the schema before execution, never after.
    • Deterministic orchestration around a reasoning model, not inside it.

Architecture Lab

Working explorations of enterprise AI architecture patterns — the implementations behind the writing.

  1. 001

    MCP Server with Bedrock AgentCore

    • Identity
    • Tool authorization
    • Gateway
    • Agent runtime
    In progress
  2. 002

    Version-Aware Enterprise RAG

    • Revision filtering
    • Entitlement-scoped retrieval
    • Context assembly
    In progress
  3. 003

    Multi-Tenant Agent Rate Limiting

    • Tenant identity
    • Token reservation
    • Cost attribution
    In progress
  4. 004

    Agent Memory Poisoning Defenses

    • Write-path validation
    • Provenance
    • Eviction under pressure
    In progress
  5. 005

    GitHub-to-Knowledge-Graph Agent

    • Repository parsing
    • Entity extraction
    • Lineage construction
    In progress

Knowledge Map

How the writing connects — domains, and the areas within them.

Explore the Knowledge Map

Enterprise AI

  • Agent Architecture
  • Multi-Agent Systems
  • MCP
  • Memory
  • Context Engineering
  • AI Security
  • Evaluation

Data Platforms

  • Metadata
  • Data Quality
  • Knowledge Graphs
  • Lineage
  • Data Governance

Cloud Architecture

  • AWS
  • Serverless
  • Distributed Systems
  • Observability

How I Think About Architecture

Positions rather than preferences — each one is something a system either does or does not do.

  1. Identity defines the execution boundary.

    An agent's access to data, memory, and tools should derive from a verified user, tenant, and purpose.

  2. Context is a governed dependency.

    Useful context needs provenance, version, permissions, and freshness. What the system retrieves shapes what it can safely conclude.

  3. Autonomy should be explicitly scoped.

    Agents can plan and propose, while tool permissions, execution environments, budgets, and write actions remain enforceable.

  4. Every decision should leave evidence.

    Capture identity, source versions, retrieved context, tool calls, approvals, and resulting artifacts so outcomes can be explained.

  5. Approval belongs at the point of consequence.

    Require human review when an action grants access, merges code, publishes knowledge, or changes production state.

  6. Deterministic controls surround probabilistic reasoning.

    Use models for interpretation and synthesis; use explicit rules for authorization, validation, and deployment.

I work at the intersection of AI systems, cloud architecture and data platforms.

My focus is not getting an LLM demo working. It is the identity, context, memory, security, governance, observability and distributed-system concerns required to operate AI systems in production — and what it takes to move from prototype to something a business can depend on.