Team

Tom is the creator and lead maintainer of Korext Open Source. He designs the specifications, reviews contributions, and maintains the infrastructure across the seven packages: ai-attestation (verifiable provenance for the leading AI coding tools), supply-chain-attestation (adapters across the leading SBOM and signature ecosystems), ai-license, ai-incident-registry, ai-code-radar, ai-regression-database, and commit-carbon. The work focuses on making AI generated code traceable, licensable, and accountable across software supply chains. The licensing trio (CC0 for specifications, Apache 2.0 for code, CC BY 4.0 for data) is deliberate: zero legal friction for adopters to build on the standards or contribute back.

Korext Open Source is the open layer of a larger thesis. Tom is also Founder of Korext, a commercial governance platform that uses these standards to enforce policy, sovereignty, and audit at the moment code is written. The platform exists because regulated industries (banks, defense primes, healthcare systems) cannot legally adopt autonomous coding tools without provable controls over what the AI writes, where the data sits, and who attests to the output. The standards are the substrate; the platform is the enforcement runtime.

Alongside Korext, Tom is Product and Platform Strategy Lead at Google, where his work centers on Chrome's AI platform, web ecosystem, and developer surfaces. He holds an MEng in AI/ML, Robotics, and Controls from UC Berkeley, an MS in Innovation and Entrepreneurship from HEC Paris, and a BS in Digital Technology, Design, and Innovation from Technological University Dublin. The combination is deliberate: every layer of the Korext stack (specification design, distributed infrastructure, commercial positioning, developer adoption) draws on a different one.

He works from the conviction that the next decade of software gets written faster than humans can review it, and that infrastructure for accountability has to ship at the same pace as the agents producing the code.