pedrost.com
pedrost@pedrost.com:~$ whoami

Pedro Augusto Stürmer

AI Agent EngineerCampo Grande, Brazil

Software engineer. Lately AI agents. Security research on the side.

Now
2025 —

AI agents and AI pipelines at Vanilla, on Bedrock and Claude. Also the platform under them, from Postgres to Kubernetes.

Before that

iFood, Mercado Livre, Jera. Mostly distributed systems and platform work.

On the side

Security research. I report bugs to public disclosure programs.

Curious about

Distributed systems, security, philosophy.

pedrost@pedrost.com:~$ cat nasa-vdp.txt
nasa-vdp.txt2026

NASA — Vulnerability Disclosure Program

Reports I sent to NASA's disclosure program in 2026. Four were accepted and fixed, three came with a letter.

“Please accept this letter as a token of our appreciation for your efforts in detecting this vulnerability.”

NASA VDP
SQL injection
eosdis.nasa.gov
fixed Jun 2026 · letter issued
OAuth token theft via open redirect
Terra Earthdata OAuth Lambda
fixed Jul 2026 · letter issued
Credential phishing chain
LiteLLM · P3
fixed Jul 2026 · letter issued
Unvalidated redirect
Harmony OAuth logout endpoint
fixed Oct 2026
pedrost@pedrost.com:~$ cat work.log

Work

Vanilla
Senior Software Engineer · AI agent engineering
2025 — now

Estate-planning platform. AI pipelines and agents on Bedrock and Claude, full-stack in React and Rails.

iFood
Senior Software Engineer
2024 — 25

Data Store Platform. Postgres and Kafka in Go, used by internal teams.

Mercado Livre
Software Engineer
2021 — 24

Cloud and platform team. An internal service at 170k req/min, and the infra around it.

Jera
Software Developer
2017 — 20

Front-end and back-end, mostly JavaScript and Ruby.

pedrost@pedrost.com:~$ ls projects/

Projects

Imovel90
Property valuation SaaS
2026

Paste the comparable listings, get three prices and the odds of selling at 30, 60 and 90 days. The pricing is deterministic (NBR 14653-2); the model only reads listings and explains the result.

Assinatura de Contrato
Document signing anchored on Ethereum
2018

Sign a document online, get an audit trail anchored on-chain so the timestamp is verifiable. Rails on AWS, hashed in batches to keep gas down.

pedrost@pedrost.com:~$ ls talks/

Talks & writing

Monitoring microservices & telemetry
TDC
2021

How Mercado Livre monitors and prevents failure across its microservices.

The technical side of blockchain
TechX MS
2019

On the nature of money and the consensus problem blockchain solves.

Why is Bitcoin so expensive?
Essay · Medium

The essay the TechX talk grew out of.

pedrost@pedrost.com:~$ cat stack.txt

Stack

Languages

Go · TypeScript · Ruby · Python

Data

PostgreSQL · Kafka · Redis

Infrastructure

Kubernetes · AWS · Terraform · nginx

AI

Claude · Bedrock · agent orchestration · evals

Security

Burp · recon tooling · source review

pedrost@pedrost.com:~$ cat contact.txt

Contact

type a command, or `help`