Aaron Fulkerson
San Diego, California, United States
20K followers
500+ connections
View mutual connections with Aaron
Aaron can introduce you to 10+ people at OPAQUE Systems
or
New to LinkedIn? Join now
By clicking Continue to join or sign in, you agree to LinkedIn’s User Agreement, Privacy Policy, and Cookie Policy.
View mutual connections with Aaron
or
New to LinkedIn? Join now
By clicking Continue to join or sign in, you agree to LinkedIn’s User Agreement, Privacy Policy, and Cookie Policy.
About
Aaron Fulkerson has built and scaled category-defining enterprise platforms around a…
Articles by Aaron
-
Your AI Conversations Can Be Subpoenaed. That's Not the Problem — the Architecture Is.
Your AI Conversations Can Be Subpoenaed. That's Not the Problem — the Architecture Is.
On April 15th, Reuters reported that a Manhattan federal judge ordered Bradley Heppner — former chair of bankrupt…
13
2 Comments -
The Agentic Era Needs a Trust Layer — Confidential AI Is ItFeb 19, 2026
The Agentic Era Needs a Trust Layer — Confidential AI Is It
For three consecutive years, OPAQUE has hosted the world's largest Confidential Computing Summit, bringing together the…
31
6 Comments -
Where AI Bleeds DataFeb 13, 2026
Where AI Bleeds Data
The $300 Billion Problem Nobody's Solved Yet — and why we just raised $24M to fix it Across every chapter of my career,…
39
8 Comments -
Obviously, AI adoption is real. Enterprise-scale impact is still rare.Dec 19, 2025
Obviously, AI adoption is real. Enterprise-scale impact is still rare.
Two major research efforts published this year — from UBS and McKinsey — paint the clearest picture yet of where…
4
-
Thoughts as We Shift to a Machine InternetDec 18, 2025
Thoughts as We Shift to a Machine Internet
For three decades, the web quietly relied on invisible guardrails—human limitations. For example: Humans interpret…
10
4 Comments -
AI at the Edge: Governance, Trust, and the Data Exhaust ProblemJul 2, 2025
AI at the Edge: Governance, Trust, and the Data Exhaust Problem
What enterprises must learn—from history and from hackers—to survive the AI wave “The first thing I tell my clients is:…
23
-
Building the Internet of Agents: A Trust Layer for the Next WebJul 2, 2025
Building the Internet of Agents: A Trust Layer for the Next Web
Insights from Vijoy Pandey, Cisco Outshift, and the Confidential Summit “A human can’t do much damage in an hour.An…
25
2 Comments -
Executive Ops: Hiring a Strategic Player to Amplify Our Executive TeamMay 1, 2025
Executive Ops: Hiring a Strategic Player to Amplify Our Executive Team
We’re hiring for a critical, high-impact role: Executive Ops—a force multiplier designed to dramatically extend the…
65
10 Comments -
OPAQUE Systems Named to the 2025 CB Insights' List of the 100 Most Innovative AI StartupsApr 24, 2025
OPAQUE Systems Named to the 2025 CB Insights' List of the 100 Most Innovative AI Startups
Industry's first confidential AI platform recognized for achievements in data privacy and security NEW YORK, April 24…
58
4 Comments -
Accenture Invests in OPAQUE to Advance Confidential AI and Data SolutionsMar 13, 2025
Accenture Invests in OPAQUE to Advance Confidential AI and Data Solutions
NEW YORK and SAN FRANCISCO; March 13, 2025 – Accenture (NYSE: ACN) has made a strategic investment in OPAQUE, a…
156
24 Comments
Activity
20K followers
-
Aaron Fulkerson shared thisDoc Searls provides a helpful explanation of Apple Private Cloud Compute (Confidential AI) and the importance of it, writing “This is the big one, and it just dropped a shoe the size of a continent:” https://lnkd.in/gSztNqtD And I’m flattered to be mentioned and several excerpts of my writing referenced. Doc had a big impact on me when I was in college. I read the Cluetrain Manifesto in college and it rewired me. “Markets are conversations” took McLuhan off the seminar table and made him real. The medium is the message, except now the medium was a modem and a market that belonged to all of us. It made me hopeful. Hierarchy was dissolving, the broadcast monotone was dying, and the people had the mic. Then it soured. The distributed promise got swallowed by consolidation. A handful of platforms came to own the conversation we thought was ours, and the externalities showed up right on schedule. Surveillance, capture, an engagement machine that pays out in outrage. The polarization is the product. The cluetrain we boarded full of hope pulled straight into a wreck we can’t stop rubbernecking at. That’s where my obsession with digital sovereignty comes from. Not a whitepaper. Lived experience. AI is the next medium, the next internet, and right now it’s bending toward the same gravity that broke the last one. We’ve already read this chapter, so we don’t get to plead ignorance. The trust layer the early internet never got is the thing we can still build into AI before consolidation closes the gap. We boarded the cluetrain once. This time we build the tracks.
-
Aaron Fulkerson reposted thisAaron Fulkerson reposted thisAt governr we pay close attention to the controls the open-source community is building, because regulated AI tends to need them before the rules make them mandatory. A few landed this week, all at the Confidential Computing Summit, and they pointed at the same idea: proof that an agent ran the way you said it would, anchored in hardware rather than in a log anyone can edit. > TRACE (agentrust-io/trace-spec), which describes itself as "an open specification for hardware-attested AI agent governance records", sets a portable format for cryptographically provable evidence that an agent ran under a specific policy. Its spec reached v0.2.0 on 21 June. With high-risk obligations approaching, this is the evidence layer firms should be building now. > cMCP (agentrust-io/cmcp), in its own words "hardware-attested policy enforcement for MCP tool calls", runs the gateway inside a trusted enclave, so the policy is measured into hardware before any code runs and the signing key never leaves it. The runtime preview shipped on 23 June. > Agent Manifest (agentrust-io/agent-manifest) signs the artifacts that define an agent at deployment, the system prompt, the policy, the tool schemas, and the model identity, into one tamper-evident record. Its Python SDK reached v0.1.1 on 21 June. Read together, these are the same instinct: when an agent acts, you should be able to prove which policy, which tools, and which model were live, and prove it to someone who does not trust you or your operator. The firms that struggle with this are rarely short of policy. What they lack is a clear, current view of what they run and what it can reach. The evidence layer is being built in the open. Soon "we could not show it" will not be an answer a regulator accepts.
-
Aaron Fulkerson reposted thisAaron Fulkerson reposted thisTwo days at the Confidential Computing Summit 2026 in San Francisco, and one throughline kept coming back: trust is becoming the bottleneck for agentic AI. Mark Russinovich opened Day 1 with a clean frame: attested, transparent, sovereign. The bar for confidential AI has moved to proof. What ran, who ran it, and whether the customer can verify it independently. On Day 2, Ivan Krstić walked through the evolution of Apple Private Cloud Compute, including running PCC on Google Cloud over Intel TDX. His argument was sharp: against capable attackers, attestation has to cover the whole host and execution path, beyond the TEE boundary. One shift stood out for me. Confidential computing is moving past its enterprise and regulated-data roots into consumer products. Apple is putting it behind iPhone AI, Meta behind WhatsApp Private Processing, and Samsung is pushing it on-device. When the privacy guarantee ships to billions of phones, it becomes table stakes for any AI that touches personal data. The substance was in the talks. A few I would point you to. Platform and silicon: • Komei Nakamoto and Keith Moyer (Google): GKE Hypercluster, Kubernetes TEEs for AI at scale • Sam Lugani and Ranjit Narjala (Google): live demos of confidential AI workflows in TEEs • Nelly Porter (Google) and Anand Pashupathy (Intel): future-proofing confidential AI • Hugo Romero(AMD): protecting data in the agentic AI era From the Azure Confidential Computing team: • Antoine Delignat-Lavaud confidential tenancy and digital sovereignty on public clouds • Run Cai and Ashutosh Chickerur : securing the future with Azure Confidential Computing Agents, identity, and governance: • Imran Siddique : governing agents at the hardware boundary with the Agent Governance Toolkit • Dick Hardt : identity for agents with AAuth • Manu Fontaine (Hushmesh): the NATO DIANA agentic identity pilot • Mike Bursell (CCC): accountability when an agent acts for you • Jason Clinton (Anthropic): the single point of failure behind the defender advantage • Ion Stoica (Berkeley, Databricks, Anyscale): reliability as the barrier to agents in production • Dr. Najwa Aaraj (TII): trustworthy AI with confidential computing And Aaron Fulkerson (OPAQUE) hosted both days and kept making the case that confidential AI has crossed into mandate territory. I also gave a talk: "Trust Is the Next Bottleneck: Why the Agentic Economy Needs Confidential Computing." The thesis is simple. We have spent years getting good at where AI runs. The harder question now is who you trust once an agent acts for you across a boundary you do not control. Hardware-rooted trust is the layer the agentic stack is still missing. Thanks to OPAQUE Systems and The Linux Foundation for hosting, and to everyone who traded ideas in the hallways. I also finally got to meet Anand Kashyap in person which was an added treat :) #ConfidentialComputing #AgenticAI #AISecurity #CCSummit
-
Aaron Fulkerson shared thisAt CCSummit this week, we announced a major product release and shipped a https://agentrust-io.com/ an open source framework that solves the most common obstacle to getting AI agents into production in the enterprise. AgenTrust-io: Govern AI Agents at the Hardware Boundary AgentTrust provides open specifications, test infrastructure, and attestation tooling for organizations deploying AI agents in production — with cryptographic proof of identity, intent, and behavior. We welcome you to download, fork, and/or contribute to our work.
-
Aaron Fulkerson reposted thisAaron Fulkerson reposted thisIn this latest blog we go deeper into each of the top 10 OWASP risks for Agentic AI Applications and how AGT (Agent Governance Toolkit) can help. Do share your thoughts as comments. #AgentGovernance #OWASP #AgenticAI #AIAgents #AISecurity #OpenSource #AIGovernance #RuntimeSecurity #MCP #ResponsibleAIGoverning AI Agents Against Every OWASP Agentic Risk: A Deep Dive with the Agent Governance Toolkit | Microsoft Community HubGoverning AI Agents Against Every OWASP Agentic Risk: A Deep Dive with the Agent Governance Toolkit | Microsoft Community Hub
-
Aaron Fulkerson reposted thisAaron Fulkerson reposted thisIsolated AI systems must become a trusted global network. Live at the Confidential Computing Summit, Technology Innovation Institute (TII) CEO Dr. Najwa Aaraj shared how confidential computing enables secure, cross-industry collaborative learning. Connecting knowledge across organizations, industries, and nations remains the ultimate milestone for AI. Dr. Aaraj highlighted that Confidential AI bridges the gap between massive data collaboration and absolute privacy by protecting data in use, safeguarding models, and verifying autonomous agent identities. The strategic transition to hardware-rooted security is backed by urgent enterprise metrics: - 13% of organizations have reported AI-driven incidents resulting in broad data compromise and operational disruption. - 60% of those specific security failures expanded into extensive data breaches. - Shadow AI deployments accounted for a global average of $200K in total breach costs. - 73% of organizations are actively increasing their cybersecurity budgets specifically to counter generative AI risks. Watch the complete keynote session directly via the Day 1 Livestream: https://lnkd.in/gfmt9HBg
-
Aaron Fulkerson reposted thisAaron Fulkerson reposted this"Agents are like bionic puppies. All power. No leash. Chews everything. Occasional puddle." That was Aaron Fulkerson's line from the keynote at Confidential Computing Summit yesterday and honestly, it's the most accurate thing I've heard said about enterprise AI agents in 2026. The question we've been asking at OPAQUE isn't how do you stop the puppy. It's how do you prove the puppy only chewed what it was supposed to. That's what we announced yesterday: agentrust.io: open source, live today. The open way to govern and prove every agent, built on AGT (Microsoft's MIT toolkit, 4,400+ stars on GitHub, created by our very own Imran Siddique). TRACE: a portable, signed record that travels with the agent so any host can verify it before admitting it. One record. Rooted in silicon. Post-quantum. OPAQUE 3.0: two layers that work together: OPAQUE Agent Control: govern at the software layer. Set the rules. Every tool call checked, every action logged. OPAQUE Confidential Core: prove at the hardware layer. Cryptographic receipt of what ran, what was enforced, and when. Verifiable AI requires both. The bionic puppies aren't going back in the box. Time to build the leash. #ConfidentialAI #VerifiableTrust OPAQUE Systems #CCSummit2026
-
Aaron Fulkerson reposted thisAaron Fulkerson reposted thisAMD’s Harold Gilkey joined Aaron Fulkerson , Antoine Delignat-Lavaud , and Nelly Porter and Dr. Chaouki Kasmi at #CCSummit to discuss how Confidential Computing is enabling AI use cases that depend on protecting sensitive data, from fraud prevention in financial services to patient privacy in healthcare. Great discussion on turning trust into practical outcomes. #CCSummit #AMD
-
Aaron Fulkerson reposted thisI have been a big fan of the Aaron and the OPAQUE Systems team for the last couple of years. I am excited to see them ship their latest product. It's been interesting to attend The Linux Foundation Confidential Computing Summit this week and see where this critical technology is going. The only downside is I was hoping to see my former colleague Nathaniel McCallum, but I had fun speaking with his colleagues at AMD. And it was good to see my old friend Matthew Wilson and his killer conference shirt. Anyhow check out what OPAQUE Systems shipped today.Aaron Fulkerson reposted thisYour AI agents are getting more autonomous every week. And that's the point. They access sensitive data, call external systems, make decisions at machine speed. The productivity is real. But here's the question existing tooling can't answer: Is this agent still governed the way I intended — and can I prove it to someone who has no reason to trust me? Capability without accountability is a liability. Apple already settled this argument for consumer AI. Private Cloud Compute turned "trust me" into "verify me." Today, at the Confidential Computing Summit, we're bringing that same standard to enterprise AI. It's called OPAQUE 3.0. Two open source pieces sit underneath it: ↳ Agent Manifest — cryptographically prove what an agent is, what it can access, and who approved it. An altered agent can't masquerade as an approved one. ↳ Confidential MCP — the first Model Context Protocol that's both governed and secured in hardware. Every tool call produces a signed receipt an auditor can check on their own. Zero trust rebuilt network security on one rule: never trust, always verify. We're applying that doctrine to AI agents. No rewrites. No new platform. It runs on the AI you already have, across Intel, AMD, and NVIDIA — with post-quantum cryptography built in, because data harvested today gets decrypted by tomorrow's machines. The standard is open by design. How the industry verifies AI shouldn't belong to any one vendor. It's live today. How are you proving your agents stay governed? 👇
-
Aaron Fulkerson reacted on thisAaron Fulkerson reacted on thisYay! I am retiring Friday, June 26, taking Microsoft's VRP (Voluntary Retirement Package) after a wild career as a political aide, computer salesman, gold miner, carpenter, waiter, and computer / data scientist. Thank for all your help since I went back to school (UNC-Chapel Hill) in 2002, went to grad school (U Michigan) in 2006, and joined Microsoft in 2012. It's been a fascinating, challenging, and rewarding time. You have contributed to my success, my knowledge, and my joys. Thank you for all the great memories! 😊 Here are seven points of unsolicited advice from an old computer / data scientist. YMMV. Read at your own risk. 1. At work, always prioritize IMPACT. Nobody cares how hard you work unless it drives major impact. Choose projects that you love and that are likely to succeed. If they fail to work, or fail to make impact, YOU will be responsible. It may not be fair, but it's what happens. 2. Prioritize family and friends. Our jobs give us the ability to support our loved ones and I'm grateful for how I've been able to help mine. OTOH, I'll never get back those days and nights I spent working over vacations. It helped my career, but it wasn't worth it. Nobody ever said on their death bed: "I wish I had worked more." 3. Prioritize your health. Life is short. You will all be my age sooner than you think. I'm retiring so I can enjoy my life while I still have good health. 4. There is MUCH more to you than your work. Many of you worked hard in school, then university, then your job, always pursuing the next level. You sacrificed so much to earn your job and position. But have you truly taken the time to learn about YOU and the larger world? The people who cook our food, clean our offices, and drive our Ubers may not have our financial wealth. But many have life wealth far beyond what we could ever imagine. Assume they know things that you don't. Are you experienced? 5. To my foreign-born colleagues: You make us better. We are lucky you are here. I know there's a lot of anxiety due to the current administration. We have seen the emergence of a lot of bigotry. But please remember there are many -- I believe the majority -- who support you and recognize that you are HUGE contributors to our society and economy. I've learned so much from you sharing your culture and perspectives. BTW, ahem, I'm Canadian, eh? 6. Learn more about where you live. If you are in Washington, you are on Native land. Proud people lived here before us, and many still do. It's easy to be blind to the history, but it's important to learn and this will make you a richer person with a deeper understanding of the land where you walk. Try to learn at least one word in the language of this land. In Seattle, it's the Lushootseed language. You can learn more at lushootseedresearch.org or at the Hibulb Cultural Center on the Tulalip Reservation. 7. Watch Office Space (movie). Don't let them turn you into a Milton. 😁 Thank you, and all the best!!!
-
Aaron Fulkerson liked thisAaron Fulkerson liked thisWhat do you do after you bomb a Zoom call? A) Close the curtains, turn out the lights, eat a pint of ice cream. B) Replay it at 2am, director's commentary included. C) Fake your own death. Move to a small town. Take up goat farming. Or... you could get some coaching. Huckleberry (everyone's executive coach) can debrief any call, the moment you hang up. What landed, what didn't, what to do differently next time. Privately. In about two minutes. Talk it through. Save the ice cream for a real emergency. PS: Thank you Ritika, Anna and the team at the NYU Coaching and Technology Summit for having us in New York. 🍎
-
Aaron Fulkerson reacted on thisAaron Fulkerson reacted on thisMost code was crap before Vibe Coding, just unseen. Ai just makes this more democratic. Anyone can create bad code now.
-
Aaron Fulkerson liked thisAaron Fulkerson liked thisBy the time you finish reading this sentence, a frontier model has scanned an open source project and handed back a list of critical vulnerabilities. And the patch rate on findings like those are still in the low single digits. Today we announced that Cisco, along with Amazon Web Services (AWS) Anthropic Google IBM JPMorganChase Microsoft OpenAI and many more key players, is a foundational member of Akrites launched by the The Linux Foundation, to solve for this impedance mismatch. A serious vulnerability in a major open source project used to take a human expert weeks to find. A model now does several in minutes, several in a single pass. Discovery and exploit have collapsed into the same instant while patch and deploy still run at human speed, on maintainers who don’t have the support to outrun a machine. And this is exposure for everyone - every app deployed, every piece of infrastructure, every vendor's products - the products we all use everyday - are built on the same open source (refer to the well known xkcd comic). So no vendor's walls are high enough to make this someone else's problem. A misaligned set of efforts scanning the same open source just buries the maintainers under duplicate reports, and raises the odds things leak before there is a fix. The only response that matches AI-native detection speed is a an AI-native but coordinated one - one path upstream, maintainers in control, with the fix flowing back into each project's own home, and that is exactly what Akrites is trying to deliver. We, and everyone else, are participating in Akrites as builders - bringing our engineering and open source work to help solve for this need. We would love everyone reading this to jump in and help in the effort as well. Read the official charter and find out how to get involved here: https://akrites.org/
Experience
Education
Recommendations received
25 people have recommended Aaron
Join now to viewView Aaron’s full profile
-
See who you know in common
-
Get introduced
-
Contact Aaron directly
Other similar profiles
Explore more posts
-
Tracy Lee
HIMSS Georgia Chapter • 18K followers
We built a lightweight MCP server on Vercel that connects Docusign Navigator to LLM agents. OAuth handled clientside, stateless tools over HTTP, and deployment in minutes with Vercel functions. Agentic AI workflows just got way easier! ✒️ Coston Perkins Read more 👇 https://lnkd.in/eN-aP2tf
11
Explore top content on LinkedIn
Find curated posts and insights for relevant topics all in one place.
View top content