Hey! I'm a research scientist with a record of delivering results across disciplines, from the defence and health industries to speech technology and coding agents. I get deep satisfaction from making things work. I'm naturally curious and never short on new ideas.
I'm an early member of the technical staff at Accomplish, where I work on AI agent enablement, with the goal of safe and performant agents at scale. I'm also pursuing my MSc at the Technion under the guidance of Dr. Amir Ivry and Prof. Israel Cohen, focused on probing speech enhancement models.
Research interests
News
- Sep 2026The Hardening Tax was accepted to the NeurIPS 2026 Workshop on Agents in the Wild. See you in Sydney in December.
- Sep 2026Our speech enhancement probing paper is under review at IEEE TASLP. The updated preprint is on arXiv.
- Aug 2026Permission Denied is on arXiv, and we open-sourced Boundary-Bench for evaluating coding agents under security policy.
- May 2026Presented our Show & Tell demo, Speech Enhancement Intelligence, at ICASSP 2026 in Barcelona. Try the interactive version.
- Mar 2026Joined Accomplish as a Member of Technical Staff, working on coding agents under enterprise security policy.
- Nov 2025First preprint on arXiv: probing layer-wise robustness and sensitivity of speech enhancement models.
- 2024Started my MSc in Electrical Engineering at the Technion with Dr. Amir Ivry and Prof. Israel Cohen.
Publications
The Hardening Tax: Policy-Graded Evaluation of Coding Agents under Enterprise Security Constraints
NeurIPS 2026 Workshop on Agents in the Wild, 2026
* Equal contribution. Extended version on arXiv as "Permission Denied: Policy-Graded Evaluation of Coding Agents in Hardened Environments".
Enterprise security policy costs coding agents up to 18.3 points of success and 167.3% more cost on Terminal-Bench 2.1, and the best model depends on the policy. Abstract
Coding agents increasingly run inside organizations whose security controls (scoped credentials, restricted egress, read-only filesystems, non-root execution) constrain them like any other software. Existing benchmarks, however, evaluate agents almost exclusively in permissive sandboxes, so it is unknown how performance changes when policy is enforced. In this work, we evaluate 12 coding agents on Terminal-Bench 2.1 across nested security policy levels derived from common real-world enterprise restrictions. Hardening is never free but far from uniform: under the strictest policy, success losses reach 18.3 points and cost inflation 167.3%, and the two axes disagree; the model that best preserves success is also the one that loses the most efficiency, so model choice is policy-dependent. Beyond aggregate scores, we characterize how agents behave when policy blocks their actions and decompose the failures hardening induces: runs grind into timeouts or wrong solutions rather than stopping early, in a mix that differs by model. To ground comparisons, we verify task solvability under the strictest policy, separating model failures from tasks the policy forecloses. We release Boundary-Bench, an open-source hardening plugin enabling policy-constrained evaluation of coding agents on Terminal-Bench and compatible benchmarks.
Probing Layer-Wise Robustness and Sensitivity of Speech Enhancement Models
arXiv preprint arXiv:2512.00482, 2026
Under review at IEEE/ACM Transactions on Audio, Speech, and Language Processing
A layer-by-layer probe of three speech enhancement models shows where each is robust or sensitive to noise and reverberation, and that this profile is learned during training. Abstract
Speech enhancement (SE) models advance rapidly, yet how input degradation affects their internal representations remains underexplored. We introduce a probing framework to characterize how internal representations in SE models behave under controlled input degradation. We probe three SE models across controlled levels of signal-to-noise ratio (SNR) and reverberation, quantified by C50, measuring layer-wise similarity to clean references with Centered Kernel Alignment (CKA) and summarizing each layer by a linear fit against degradation level: the intercept measures robustness, whereas the slope measures sensitivity. All three models are sharply non-uniform across depth, but they organize that non-uniformity differently. MUSE and MP-SENet grow more sensitive with depth, the sharpest transitions falling at MUSE's skip-connection junctions, where encoder information is reintegrated; Demucs inverts the trend. A randomly initialized model shows a near-flat profile, with slopes one to two orders of magnitude smaller, and the profile forms during fine-tuning, indicating that it is induced by the enhancement objective rather than a particular model design. Because CKA saturates at the clean reference, intercept and slope are partly coupled; we derive the identity relating them and report a saturation spread statistic that indicates when their relationship is informative. Together, these results characterize where SE models are most sensitive to degradation. An exploratory analysis of whether residual variation tracks output-level quality, after controlling for SNR, shows that the speaker, rather than the utterance, must be treated as the sampling unit. Code and precomputed analysis artifacts for the main sweeps are publicly available.
Speech Enhancement Intelligence: Inspecting a Model Under Controlled Degradation
ICASSP 2026 Show & Tell demo, Barcelona, 2026
A live demo: speak into a microphone, add noise with a slider, and watch how a speech enhancement model's internal layers react alongside PESQ, STOI, and SI-SDR. Abstract
This demonstration presents an interactive system for speech enhancement intelligence: observing, probing, and interpreting how a speech enhancement model responds as noise conditions change. Rather than treating the model as a black box, the demo provides an interface that exposes how internal representations evolve under increasing noise, controlled by the user. Attendees begin by speaking a short utterance into a microphone. This recording is treated as a clean reference. Artificial noise is then added in a controlled manner using an SNR slider, allowing users to smoothly move from clean to highly noisy conditions while keeping the underlying speech fixed. At each noise level, the clean and noisy signals are processed through a speech enhancement model, and internal activations from selected layers are extracted. The interface visualizes how the activations evolve under increasing noise and evaluates how closely the model's representations under noise resemble those elicited by clean speech. These similarities are shown layer by layer using Centered Kernel Alignment (CKA), revealing which parts of the model remain stable, which become noise-sensitive, and which recover as noise conditions improve. These measures are summarized via linearization of the CKA versus SNR trend. Alongside these internal indicators, standard enhancement performance metrics such as PESQ, STOI, and SI-SDR are updated in real time. By interacting with the noise controls, attendees can observe how internal representation stability degrades and recovers, and how these internal changes align with variations in output quality. This enables inspection of model behavior beyond post-hoc evaluation of enhanced signals alone. The demo offers an intuitive, hands-on view of how speech enhancement models internally respond to noise. It is relevant to the ICASSP community, as it illustrates how signal processing, learning-based models, and interpretability tools can be combined to better understand the internal behavior of modern speech systems.
