Bugra Koseoglu

Bugra Koseoglu

Computer Scientist & Security Architect

About

I’m a computer scientist, software architect and security engineer working across distributed systems, backend infrastructure, cloud, blockchain, AI and applied security. I previously worked in R&D at Huawei and now spend most of my time designing production systems, building products and contributing to open source. I mainly work with Rust, Go and TypeScript, with a particular interest in protocols, cryptography, ZK, developer infrastructure and low-level systems. Currently building and researching across agent payments, security, distributed protocols and AI-native infrastructure.

Badges

Tastemaker
Tastemaker
Gone streaking
Gone streaking

Forums

Hi, I'm Bugra - Computer Scientist, Architect and Builder

Hi everyone, I'm Bugra from Istanbul.
I work at the intersection of software architecture, security, distributed systems, blockchain and AI. I'm most interested in problems where correctness actually matters: systems that move money, coordinate distributed state, enforce authority, communicate in real time, or have to keep working when things go wrong.
I started working in cybersecurity and offensive security early, later moved into blockchain and distributed systems, and eventually into large-scale backend architecture and technical leadership. I previously worked in R&D at Huawei, and today I remain hands-on while designing and securing production systems across microservices, cloud infrastructure, real-time communication, authentication, authorization and distributed backends.
Rust, Go and TypeScript are the languages I spend most of my time with. On the deeper systems side, I work on protocol design, consensus, P2P networking, cryptography, zero-knowledge systems, ZKVMs and blockchain security. I also contribute to and review open-source infrastructure projects.
Outside of professional work, I build my own products and research projects. That currently includes x402Shield for AI-agent payment authorization, TryMarketOps for B2B signal intelligence, Budlum and BudZKVM for blockchain and zero-knowledge research, and RadeBrowser, a Rust-first browser experiment.
What keeps me interested is usually the same thing: finding a difficult boundary between disciplines and trying to build something real there, rather than stopping at a prototype or another API wrapper.
I joined Product Hunt to meet people building ambitious technical products, discover interesting infrastructure and developer tools, and share some of the systems I'm working on.
Nice to meet everyone.

Where should authorization live in an AI agent payment stack?

AI agents are starting to use wallets and real payment infrastructure. Being able to make a payment is not the same as being authorized to make that payment. With x402Shield, authorization happens before signing and can enforce limits for amount, recipient, asset, network, wallet scope, budgets, approvals, replay protection and request binding. I am curious how teams building agent wallets, x402 infrastructure and autonomous commerce systems approach this problem. Should authorization live inside the wallet, inside the application, or in a separate layer before signing?

View more