Skip to main content

Current TWG Members

Herman Errico

Herman Errico

Author
Senior Product Manager
Vanta

Phil Venables

Phil Venables

Contributor
Partner
Ballistic Ventures

Ken Huang

Ken Huang

Contributor
AI Researcher & Author
Distributedapps.AI

Anthony Scarfe

Anthony Scarfe

Contributor
Deputy CISO
Elastic

Camille Stewart Gloster

Camille Stewart Gloster

Contributor
Co-founder
Foundation Layer Institute

Hema Kak Kalsi

Hema Kak Kalsi

Contributor
Engineering Leader
Independent

Alex Foley

Alex Foley

Contributor
Cybersecurity Group Manager
Truist

Kavya Pearlman

Kavya Pearlman

Contributor
Founder & Researcher
XRSI

Krti Tallam

Krti Tallam

Contributor
Sr Member of Technical Staff
KamiwazaAI

Matthew Rosenquist

Matthew Rosenquist

Contributor
Founder & CISO Advisor
Cybersecurity Insights

Prasenjit Sinha

Prasenjit Sinha

Contributor
iOS Engineer
Gusto

Saikiran Rallabandi

Saikiran Rallabandi

Contributor
IEEE Senior Member
IEEE

Shanita Sojan

Shanita Sojan

Contributor
Cyber Team Lead
Darktrace

How to Join the TWG

We’re always looking for people who care about securing the AI agent runtime layer. There are two ways to get involved:

Join the Community

The fastest way to start is to join our Slack channel. Ask questions, share feedback, and connect with other builders and security practitioners working with AARM.

Join the AARM Slack

Join the conversation and start contributing

Apply to the TWG

If you’d like to formally join the Technical Working Group as a Contributor, submit your request through the form below. Tell us about your background, what you’re interested in working on, and how you’d like to contribute.

What is the AARM TWG?

The AARM Technical Working Group (TWG) is the governing body behind the AARM specification. Our mission is to advance runtime security for AI agents by:
  • Defining and evolving the specification — authoring new versions, refining the action classification framework, and updating conformance requirements based on real-world implementation feedback.
  • Maintaining conformance standards — evaluating and maintaining the list of conformant companies and systems, ensuring the specification remains practical and implementable.
  • Engaging the security community — gathering feedback from CISOs, security engineers, and AI practitioners to understand industry needs and incorporate them into the spec.
  • Advocating for a more secure AI runtime world — speaking, publishing, and building awareness around the need for standardized agent action security.
  • Growing the community — welcoming new contributors, supporting builders, and expanding the ecosystem of companies and individuals working with AARM.

TWG Roles

The AARM TWG follows a tiered role structure common to open source standards projects. Each role reflects a different level of involvement and responsibility.

Author

Authors are the senior stewards of the AARM specification. They set the strategic direction, make final decisions on spec changes, and represent AARM in external engagements with the broader security and AI community. Requirements to reach Author status:
  • Made at least 20 substantial contributions to the specification, documentation, or ecosystem tooling.
  • Guided or coached at least one company through building, implementing, or certifying an AARM-conformant system.
  • Demonstrated sustained commitment to the project’s mission and community health.
Ongoing expectations:
  • Lead or review major spec revisions and RFCs.
  • Mentor Maintainers and Contributors.
  • Represent AARM at conferences, in publications, and in industry discussions.
  • Participate in conformance evaluation decisions.

Maintainer

Maintainers are the operational backbone of the TWG. They drive day-to-day progress on the specification, help evaluate conformance for implementing companies, and play an active role in growing the AARM community. Requirements to reach Maintainer status:
  • Made continuous, meaningful contributions to the specification, documentation, or community over a sustained period.
  • Demonstrated sufficient technical depth to evaluate conformance of companies and implementations against the spec.
  • Actively helped grow the community through outreach, onboarding, or ecosystem building.
Ongoing expectations:
  • Review and approve pull requests and proposals.
  • Assist in conformance assessments for implementing companies.
  • Help onboard and mentor new Contributors.
  • Participate in TWG discussions and decision-making.
  • Dedicate regular, ongoing effort to at least two of the following: spec development, conformance evaluation, community growth, or documentation.

Contributor

Contributors are active members of the AARM community who help improve the specification, build awareness, and strengthen the ecosystem. This is the entry point for anyone who wants to be part of the TWG. Requirements to reach Contributor status:
  • Actively participating in the AARM community through at least one of the following:
    • Technical contributions (spec edits, documentation, implementation guides, tooling).
    • Community building (event participation, content creation, onboarding support).
    • Feedback and review (substantive spec feedback, issue reporting, PR reviews).
    • Ecosystem growth (helping grow the list of conformant companies, connecting with potential implementers).
Ongoing expectations:
  • Maintain a regular cadence of participation — Contributors who are inactive for 6+ months may be moved to Emeritus status.
  • Engage constructively in discussions and reviews.
  • Help surface real-world implementation challenges and needs.

How to Contribute

Whether or not you’re a formal TWG member, we welcome contributions of all kinds:
Contribution TypeDescriptionHow
Report IssuesFound a gap or inconsistency in the spec?Open a GitHub issue
Suggest ImprovementsHave ideas to strengthen the specification?Submit a pull request
Share Implementation NotesBuilt something with AARM?Add to the Guides section
Propose New PatternsDiscovered a useful pattern?Contribute to Patterns
Review and FeedbackHelp improve open proposalsComment on open PRs
Spread the WordHelp grow the communityShare the spec with others

GitHub Repository

View source, open issues, submit PRs

Acknowledgments

The AARM specification builds on research and insights from the broader AI security community. We thank the authors of the papers cited in the References section for their foundational work on agent security, prompt injection, and runtime protection. Special thanks to early reviewers who provided feedback on the action classification framework and context-aware evaluation model.

Contact

For questions about the specification, the TWG, or collaboration inquiries, reach out via GitHub or connect with Herman on LinkedIn or by email: herman@aarm.dev.