About

I’m Dmitrii Zatona — Systems Engineer and Architect (Rust · Applied Cryptography · Confidential Computing · Embedded Systems), based in New York City, working remote and async-first.

I design and ship production cryptographic infrastructure in Rust: transparency logs, attestation pipelines, sealed-execution environments, high-throughput verification services. The kind of systems where “trust me, it works” isn’t an answer — because the code has to prove it.

My work splits in two. One side is a custom-development practice focused on cryptographic systems engineering — transparency logs, attestation pipelines, sealed-execution platforms, high-assurance Rust infrastructure delivered as contract work, direct or as a subcontractor. The other is Evidentum, the product side: a managed integrity layer for SaaS, fintech, legaltech, and AI platforms.

Through both, I’m the author of three open specifications: ATL Protocol (cryptographic transparency — proving what happened), APL Protocol (frame-bound claims — proving what it means), and AHL Protocol (record-level provenance — proving what a record was computed from). ATL and APL ship with Rust reference implementations under Apache-2.0; AHL is at v0.3-draft. I also lead Thunderwind, a sealed-execution platform on Intel TDX with a custom Remote Attestation CA. When a claim starts at a sensor I own the analog path as well — schematic, board, firmware, first-article acceptance.

My day-to-day stack: Rust, RFC 3161, RFC 9162, Ed25519 / SHA-256, Merkle trees, JCS, Intel TDX, remote attestation, KiCad, ESP-IDF. Production targets: 5K+ RPS on a single node, court-admissible evidence chains, sealed workloads with no human access, boards that match the netlist on the meter.

I take on contract engagements where one senior engineer with full context can replace a team playing telephone.