Matthew Brown

AI Engineer · New York, NY

I enjoy the early part of a project, when the problem is clear but the solution isn't. That means working out where AI actually helps and where it doesn't, finding new use cases for it, and shaping the architecture around how people already work instead of asking them to change. What holds my attention is how data and autonomy fit together: what a system is allowed to decide on its own, what it has to put in front of a person, and what it needs to see in order to do either well. The domain matters less to me than that. The work below runs across finance, security, robotics, real estate, and operations.

mdbrown@syr.edu · MS Applied Human-Centered AI, Syracuse University, December 2026

Selected work

Project Discipline Context Year
Brahman Command Center Multi-agent LLM system Brahman Capital Corp 2026
Architecture vs. prompting Evaluation design IST 700 2026
Client intelligence workspace Applied agent system Commercial real estate 2026
Phishing and BEC triage Applied NLP IST 664 2026
IPO lockup strategy test Quantitative research Brahman Capital Corp 2026
Portfolio AI transparency Interface design IST 675 2026
HRIS automation Systems and workflow OTG Management 2023

Systems

Brahman Command Center

Multi-agent LLM platform · Brahman Capital Corp · sole engineer · 2026

Eight specialized agents that monitor an institutional portfolio, screen for investment ideas, draft morning intelligence, and produce trade decisions on a fixed daily schedule. The system runs unattended on live market data with automatic recovery.

Scale
~22,000 lines of Python across 79 modules
Architecture
8 agents, each an independent HTTP service
Cadence
15-minute intervals through daily scheduled runs
Inference cost
Approximately $2–5 per day at rest

Each agent runs with a dedicated system prompt and a narrow task scope: SENTINEL for portfolio risk, ANALYST for fundamentals, SCOUT for screening, BRIEFING for overnight synthesis, EXECUTOR for trade decisions, plus FLOW and FILINGS for options activity and SEC events, all orchestrated by JARVIS.

The central design decision is the agent collaboration protocol. Rather than hardcoded chains, each agent publishes a capability registry declaring what it can answer and which data sources back it, and any agent can issue a structured query against another. When SENTINEL detects a volume spike, it asks FLOW whether options flow confirms institutional exit, ANALYST whether the move is thesis-breaking, and FILINGS whether insiders have been selling — in parallel — then synthesizes the responses into a single alert. Every collaboration is archived, so any decision can be traced back through the reasoning that produced it.

Market data resolves through a four-tier chain: fresh cache under a fifteen-minute TTL, then the live provider, then stale cache, then a secondary provider as last resort. Each response carries a flag identifying which tier answered, so the system never presents stale data as live. The model layer follows the same principle: rather than pinning a version string that breaks on deprecation, the client probes a candidate list newest-first and caches the first model that responds, distinguishing a genuine not_found from a rate limit so a throttled but valid model is not discarded. A watchdog daemon polls every ten seconds and restarts any failed agent.

Known limitations

No automated regression suite on agent outputs; evaluation is currently manual. Cost and latency are tracked at the account level rather than per agent. Inter-agent responses are not schema-validated, so upstream prompt drift can degrade a downstream agent before anything alerts. These are the next three items on the roadmap, in that order.

Client Intelligence Workspace

Applied agent system · commercial real estate client · 2026

A lead-intelligence platform that scans the market for lease expirations, scores accounts by urgency, drafts outreach, and tracks pipeline. Deployed and running on the client's infrastructure.

The organizing signal is the lease clock. A property whose lease expires in fourteen months is a conversation worth starting now, and the system surfaces it on that schedule rather than waiting for a broker to go looking. Scanning, scoring, outreach drafting, and pipeline tracking sit behind a single workspace in place of four disconnected tools.

Interface detail and usage metrics in preparation.

Evaluation and research

Architecture vs. Prompting: A Blind Comparison and Fact Audit

Evaluation design · IST 700, Understanding LLMs · 2026

A controlled comparison of a multi-agent system against a single-prompt model on three identical institutional research tasks, followed by a manual audit classifying every specific claim in every response as verified against a live source, hedged, or fabricated.

System Verified Hedged Fabricated
Multi-agent system 28 4 0
Single-prompt model 0 10 16

Claim-level classification across all three tasks. Fabrications included an invented geopolitical event, five fabricated average-volume figures, and days-to-exit calculations derived from them.

On the volume-anomaly task, the multi-agent system identified a position at 12.17 times average volume computed from the live feed, flagged two secondary movers with supporting figures, recommended reviewing recent 8-K filings, and hedged explicitly where a figure was estimated rather than measured. The single-prompt model did not identify which position held the anomaly, invented a geopolitical event to explain volume it cannot observe, produced an authoritative average-volume table in which every figure was fabricated, and carried the invented event into the following task as established context.

Principal finding

A third model scoring both outputs blind selected the single-prompt system 2–1. It characterized real, live market data as "unverifiable and apparently fabricated," described the invented volume table as "quantitatively grounded," and rewarded hallucination chained across tasks with a higher coherence score. The judge shared the exact limitation of the system it was evaluating: no access to ground truth. Where a judge cannot verify a claim, LLM-as-judge evaluation is not merely noisy but systematically biased toward fluent invention, and the failure is silent. The manual audit reversed the verdict 3–0.

The applied conclusion: LLM-as-judge remains appropriate for style, format compliance, and relative ranking on tasks a judge can check. Factual grounding in a consequential domain requires a verifiable-claims harness instead — extract atomic claims, resolve each against a source of truth, and score groundedness rather than persuasiveness.

Pre-Action Phishing and BEC Triage

Applied NLP · IST 664, Natural Language Processing · sole author · 2026

A text classifier for the operational decision in business email compromise — not whether a message is spam, but whether a human should review it before an employee acts on it — built around the asymmetric cost of the two error types. I chose the problem because I have been on the receiving end of one of these attacks, and the failure is never that the message looks like junk. It is that it looks entirely ordinary.

Corpus
3,000 messages, class-balanced
Validation
Five-fold cross-validation
Best result
F1 0.974, logistic regression
Cost model
10:1 false negative to false positive
Tuned threshold
0.25, against a default of 0.50

The pipeline runs from tokenization through cross-validated evaluation across three feature families: unigram presence as a baseline, bigrams, and an original manipulation-marker feature counting the social-engineering cues phishing depends on — urgency, money requests, authority impersonation, credential bait, capitalization intensity, and a length-normalized pressure ratio. Trained in isolation, the manipulation markers reach 0.678 accuracy against a 0.50 chance baseline, confirming independent signal. Logistic regression over the hand-built feature matrix reached F1 0.974, and its calibrated probabilities made cost-based threshold tuning possible.

Principal finding

Inspection of the most informative features showed the strongest predictors of "legitimate" were forwarded, hou, ect, and employee first names — artifacts of the Enron corpus rather than signals of legitimacy elsewhere. The model had partly learned to recognize one organization's internal mail. Adding bigram features degraded it in a way aggregate scores conceal: one additional malicious message caught, at the cost of 63 additional false alarms. Reported verdict: strong on this corpus, unproven on any other.

Does Shorting IPOs Into Lockup Expiry Generate Alpha?

Quantitative research · Brahman Capital Corp · 2026

A benchmark-corrected test of a widely held trade across 61 U.S. operating-company IPOs from 2016 to 2024, spanning four holding windows, including a formal retraction of the prior draft's headline result.

The universe deliberately includes known underperformers to avoid survivorship bias, with SPACs and closed-end funds excluded by construction; of 73 candidates, 61 had clean IPO dates and price coverage, and the remainder were dropped rather than estimated. Tested broadly, the trade does not work — no window and no benchmark produced significant short alpha.

Principal finding

The prior draft reported a strong large-cap edge: 23% at 180 days against the Russell 2000, p = 0.005. The Russell 2000 is a small-cap index and the names in question were large-cap growth. Re-run against a size-matched benchmark, the effect fell to 12.7% at p = 0.10 — the result was measuring the size factor, not alpha — and was withdrawn explicitly. What survives is narrower: shorting high-insider-ownership IPOs into lockup expiry, entered roughly five trading days early and hedged long against large-cap growth, underperformed both large-cap benchmarks by 14 to 15% at p < 0.01. The recommendation states the hedge as a requirement and flags that the effect concentrates in a single vintage year.

Design

Portfolio AI — Transparency Demo

Interface prototype · IST 675 · team project · 2026

A comparative prototype contrasting how financial AI presents allocation advice today against an interface that surfaces its own confidence, sources, and conditions of validity.

The standard output gives an allocation and general reassurance about proprietary methodology. The redesigned output pairs the same allocation with an explicit confidence score, plausible ranges per holding, dated sources, the calculation method, and a list of the conditions under which the recommendation stops holding. The team's argument is that the polish intended to make AI advice feel trustworthy is the same design choice that makes its quality impossible to assess before acting.

View the live prototype

Background

Brahman Capital Corp

AI Analyst · 2026 to present

Build and operate the firm's AI research infrastructure, described above, alongside fundamental equity work: investment memos, long and short theses, and screening across the S&P 500 and Russell 2000 on free cash flow and capital allocation criteria.

Skyline Robotics

Summer Intern · 2025

Supported deployment, testing, and calibration of Ozmo, an autonomous robotic façade maintenance system, across active high-rise sites, including LiDAR sensor verification and performance validation in live operating environments. Working alongside the engineering team on reliability, edge cases, and operational constraints is where the question of how much a system can be trusted to act on its own first became concrete for me, and it is still the question I find most interesting.

Stonehenge NYC

Real Estate Intern · 2024

Portfolio analysis across a 33-building residential portfolio: competitive market analysis, operating metrics, property-level cash flows, and ESG-related reporting.

OTG Management

HRIS Intern · 2023

Built and supported an automated HRIS platform handling employee inquiries across a base of more than 8,000 users, with Salesforce-backed record management and workflow tracking, plus operational reporting for management planning.

Syracuse University

MS 2026 · BS 2025

MS, Applied Human-Centered AI, specializing in Applied Data Science with a Business and Financial Analytics concentration; 50% merit scholarship. BS, Information Management and Technology, graduated early. Dean's List, all semesters. Founded and served as president of the university's Sigma Alpha Epsilon chapter, taking a 70-member organization from re-establishment to full campus recognition within one semester.