A machine dies mid-job and the work just sits there.
Every job is held through a renewable lease. When the owner stops renewing, reconciliation detects it and returns the job to a healthy worker, with no one stepping in.
AetherGrid is an open-source control plane that detects failed workers and recovers their work safely. I help teams building AI infrastructure apply the same discipline.
The orange frame marks the server that owns the job.
AI workloads run for a long time on expensive machines, and machines fail. AetherGrid is built so that the failures your team would otherwise catch by hand are handled by the system.
Every job is held through a renewable lease. When the owner stops renewing, reconciliation detects it and returns the job to a healthy worker, with no one stepping in.
Each job has one owner at a time. Lease renewal, release and outcome reports are fenced by lease identity, so a stale worker cannot overwrite the current owner.
When a job finishes, times out, is cancelled or loses its owner, its command is stopped along with anything it left running.
Scheduling matches each job to a node on CPU, memory and VRAM together, and a job stays on its own tenant’s nodes. The scheduling policy lives in the domain, where it is easy to read and test.
Tenant isolation is enforced in the application and in the database, and the tenant comes from the credential, never from the request.
Schema changes ship as versioned migrations. Each release is rehearsed against a database from the release before it, and the upgraded schema is compared with a fresh one.
Every job keeps its event history, requests and background loops write structured logs, and errors are tracked, so an operator can see what happened and why.
A job whose command cannot start fails with a clear outcome. Each job carries its execution timeout, and a running job can be cancelled.
AI jobs run for a long time on expensive machines, and machines fail. A job that stalls, runs twice or leaves processes behind wastes GPU hours and delays everything waiting on it. AetherGrid makes the system responsible for those failures, so nobody has to catch them by hand.
Jobs are matched to nodes on CPU, memory and VRAM together, and a job that finishes, times out or is cancelled leaves nothing running behind it.
Each job has one owner, enforced by a lease. If the owner disappears, the job returns to a healthy worker without a person stepping in.
A dashboard shows nodes, jobs, the event history of each job and a live cluster event feed, so an operator can see what happened and why.
Tenant isolation is enforced in the application and in the database, and the tenant is taken from the credential, never from the request.
Each release is rehearsed against a database from the release before it, so an upgrade is something you have already watched work.
Open source under the MIT licence and started with Docker Compose. Every route needs an API key, and the reasoning behind each design choice is public in the decision records.
Machines fail, processes linger and releases get rolled out. AetherGrid is designed around those moments.
Its lease runs out, reconciliation finds the abandoned job, and the job goes back to a healthy worker.
Only the worker holding the lease may act on it, and a worker that loses its lease stops acting as the owner.
When a job ends, times out or is cancelled, its whole process tree is stopped, not only the first process.
The cluster tick runs in one process at a time, so two schedulers never place the same work.
Tenant isolation is enforced in the application and in the database, so a worker, a job or a lease cannot be tied to another tenant’s records.
Each release is rehearsed on a database from the one before it: migrate, compare every table and the schema, then start the new API and read the data back.
The guarantees above rest on specific engineering decisions. Each one is written down in a decision record with the reason it was made.
Release, renewal and outcome reports are fenced by lease identity, not only by worker identity, so a stale worker cannot change a job it no longer owns.
Bounded-retry reconciliation reclaims work from dead workers, expired leases and offline nodes through one shared reclaim operation.
Scheduler leadership is elected with a PostgreSQL advisory lock, so two scheduler processes never place the same work.
Job commands start under a supervisor that stops the whole process group when the owner dies. Timeouts end with SIGTERM, then SIGKILL.
On PostgreSQL, composite keys tie workers and leases to their tenant, and the migration stops with a count if any row crosses tenants or has none.
Domain, Application, Infrastructure and Presentation stay separate, with a test that fails if an import crosses a layer boundary.
Three ways to work together. Each one starts with a technical consultation and a written scope.
A focused look at where your AI workloads can be lost, duplicated or stranded, with clear recommendations your team can act on.
Execution ownership, recovery and observability designed for your distributed compute, with the reasoning written down.
AetherGrid running against your workloads, with a defined scope, so you see the results on your own infrastructure.
The code, the release history and the reasoning behind each design choice are public. Read them, run them, or try the dashboard.
Platform engineer and creator of AetherGrid. I help teams building AI infrastructure make their workloads reliable, with clear ownership, safe recovery and systems their operators can understand. Based in Nairobi, working with teams remotely.
I build and review the infrastructure underneath AI workloads: scheduling, execution ownership, failure recovery and observability. I created and maintain AetherGrid, an open-source control plane for AI compute, and I bring the same discipline to the systems of the teams I work with.
Designed and built AetherGrid end to end with Python, FastAPI, PostgreSQL, React, TypeScript, Docker Compose and GitHub Actions. A best-fit scheduler across CPU, memory and VRAM, time-bound leases, and reconciliation that reclaims work from dead workers, expired leases and offline nodes. Race conditions closed by fencing on lease identity, a subprocess engine with enforced timeouts and cancellation, key authentication on every route, hardened containers, and tenant scoping where the tenant comes from the credential, never the request.
Evaluated LLM-generated code for correctness, architecture, concurrency and API behavior, and wrote technical feedback that improves model reasoning and code quality.
Annotated and reviewed video datasets for machine-learning workflows, and resolved inconsistent or ambiguous annotations in QA reviews.
Fixed race conditions in Kafka-based ingestion pipelines for vehicle and telematics event data, and deployed containerized workloads on Kubernetes and ECS across AWS, with infrastructure provisioned in Terraform.
Worked on production revenue systems handling real financial data at national scale, and traced race conditions across application logic, shared state and database interactions.
Jan 2022 to Dec 2024
Aug 2014 to Nov 2018
An open-source control plane that keeps AI workloads running when machines fail. It schedules jobs, gives each one a clear owner and recovers work automatically.
The system notices and recovers. Every job is owned through a renewable lease, and when a worker stops renewing it, reconciliation returns the job to a healthy worker. Nobody has to be paged for the routine case.
Ownership is explicit. Each job has one authorized owner at a time, and recovery is designed so a reclaimed job is not left with two owners.
Yes. A live dashboard is available today and the full source is public. A scoped pilot lets you see it on your own workloads.
Completely. The source, releases and written architecture decisions are open, so your engineers can verify every claim for themselves.
Scoped API keys and tenant isolation keep each team’s jobs, nodes and workers separate.
Yes. AetherGrid focuses on execution ownership and recovery, so it is designed to work alongside tools like Kubernetes, Ray and Temporal rather than replace them.
Three clear options: a reliability review, an architecture design or a scoped pilot. Each starts with a technical consultation and ends with a written scope.
Wycliffe Kipleting Rotich, a platform engineer in Nairobi who built AetherGrid and has worked on production systems at Toyota and the Kenya Revenue Authority. Available for remote engagements.
Book a technical consultation. You leave with a clear summary of scope and next steps.
Tell me about your workloads and where they are fragile. I read every message.
Book a technical consultation