About the researcher
Alexey Fedorov
Security researcher & engineer
Alexey Fedorov designs and ships self-healing client-side patching systems for single-page web applications, the architecture documented across this site. His work pairs a scheduled, fail-aware server-side patcher with a deliberately dumb, durable MV3 browser extension, so that modifications keep working on the user's own machine as vendors redeploy their bundles on an unknown cadence.
The recurring theme is resilience over cleverness: never binding to volatile minified identifiers, discovering services by behavioral shape, gating every regex on a minimum match count, and reducing the extension's remote-code footprint to an auditable, sub-kilobyte declarative diff. The reusable primitive at the center of it all, the onreset injection trick, runs fetched code in the page realm without extension eval and without inserting a <script> element.
Beyond the research
The patching systems are one thread of a longer pattern. In middle school Alexey took over a failing open-source project and grew it to 50,000 weekly active users. That was the point building stopped being a hobby.
He now runs Headliner Studios, an agency that helps founders, athletes, and creators turn presence into leverage. The product side runs on Next.js, TypeScript, Supabase, and Vercel, with most of the work aimed at agentic AI and browser automation. The shipped Chrome extension and the custom MCP infrastructure both came out of that. This fall he joins the Wolff Center for Entrepreneurship at the University of Houston's Bauer College of Business.
Also worth knowing
- Published "Mechanisms of neuroplasticity induced by permeable serotonergics" in the Research Archive of Rising Scholars (2025).
- Second place, California FBLA State Leadership Conference (Business Management).
- Second place, WNBF Battle of the Bay, teen men's physique.
- Speaks English, Russian, and Spanish. Raised between Russia, Australia, and the US.
The systems
- gizmo-ai-unlimited ↗
Monorepo patcher + MV3 extension (app.gizmo.ai)
- ProdigyPXP/ProdigyOrigin ↗
The "Play Origin" extension (math.prodigygame.com)
- ProdigyPXP/P-NP ↗
Standalone static patch pipeline feeding Play Origin
For contact and more work, see alexey-fedorov.com.