SHAUN MARSHALL Enterprise systems, security and AI governance Orlando, Florida | shaun@shaunmarshall.com | +1 505-510-1495 Web: https://shaunmarshall.com/cv/02/ | GitHub: https://github.com/Odenknight Content version 2026-10-12.2, updated 2026-10-12. Structured data: cv.json SUMMARY People first. Good systems augment good people. I bring 30 years of IT experience to dependable technology for small businesses, executives, and complex organizations. My work spans enterprise support, cybersecurity, knowledge and records migrations, and developmental AI governance through GKOS and GKOS-Engine. I am also conducting independent research into a specific aspect of gravitational physics. ABOUT I build and support technology that people can rely on, whatever the size or scale—from small businesses and executive IT to corporate infrastructure and AI systems with traceable evidence and clear decision authority. At the end of the day, the people I help are what matter. My approach is people first: good systems augment good people. Technology should help people do their work, make informed decisions, and retain meaningful control. My career spans 30 years in IT, including work with Walt Disney World, Navy/Marine Corps Intranet programs, and NASA Kennedy Space Center. Since 2013, I have provided executive technology support for Walt Disney World and WDW Legal, first through Atos and, since November 2022, as a Disney employee. My work includes enterprise support, records and knowledge migrations, secure remote access, and coordination with information security teams. Alongside that work, I am the founder and initial editor of GKOS, a public developmental specification for governed knowledge operations. It addresses a practical question: when an AI system recommends or takes an action, can we establish what evidence it used, what context it received, and what authority permitted the action? I lead the design and development of GKOS-Engine and related knowledge tools, using AI coding agents in the implementation process. I set requirements, review changes, test behavior, and decide what ships. The work emphasizes provenance, deterministic validation, reproducible context, and bounded agent access. GKOS remains developmental, with independent validation and full conformance qualification still ahead. I am also conducting independent research into a specific aspect of gravitational physics. Through LuSaur Technology, LLC, I focus on small-business IT, cybersecurity, infrastructure, and AI integration. My self-hosted lab supports practical testing of open-weight models, agent workflows, and recovery procedures. As founder and president of Florida Armored Combat, a 501(c)(3) nonprofit, I bring together leadership, business orchestration, technology integration, event planning, AI governance, and cybersecurity to support teams and community activities. I welcome conversations about AI assurance, knowledge governance, dependable automation, and research collaboration. Role focus: AI governance and assurance engineering; Enterprise and executive technology support; Information and records governance. Previously held Top Secret clearance (Single Scope Background Investigation). SELECTED PROJECTS * GKOS: AI governance specification and assurance engineering [prj-gkos] Status: Public developmental specification; executable mechanism-level checks available. Complete profile qualification and independent interoperability validation remain outstanding. Problem: When an AI system recommends or takes an action, ordinary logs show that a call happened. They rarely show which evidence it used, what context it saw, who had authority to approve it, or how the result can be challenged and replayed. My role: I drafted the specification (with AI drafting assistance) and lead its design: provenance, deterministic validation, reproducible context, bounded delegation and records of decisions and actions. I direct the schemas, fixtures and conformance runner and approve each published edition. What exists now: Published edition v0.82.1 (25 September 2026) with 62 permanent requirements and 28 gate codes, JSON schemas, a requirements registry, and an adapter- neutral conformance runner. CI runs the runner on Linux and Windows with Node 22 and 24. Results: Mechanism-level checks pass, including a clean-process context replay and a mutation corpus that covers all 28 gate codes. The executable suite covers only part of the profile catalogue, so no conformance profile is qualified yet. Limitations: No qualified profile, no public second implementation, and no independent interoperability validation. Proposed NIST, ISO and EU AI Act mappings are informative drafts under review, not established alignment. Evidence: https://github.com/Odenknight/gkos-standard; https://github.com/Odenknight/gkos-standard/releases/tag/v0.82.1; https://github.com/Odenknight/gkos-standard/blob/b308ff7137bdbb109c31f0ace7e6c49b8988e0d5/standard/00_GKOS_Master_Standard.md; https://github.com/Odenknight/gkos-standard/blob/b308ff7137bdbb109c31f0ace7e6c49b8988e0d5/conformance/README.md; https://github.com/Odenknight/gkos-standard/blob/b308ff7137bdbb109c31f0ace7e6c49b8988e0d5/conformance/CLAIMS_POLICY.md; https://github.com/Odenknight/gkos-standard/blob/b308ff7137bdbb109c31f0ace7e6c49b8988e0d5/standard/annexes/Canonical_Serialization.md; https://doi.org/10.5281/zenodo.22269293 * GKOS-Engine and Kosmos-Oden: governed knowledge tooling [prj-engine] Status: GKOS-Engine release 2.1.1 (18 August 2026); 2.2.0 on main pending release qualification. Kosmos-Oden release 0.8.2 (9 September 2026). Problem: Agents and people need to search and reason over a Markdown knowledge base without a tool silently changing source files or exposing restricted notes. My role: I set the requirements and design, review the changes, run the qualification checks and decide releases. AI coding agents write much of the code under that review. What exists now: A TypeScript library and CLI that parses and validates GKX records, builds canonical graphs, indexes and retrieves notes, and serves ten credential-bound, read-only MCP tools on a local port. Kosmos-Oden uses it to draw a vault as an explorable 3D map in Obsidian or a standalone viewer. Results: Release-status records show CI and Linux and Windows runtime qualification passing for the recorded main baseline. Writes to source notes remain unavailable unless a host explicitly configures and authorizes them. Limitations: No published usage or adoption figures. The npm package lags the current source (2.0.1). Implementation independence from GKOS has not been demonstrated. Evidence: https://github.com/Odenknight/GKOS-Engine; https://github.com/Odenknight/GKOS-Engine/releases/tag/v2.1.1; https://github.com/Odenknight/GKOS-Engine/blob/main/docs/RELEASE-STATUS.md; https://github.com/Odenknight/Kosmos-Oden * Team knowledge base migration: OneNote to Markdown to Confluence [prj-knowledge-migration] Status: Export complete and shared with the team; Confluence import approximately 95% successful; limitations documented. Problem: A team's knowledge lived in a OneNote environment that was hard to search, move or preserve with its attachments and history. My role: I exported the full environment to Markdown with attachments intact, shared the export and approach, ran the Confluence import from a copy, and wrote up the limitations. What exists now: A complete Markdown export, a Confluence space built from it, and an experimental map of which notes supersede others. Results: About 95% of the import succeeded (my estimate; the denominator is not published). The supersession map is non-deterministic and is used only to help people review search results. Limitations: Internal work: no public artifact. The import rate is self-reported. Evidence: no public artifact (internal work). PROFESSIONAL EXPERIENCE Agentic AI Developer and Systems Architect [exp-independent-ai] Independent | Orlando, Florida | 2025 – Present | Independent work Independent design and development of governed knowledge tools that support human judgment through inspectable evidence, clear authority, and bounded agent access, alongside full-time employment. AI coding agents assist implementation; I set requirements, review changes, test behavior, and decide what ships. GKOS remains developmental; independent validation and full conformance qualification remain ahead. - Founded and edit GKOS, a public AI governance specification that turns provenance, context, authority, review and authorized agent use into testable contracts and machine- readable records. The v0.82.1 edition (25 September 2026) has 62 permanent requirements and 28 gate codes. - Directed the schemas and assurance tooling: deterministic context replay, fail-closed validation, and a mutation-test corpus covering all 28 gate codes, run in CI on Linux and Windows. Releases state their coverage and conformance limits. - Leads development of GKOS-Engine, an Apache-2.0 TypeScript library that validates GKX records, builds deterministic knowledge graphs from Markdown and serves agents through ten credential-bound, read-only MCP tools (latest release 2.1.1). - Built Kosmos-Oden on GKOS-Engine: an Obsidian plugin and standalone viewer that draws a Markdown vault as a navigable 3D map (release 0.8.2). - Runs a self-hosted lab of open-weight language models and AI agents that share memory records, task files and a message broker. AI coding agents do much of the implementation; I set the design, review the changes, run the tests and decide what is released. Founder, President and CTO [com-fac] Florida Armored Combat Inc. | Florida | 2023 – Present | Nonprofit leadership Founded a 501(c)(3) nonprofit; statewide governing body for armored combat (buhurt). Founded and leads Florida Armored Combat, a 501(c)(3) nonprofit, applying leadership, business orchestration, technology integration, event planning, AI governance, and cybersecurity to support member teams and community activities. - Founded Florida Armored Combat Inc. as a 501(c)(3) nonprofit and leads the organization as President and Chief Technology Officer (CTO). - Grew the organization from three teams to eight city teams and three collegiate teams, and led the formation of a statewide female team. - Supports charitable events, STEM programs, K-12 and collegiate education programs, and free training for the public; coaches and recruits new fighters. - Significantly reduced technology costs by building and running the organization's website and systems with open-source software, and trained volunteers to use open-source frameworks in their work. - Built AI agents to augment the volunteer workforce and devised governance protocols defining what agents can and cannot access or do with the organization's knowledge and infrastructure. Senior Systems Analyst, Executive Support [exp-wdw-exec] Walt Disney World | Orlando, Florida | Oct 2013 – Present | Atos to Disney Atos assignment: October 2013–November 2022; Disney employee: November 2022–Present. Provides technology support and advice to Walt Disney World executives at vice-president level and above and WDW Legal. Served through Atos from October 2013 to November 2022, then joined Walt Disney World Enterprise Technology as an employee. Work spans enterprise support, secure remote access, records and knowledge migrations, and coordination with information security teams. Helps executives, Legal staff, and colleagues work reliably and securely, with less disruption. - Exported the team's OneNote knowledge base to Markdown with attachments intact, shared the export and method with the team, and used a copy for a Confluence migration with an approximately 95% successful import. Documented the migration's limitations. - Added an experimental analysis of relationships between notes, including which documents supersede others, so current material is easier to find in search. It is non- deterministic, so it is used as an aid to human review. - Wrote the policy for migrating WDW Legal records from several sources to NetDocuments and coordinated LegalOps training on retention and retrieval. - Recovered lost or fragmented data and reports for clients on several occasions, saving from about an hour to several days of rework each time; this work contributed to a Disney Recognition award in 2026. - Liaison between executives and Global Information Security; advised WDW Legal on modernizing its BYOD policy and forensic investigation methods. - Moved WDW Legal executives, paralegals and support staff to secure remote work in 2020 using Citrix and two-factor authentication, procured equipment for long-term remote work, and strengthened home networks for the added traffic. - Located, organized and migrated WDW Legal PST archives to Exchange Online, with access granted to the correct attorneys and paralegals. - Developed and delivered training to counter spear-phishing campaigns; worked with eDiscovery on preserving digital evidence and records. - Proposed to leadership a review of WDW Legal's digital assets based on confidentiality, integrity and availability (CIA triad) principles. - Supported the WDW Legal move from eDOCS to NetDocuments (in progress in 2019). - Administered accounts, file and system access, and conferencing: Active Directory and Azure AD, Exchange Online, SCCM, OneDrive, BlueJeans, Zoom and Polycom. - Subject-matter expert for Disney IT support and field teams on PC, Mac, application and network issues; individual and group instruction for executives and support staff. IT Consultant [exp-consulting] Shaun Marshall Consulting | Florida | Feb 2010 – Present | Self-employed Current work through LuSaur Technology, LLC; independent consulting since 2010. Practical IT, cybersecurity, infrastructure, and AI integration suited to an organization’s people, resources, and needs. Current work through LuSaur Technology, LLC builds on an independent consulting practice begun in 2010. - Designs and deploys segmented networks with remote access: OPNsense and pfSense firewalls, Cisco switching and Proxmox virtualization. - Builds and hosts websites on the LAMP stack and WordPress; plans and runs hardware and software migrations. - Writes business-operations, disaster-recovery and information-security policies for each client, and teaches owners how to run their networks safely. Windows 7 Migration Team Lead and Technical Liaison [exp-cnss-wdw] CNSS Inc. (client: Walt Disney World) | Orlando, Florida | May 2012 – Oct 2013 | Contractor, vendor assignment Field team for moving Walt Disney World property and offices from Windows XP to Windows 7. - Led four contractors and worked with the HyperCare team supporting the move from Windows XP to Windows 7 across the Walt Disney World property and supporting offices. - Scheduled deployments with off-site developers, directors and department heads, deploying department by department to keep downtime low. - Enforced enterprise PC standards, fixed application and network issues, and helped test white-box applications and equipment. SME Support Analyst [exp-connextions] Connextions Inc. | Orlando, Florida | 2010 – 2011 Technical support account in a contact center. - Technical mentor for call-center agents on a technical support account; trained them in troubleshooting and resolution. - Wrote and updated support articles in the company wiki; provided first- and second-level support with DameWare and Active Directory. Systems and Support Analyst [exp-teksystems-roetzel] TEKsystems (client: Roetzel & Andress) | Orlando, Florida | 2008 – 2009 | Contractor, staffing firm Support for attorneys and staff at a law firm's Florida offices. - Supported attorneys and staff on Citrix, Westlaw and Microsoft Office 2007; managed accounts, printers and remote access with Active Directory, Remote Desktop and SMS. - Helped build a Citrix server environment for the firm's Orlando, Fort Lauderdale and Naples offices. Senior Analyst [exp-compucom-wdw] CompuCom Inc. (client: Walt Disney World) | Orlando, Florida | 2006 – 2007 | Contractor, vendor assignment Disney PC Migration project. - Proposed an in-house help center and remote-assistance service for the Disney PC migration, then set it up and managed it; it worked with Disney IT to resolve deployment and transition issues. - Wrote training material for new help-center technicians and trained them on Active Directory, SMS, Ghost imaging and Remote Desktop. - Ran needs assessments and deployment scheduling with ACS and Disney managers and network engineers; provided basic data recovery when needed. Senior Field Service Technician [exp-nmci] CACI and TEKsystems (client: U.S. Department of the Navy, NAVAIR Orlando) | Orlando, Florida | 2001 – 2006 | Contractor, vendor assignment Promoted from Field Service Technician. Department of Defense contractor on the Navy/Marine Corps Intranet (NMCI) at Naval Air Warfare Center Training Systems Division. - Provided hardware and software support for over 1,100 clients on the Navy/Marine Corps Intranet (NMCI). - Led the research that resolved a Windows Installer failure blocking Microsoft Office deployments on Windows 2000 workstations (2003). Deployments continued on schedule, and the prime contractor, EDS, avoided an SLA miss carrying a penalty of more than $200,000. - Wrote documents and hot-fixes that were used at site and enterprise level within NMCI. - Assisted DoD Information Assurance personnel with forensic investigations on the Navy network, gathering evidence within state and federal law. - Tools: HEAT and Remedy ticketing, Tivoli remote control, Active Directory and SMS for accounts and software packages. - Command Master Chief Award for Excellent Service, Naval Air Warfare Center Training Systems Division (2001). Technical Project Manager, NMCI Assessment and Planning [exp-aera] AERA Inc. (client: U.S. Department of the Navy, NAVAIR Orlando) | Orlando, Florida | 2001 | Contractor, project Assessment and planning stage before the NMCI transition at NAVAIR Orlando. - Hired and supervised 15 contractors for the assessment and planning stage before NMCI, working with the local Navy command and DoD staff. - Wrote standard operating procedures and a lessons-learned list used at other naval bases preparing for NMCI; finished almost one month ahead of schedule. Electronics Lab Manager, Department of Nursing [exp-ucf-nursing] University of Central Florida | Orlando, Florida | 1998 – 2001 Computer lab and simulation equipment for the Department of Nursing. - Designed, assembled and ran the department's networked computer lab, with testing stations, a file and print server and a Virtual IV injection-simulation station. - Supported nursing faculty, staff and students; wrote a best-practices and lab-maintenance guide for later lab managers. Help Desk Representative [exp-ucf-helpdesk] University of Central Florida | Orlando, Florida | 1996 – 1999 | Student employment Campus help desk. - Supported students and staff on campus email clients (GroupWise, Outlook and Exchange, PINE) and network access. Safety Engineer and Computer Specialist [exp-nasa-ksc] NASA John F. Kennedy Space Center, Safety and Mission Assurance (RT-SRD-2A, EIC-A) | Kennedy Space Center, Florida | 1996 – 1998 | Student employment Student employment in Safety and Mission Assurance. - Maintained the Pressure Vessels and Systems (PV/S) database and coordinated a safety- recertification schedule with the Center's major contractors. - Designed a web portal where contractors could identify their own pressure vessels and systems and check them against the Center's records. - Member of the Shuttle Upgrades Liquid Flyback Booster study (1997): reusable kerosene and oxygen engines, specific impulse and maintenance time between launches. Student Assistant, LEAD Scholars Program [exp-ucf-lead] University of Central Florida | Orlando, Florida | 1995 – 1996 | Student employment Program office of the LEAD Scholars student leadership program. - Student assistant in the LEAD Scholars Program office while a member of the program. SKILLS Security and governance: AI governance and assurance (provenance, authority, replayable context); Information and records governance (retention, access, migration policy); Digital evidence preservation with eDiscovery; Forensic investigation support (DoD Information Assurance); Security awareness training (spear-phishing); Security liaison between executives and Global Information Security; Policy writing: business operations, disaster recovery, information security; AI governance; Cybersecurity. Infrastructure and operations: Windows client and server, Active Directory and Azure AD, Exchange Online, SCCM/SMS; Network design and segmentation with remote access; OPNsense and pfSense firewalls, Cisco switching; Proxmox virtualization; Linux (Debian, Ubuntu, CentOS); Citrix and two-factor remote access; Data recovery; Enterprise PC and software migrations; Technology integration. AI and automation: MCP tool design with read-only, credential-bound access; Deterministic validation, replay and mutation testing; Knowledge-base export, migration and retrieval; Self-hosted open-weight models and model routing (lab); TypeScript, Python and Rust in current projects (agent-assisted); PowerShell, Bash and batch scripting for operations; HTML, CSS, PHP and JavaScript websites (LAMP, WordPress); Database and web portal for safety records (1990s). Delivery and leadership: Technical advice for executives at vice-president level and above; Team lead for contractor teams (15-person assessment, four-person migration); Project planning, SOPs and lessons-learned reports; Training and mentoring technicians, agents and staff; Secure remote-work transition for a legal department; Founding and running a statewide nonprofit; Leadership; Business orchestration; Event planning. EDUCATION ECPI University, Lake Mary, Florida: Computer and Information Science coursework, cybersecurity track (governance and policy focus) (2023 – 2025). Status: Coursework. University of Central Florida, Orlando, Florida: LEAD Scholars Program (student leadership program) (1995). Status: Program member. Professional and continuing study: Cisco Networking Essentials I and II; Microsoft Exchange 2000; Coursera courses in AstroTech, Genetics and Evolution, Galaxies and Cosmology, and Nanotechnology. Status: Completed courses. CERTIFICATIONS - CompTIA Security+ ce (CompTIA): Previously held; Valid 2022–2025 - CompTIA Network+ (CompTIA): Held; Earned before 2009 - CompTIA i-Net+ (CompTIA): Held; Earned before 2009 - Certified Internet Webmaster (CIW) (CIW): Held - CompTIA A+ (CompTIA): Previously held - Dell Certified Systems Expert (Dell): Previously held - Lenovo Certified (ThinkPad T42, T43p, T60) (Lenovo): Previously held - Microsoft Office User Specialist (Office XP) (Microsoft): Previously held - Security clearance: Top Secret (Single Scope Background Investigation): Previously held Memberships: ISACA, ISC2, InfraGard. AWARDS - Disney Recognition, Walt Disney World Enterprise Technology (2026): Client service and data recovery - Command Master Chief Award for Excellent Service, Naval Air Warfare Center Training Systems Division (2001) COMMUNITY LEADERSHIP - President and Technology Advisor, Grassy Lake Elementary PTO (2016 – 2020) Founded the PTO's 501(c)(3). - Volunteer, Scouting BSA Pack 551 and Troop 998G - Technology Advisor, AV and Effects Specialist, Breakthrough Theatre of Winter Park - Science and technology education support, Home-school families - Creator and host, The SHOW (Star Trek Online podcast, Oden Knight on YouTube) (2015) Produced and hosted roundtables on game mechanics with community guests and Star Trek Online developers and artists. - Science advisor and voice of Professor Kim, Project Warp - Raid leader and game tester, Online games (2004 – 2017) Led World of Warcraft raid teams of 10 to 40 players across time zones: recruiting, training, scheduling and supply logistics. Beta tester for Star Trek Online (documented over 200 bugs) and other titles; regional coordinator for technical issues in the Earth & Beyond test. EVIDENCE - [ev-gkos-repo] GKOS specification repository: https://github.com/Odenknight/gkos-standard (checked 2026-10-02) - [ev-gkos-release] GKOS v0.82.1 release (developmental specification, public working draft): https://github.com/Odenknight/gkos-standard/releases/tag/v0.82.1 (checked 2026-10-02) - [ev-gkos-master] GKOS master specification at commit b308ff7: https://github.com/Odenknight/gkos-standard/blob/b308ff7137bdbb109c31f0ace7e6c49b8988e0d5/standard/00_GKOS_Master_Standard.md (checked 2026-10-02) - [ev-gkos-conformance] GKOS conformance mechanisms at commit b308ff7: https://github.com/Odenknight/gkos-standard/blob/b308ff7137bdbb109c31f0ace7e6c49b8988e0d5/conformance/README.md (checked 2026-10-02) - [ev-gkos-claims] GKOS conformance-claims policy at commit b308ff7: https://github.com/Odenknight/gkos-standard/blob/b308ff7137bdbb109c31f0ace7e6c49b8988e0d5/conformance/CLAIMS_POLICY.md (checked 2026-10-02) - [ev-gkos-canonical] GKOS canonical serialization and context-replay contracts at commit b308ff7: https://github.com/Odenknight/gkos-standard/blob/b308ff7137bdbb109c31f0ace7e6c49b8988e0d5/standard/annexes/Canonical_Serialization.md (checked 2026-10-02) - [ev-gkos-doi] GKOS concept DOI (all versions, Zenodo): https://doi.org/10.5281/zenodo.22269293 (checked 2026-10-02) - [ev-engine-repo] GKOS-Engine repository: https://github.com/Odenknight/GKOS-Engine (checked 2026-10-02) - [ev-engine-release] GKOS-Engine 2.1.1 release: https://github.com/Odenknight/GKOS-Engine/releases/tag/v2.1.1 (checked 2026-10-02) - [ev-engine-status] GKOS-Engine release status and verification evidence: https://github.com/Odenknight/GKOS-Engine/blob/main/docs/RELEASE-STATUS.md (checked 2026-10-02) - [ev-kosmos-repo] Kosmos-Oden repository: https://github.com/Odenknight/Kosmos-Oden (checked 2026-10-02) - [ev-fac-teams] Florida Armored Combat teams page: https://flarmored.org/teams/ (checked 2026-10-02) - [ev-youtube] Oden Knight YouTube channel: https://youtube.com/c/odenknight (checked 2026-10-02)