Allison Randal

Allison Randal is a software developer, author, and open-source strategist whose work has covered programming-language design, virtual machines, Linux distributions, and the boards of several free-software organizations. She has described her first technical career as that of a research linguist in eastern Africa, and a later turn from natural languages toward computer languages. In a 2004 interview she identified herself as a Perl programmer from Portland, Oregon, then president of the Perl Foundation and project manager for Perl 6. The language was later renamed Raku.

She was chief architect of the Parrot virtual machine and chair of the Parrot Foundation. Open Library records Perl 6 and Parrot Essentials (O'Reilly, second edition, 2004), by Randal, Dan Sugalski, and Leopold Tötsch, as a 279-page book on that language and its runtime, published in Sebastopol, California. The Perl Foundation's 2007 White Camel awards cited her presidency of the foundation, her management of parts of the Perl 6 and Parrot work, her writing and editing, and version 2 of the Artistic License, under which much Perl code is distributed. She submitted Artistic License 2.0 to the Open Source Initiative on 14 March 2007, and the OSI approved it on 6 June 2007.

In August 2010, LWN reported that she had become technical architect of the Ubuntu distribution at Canonical. In a post dated 14 May 2015, Simon Phipps wrote that the OSI board had unanimously elected her president, succeeding him. On 28 September 2017 she wrote that the board had elected Phipps to take the presidency back, that she would stay on the board, and that she was about to begin a PhD. A 2019 OSI election notice named her among the directors then leaving the board.

The Software Freedom Conservancy announced on 3 January 2020 that Randal had joined its board, noting earlier service as OSI president, Perl Foundation president, a Python Software Foundation board member, Parrot Foundation chair, an open-source evangelist at O'Reilly Media, Ubuntu technical architect, Distinguished Technologist and open-source strategist at Hewlett-Packard, and Distinguished Engineer at SUSE. The Conservancy's board page lists her as chair, as a current board member of the Open Infrastructure Foundation, and as a former chair of that foundation. Her own site adds later engineering posts as a senior engineer at Oxide Computer Company and a principal engineer at Rivos, current work on open-source software and hardware at Capabilities Limited, and a PhD in computer science from the University of Cambridge. The Cambridge Computer Laboratory published her dissertation as technical report UCAM-CL-TR-992 in December 2023: Transient execution vulnerabilities in the security context of server hardware, 145 pages, based on a thesis submitted in July 2023 to Robinson College for the degree of Doctor of Philosophy. The thesis argues that removing speculative execution is a workable way to reduce Spectre-class transient-execution vulnerabilities on large-scale server hardware, where those speculation-based attacks had proved harder to close than Meltdown-type exception attacks.

Early life, linguistics, and education

University of Oregon and early computing

Public biographical sources do not give Allison Randal a birth date. In a 2024 interview she said she started programming at about age eight, making video games with her father as a hobby rather than as job training, and that she studied linguistics in college instead of computer science partly because he had already taken her through a large amount of computer science—material she described as master's level—during high school. By May 2004 she was introducing herself as a Perl programmer from Portland, Oregon. A 2006 interview placed her there and recorded her contrast between the city, Seattle's technical scene, and the feel of Eugene, Oregon.

The affiliation printed on her slides for YAPC::Europe 2002, where she spoke in Munich on 20 September, is the University of Portland. Those slides and the interviews do not state a degree, date, or major at the University of Portland or at the University of Oregon. In the 2004 interview she compared an intense design discussion to graduate school, again without naming a department or institution.

Linguistic fieldwork

Published bios call that first stretch of work research linguistics in eastern Africa, on minority languages, before coding pulled her toward computer languages. On a page dated 14 January 2005 she wrote that Tennet people live in southern Sudan, in the northern Lopit hills—sometimes called Lafit—about 65 kilometers northeast of Torit and east of Juba, and she wrote in the first person about Tennet colleagues and about time spent in the area, including a proposed village poultry project.

SIL Global's archive catalogs her 2000 article "Does Tennet have postpositions?" in Occasional Papers in the Study of Sudanese Languages, number 8, pages 57–65, with Tennet as the subject language and Sudan as the country. The same issue includes Scott Randal's "Tennet's ergative origins." Glottolog classifies Tennet (ISO 639-3: tex; Glottocode tenn1246) as a Southwest Surmic language of South Sudan, the state formed in 2011 from Sudan's southern region.

She told The Perl Review that she was working on minority languages in eastern Africa when she began using Perl, cleaning language data with regular expressions, and that she thought the version was 5.003_05—a development release dated 12 September 1996. She described days that ran from hours of tea with a language assistant, to driving across grass plains, to hiking toward places tied up with local hunting stories, and said she had taken to a twill bush hat rather than a more theatrical outfit. A speaker biography from about 2004 said the minority-language work produced academic papers delivered in out-of-the-way places, "like the Czech Republic."

From natural languages to programming

The linguistic theory she brought into that computing work was tagmemics. In 2006 she said it had increased her appreciation of Perl, which she set against languages whose features seemed to her thrown together without a view of the whole. For a non-specialist audience she summarized the relevant ideas as the inseparability of language from context, the use of more than one view of the same element, and overlapping hierarchies, and she noted that tagmemics was Larry Wall's preferred linguistic theory. Her 2002 slides put the same point in three lines: linguistics is the study of language; programming languages are human languages; "It's the same brain." The talk, subtitled "Wouldn't know a tagmeme if it bit me on the parse," introduces Kenneth L. Pike as a University of Michigan linguist and a president of SIL International, and the YAPC abstract says the lecture was about tagmemics' influence on Perl.

In a 2021 interview she said that using free-software tools, especially Perl, for language-data analysis in eastern Africa in the 1990s led her "backwards" into a job as a Perl developer and into teaching Perl at a local Linux user group. Before the language-design work that followed, she said, she was employed at a dot-com called Books-A-Million, teaching an introductory Perl class, and spending time with a local Linux user group she called NLUG. She later added that she had enjoyed the programming around the data more than the linguistic research, and that back problems were part of why she left Africa. Formal study in computer science came much later: a Ph.D. from the University of Cambridge, with the dissertation submitted on 18 July 2023 through Robinson College.

Perl, Raku, and the Parrot virtual machine

Language design and project management

Larry Wall began a community redesign of Perl in 2000. The result was called Perl 6 until October 2019, when it was renamed Raku. Allison Randal helped write the working specification. With Damian Conway she published Synopsis 5 in June 2002, summarizing Wall's Apocalypse on pattern matching, and Synopsis 6 in April 2003, on subroutines and types. perl.com later kept both as historical documents. In June 2003 it also ran "Perl 6 Design Philosophy" by Randal, Dan Sugalski, and Leopold Tötsch.

In May 2004 she described design as ideas kept, dropped, or reshaped on the perl6-language list, in a weekly call, and in person, with synopses sometimes issued ahead of Apocalypses so implementers would not wait. Managing the effort was separate. On 19 February 2004 Nathan Torkington, citing his O'Reilly job, wrote that he was stepping down as project manager and that Randal, already doing much of the daily work, would succeed him. On 2 February 2005 Autrijus Tang, later known as Audrey Tang, announced a separate effort: Featherweight Perl 6, a side-effect-free subset, and Pugs, a Haskell implementation, warning that her reading of the synopses was likely wrong.

Parrot, Punie, and related compilers

Parrot started as the planned Perl 6 interpreter and became a register-based virtual machine meant to execute several dynamic languages on one instruction set. Sugalski had held the design role for about four and a half years when, on 21 March 2005, he handed it to Chip Salzenberg because outside commitments had kept him away. chromatic replied on the same internals thread. NLnet's April announcement called Salzenberg chief architect and Tötsch, pumpking since 2003, lead developer. On 1 July 2006 Salzenberg reversed that split: Randal became architect and he became pumpking. He wrote that she would "flesh out the vision of a virtual machine for dynamic languages, that's been her primary interest from the beginning."

On 11 July 2005 she proposed Punie, "a first step toward a compiler for Perl 1." It could then compile only a statement that printed one digit, but it used Parrot Grammar Engine grammars and a stub abstract-syntax tree. She offered it as a test of the compiler tools: Perl 1 was small, yet it still required them to handle context sensitivity.

By 1.0 the stack was larger. LWN described a register machine, with separate storage for integers, strings, floating-point numbers, and language-defined containers, plus garbage collection and forms from assembly through Parrot Intermediate Representation to an abstract syntax tree. Randal called the grammar engine a recursive-descent parser, and the compiler tools used Not Quite Perl, a Perl 6 subset. Projects included Rakudo for Perl 6, Cardinal for Ruby, and Pynie for Python. She said one runtime would let programs use libraries written in another language.

She announced Parrot 1.0.0, "Haru Tatsu," on 17 March 2009 as "a virtual machine aimed at running all dynamic languages." Pynie, Cardinal, and an APL compiler moved to their own repositories. She remained architect until 19 October 2010. Christoph Otto wrote that she then stepped down and named him to lead an architecture team, after a Portland meeting had begun splitting duties that had rested on one person. She planned to keep contributing, mainly to Pynie, after a technical-architect job for Ubuntu.

Rakudo later moved on. In January 2014 Jonathan Worthington reported a release that ran on MoarVM, a virtual machine built for Perl 6 and Not Quite Perl, with Parrot and a JVM backend still available. On 16 February 2015 Patrick Michaud said Rakudo would suspend Parrot after the 2015.02 release: list, array, and grapheme work for a release candidate was harder there, most users had switched to MoarVM, and nobody on the compiler team was maintaining the backend. The candidate would emphasize MoarVM without declaring that permanent; NQP would still target Parrot. On 25 August 2021 the Parrot site said development had stopped, last commit 2 October 2017. MoarVM and Rakudo had replaced it for Raku, and it had not replaced the virtual machines of the other languages it had hoped to host.

The Perl Foundation and licensing

In May 2004 Randal was president of The Perl Foundation, which she called Perl's support body and legal entity. It held copyright in Perl 6 and Parrot, carried responsibility for Wall's copyright in Perl 5, and was the organization once called Yet Another Society. It ran perl.org, backed user groups, gave White Camel awards, and made quarterly grants, including Wall's design time, support for Conway, and half a year for Sugalski in 2002. She later dated the presidency to 2003–2005.

On copyright, she argued for a compilation copyright held by the foundation. In October 2005 she wrote that Wall's ownership of the Perl 5 compilation left his own assets exposed, while a suit over Perl 6 or Parrot could reach only the foundation's limited resources. On 18 April 2005 NLnet, a nonprofit funding open-source network research, pledged US$70,000 for the first two milestones of a foundation proposal, to be paid to Tötsch and Salzenberg. Randal said the money would speed a 1.0 release.

Parrot then formed its own body. She wrote on 24 June 2008 that papers drafted in public, like other design documents, had been filed on 9 June. The Parrot Foundation was to hold the intellectual property, advance development, and support contributors. She was chairman; Jerry Gay was president, Will Coleda vice president, Shane Warden secretary, and Jeff Horwitz treasurer, with members electing the board yearly.

As president she also finished a new Artistic License. Revision had begun as Perl 6 RFC 211, approved by Wall in 2000. Bradley Kuhn's draft, reviewed on perl6-licenses, circulated as the Clarified Artistic License and then stalled. In 2004 Randal resumed it with lawyer Roberta Cairney and patent review by Charles Gotleib, then circulated it among Perl developers, companies shipping Perl, and the community. She called 2.0 a refactor: terms stayed close to Wall's, while 1.0 had been imprecise and tied to obsolete details. It added a patent grant and section 4(c)(ii), allowing redistribution under the GNU General Public License or another copyleft license, so Parrot needed no separate GPL. Perl 5 stayed Artistic 1.0 plus the GPL. CPAN code under "the same terms as Perl itself" was unchanged; other authors could choose 2.0.

The Open Source Initiative lists 2.0 as an approved license. The Free Software Foundation classes it as free software and as GPL-compatible because of the relicensing clause. Randal said the Free Software Foundation had never treated version 1.0 as GPL-compatible. The 2007 White Camel citation, with Tim O'Reilly and Norbert E. Grüner, named her presidency, her Perl 6 and Parrot management, and license 2.0.

Technical writing and publishing

Books on Perl 6 and Parrot

In 2003 O'Reilly Media published Perl 6 Essentials, by Allison Randal, Dan Sugalski, and Leopold Tötsch, who were working on the unfinished Perl 6 language (ISBN 0-596-00499-0, 195 pages). The announcement described it as a survey of the project's history and organization, Perl 6 syntax, and the Parrot virtual machine, including its assembly language and intermediate-code compiler. Randal said the effort was "about midway," with "no usable product" yet, and that the book recorded what could already be known for readers preparing for the changes or hoping to contribute.

A second edition in 2004, Perl 6 and Parrot Essentials (ISBN 0-596-00737-X, 279 pages), kept the same three authors. O'Reilly described it as a snapshot through Apocalypse 12, the objects design document, and Parrot 0.1.0, with more on regular expressions, subroutines, and Parrot internals. The authors wrote that Perl 6 was not yet ready for a book on the scale of Programming Perl, and that years of design notes had themselves become a barrier for new contributors.

On 18 June 2007 Randal wrote that she had signed an agreement with O'Reilly assigning the full copyright in Perl 6 and Parrot Essentials to The Perl Foundation, because the text was out of date but could be updated faster than rewritten. She said she would check the Parrot portions into svn.perl.org/parrot/trunk/docs/book. Jesse Vincent replied the next day that the foundation was releasing the material under the Artistic License 2 and that he would branch the Perl 6 text into the Pugs documentation tree. The Parrot source tree's docs/book directory later held chapters on Parrot Intermediate Representation (PIR) and a draft developer's guide copyrighted by the Parrot Foundation; the PIR introduction states that the project is available under Artistic License 2.0.

Onyx Neon and editorial work

Randal also published through Onyx Neon, a Portland, Oregon press founded in 2002 that issues both fiction and technical books. A company biography from about 2010 called her founder and president, as did O'Reilly's December 2007 Radar staff page. In 2009 Onyx Neon published Parrot Developer's Guide: PIR, a 118-page softcover by Randal and Andrew Whitworth (ISBN 978-0-9779201-2-9) on PIR, Parrot's low-level language.

At O'Reilly she was credited as an editor as well as an author. The May 2006 first edition of Perl Hacks, by chromatic with Damian Conway and Curtis "Ovid" Poe, names Allison Randal and Tatiana Apandi as editors (ISBN 978-0-596-52674-0). Conway's note in that book thanks chromatic, Randal, and Nat for inviting him onto the project. The December 2007 biography said she had edited books on dynamic languages, naming Perl Hacks and Programming PHP, and identified her as program co-chair of O'Reilly's Open Source Convention (OSCON) and of its Energy Innovation Conference.

With Edd Dumbill she co-chaired the OSCON program in 2008, when the call for participation marked the conference's tenth anniversary, and again in 2009 and 2010. O'Reilly said the two reviewed almost 800 proposals for OSCON 2009, held 20–24 July at the San Jose McEnery Convention Center. OSCON 2010 was back in Portland, 19–23 July at the Oregon Convention Center.

Linux distributions and packaging

Debian and Ubuntu packaging

Allison Randal's distribution work followed earlier use of Linux and Debian. In August 2010 she wrote that Debian had been her "first love in free software." In a 2016 Debian new-member statement she said she had been a Debian user since the 1990s and had built .deb packages since the 2000s. She has also written that she began using Ubuntu in 2005, and that her first Ubuntu Developer Summit was the 2006 meeting in Mountain View, for the Feisty cycle, where Kees Cook introduced her to differences between Ubuntu and Debian packaging.

Debian's source package for the Parrot virtual machine was uploaded by Florian Ragwitz through mid-2007. Revision 0.5.1-1, dated 30 December 2007 and entered by Randal, moved maintenance to a Parrot Debian Maintainers team and added her, Nuno Carvalho, and Patrick Michaud as uploaders. She authored many later revisions, including 1.0.0-1 in March 2009, which brought in Ubuntu packaging changes so that debian/control was generated during the build, and 2.0.0-1 in February 2010. On 29 July 2011 she applied to become a Debian Maintainer for parrot. Colin Watson, who had sponsored the uploads for about two years, wrote that she had not created the original packages but that her updates included non-trivial packaging and policy work, and disclosed that she was then Ubuntu's technical architect and his co-worker at Canonical. Her 3.6.0-1 upload of 30 July 2011 added the DM-Upload-Allowed field, which then let a Debian Maintainer upload directly.

She also did Ubuntu work on packages including BackupPC, gpsdrive, Magics++, and Syncmaildir. Martin Pitt, commenting on her 2013 developer application, said he had sponsored four non-trivial uploads of those packages. In January 2013 she asked Ubuntu's Developer Membership Board for per-package upload rights to parrot, then changed the request to MOTU status, writing that endorsers saw her work as general Ubuntu development rather than one package. The board voted on 25 February 2013, 6 in favor, none against, and one abstention; Micah Gersten announced the result on 4 March.

In July 2016 she applied to become an uploading Debian Developer. She wrote that she had been a Debian Maintainer for parrot, and part of DebConf organization, since 2012, and that she planned to return to packaging after DebConf16, her recent Debian work having been weighted toward the conference. Mehdi Dogguy's advocacy cited DebConf collaboration and her packaging of parrot and 4digits; Andrew Shadura wrote that he had met her at DebConf in Heidelberg and Cape Town. The process was approved on 11 August 2017, with the account name wendar. Parrot 6.6.0-1 still listed her as an uploader, with Alessandro Ghedini and Dominique Dumont, when the package was removed from Debian unstable on 28 August 2016. The tracker also lists her as an uploader of 4digits, a package since removed from Debian.

Architecture work at Canonical

On 20 August 2010 Randal wrote that she had started the previous week as technical architect of Ubuntu at Canonical. She said she was not Mark Shuttleworth, the project's "SABDFL," and that the job was to help turn his direction into plans, to put forward a community view of Ubuntu, and to mediate among competing requirements. LWN reported the appointment on 25 August, identifying her through her work in the Perl and Parrot communities and quoting that description. She wrote that Rick Spencer suggested she apply at that year's Ubuntu Developer Summit, UDS-M, and that she decided to apply after talking with Colin Watson.

A biography for the September 2011 Linux Plumbers Conference listed her as open-source advisor at Canonical and as retired chief architect of Parrot. Watson still called her Ubuntu technical architect in July 2011. On her Ubuntu wiki page she later described herself as a "graduate" of Canonical, "class of 2010–2012," technical architect and open-source advisor; by the January 2013 MOTU application she listed Canonical employment in the past.

At Canonical she worked with Nick Barcet and Steve George on one policy for the Extras, Partner, and Commercial repositories. On 30 June 2011 she sent the Technical Board a merged draft, to be renamed "Extension Repository Policy": a checklist for people who already knew Ubuntu packaging, with a longer form planned for commercial developers. On 16 August 2011 she wrote that the board had approved the revised text, and that it had also absorbed drafts for the Application Review Board and commercial uploads.

She applied to that board in 2010 from a Canonical address, citing packaging since 2006 and the new architect role, and later dated her membership as 2010–2012. On her membership and MOTU pages, other Ubuntu developers wrote that she had helped run the board, reviewed packages under its limits, and mentored packagers. She also wrote that, outside the strict job description, she collected public input on blueprints before several summits and published architectural summaries afterward; Scott Kitterman and Kate Stewart described that work as a sustained contribution.

Industry engineering roles

Open-source strategy in enterprise vendors

In a Linux Voice interview published in December 2015, Randal said that at Hewlett-Packard she had not done much development and that her main role was open-source strategy, covering HP Cloud rather than the whole company. On 1 November 2015 the company separated into HP Inc., which kept personal computers and printers, and Hewlett Packard Enterprise, which took servers, storage, software, and cloud. At the OpenStack Summit in Austin in April 2016, SiliconANGLE identified her as a distinguished technologist at HPE; later conference biographies use the title distinguished technologist at Hewlett Packard.

She told Linux Voice that a central part of the job was an internal strategy document of about 30 pages on the open-source projects that group invested in. It set principles, including contributing upstream first, and then, for each project, why the company cared, what its priorities were, and where it was putting effort. She said the cloud product was OpenStack kept close to upstream, with the few local patches pushed back quickly; the group was also heavily involved in Cloud Foundry and had recently moved deployment to Ansible. The same account placed Debian and Linux kernel work inside that strategy, aimed at experimental storage hardware that merged memory and disk so a full distribution could run on systems that were still experimental. She described the point of the document as treating open source like other business resources: forks are expensive to maintain, so contributing changes upstream was in the company's interest, and the remaining task was getting parts of the company to participate effectively rather than only to use the software.

On 5 October 2017 she wrote, in a comment on LWN, that she had been transferred to SUSE in March as part of the HPE/Micro Focus deal and that the work there was keeping her busy. That March, SUSE completed a purchase of HPE cloud assets—OpenStack infrastructure software, Cloud Foundry, and Stackato, HPE's Cloud Foundry implementation—after HPE had spun and merged other non-core software assets with Micro Focus, which owned SUSE. SUSE said it was bringing the associated team into the company and would integrate the OpenStack technology into SUSE OpenStack Cloud, while HPE would sell and support the results as the basis of continued Helion OpenStack and Helion Stackato offerings. Speaker biographies for QCon San Francisco 2023 and FOSDEM 2024 describe her as a distinguished engineer at SUSE and list the post among past roles; they do not identify particular SUSE products or code she worked on.

Systems, servers, and open hardware

The RISC-V Summit program for 15 December 2022 listed Randal as a principal member of technical staff at Rivos and as co-chair of the Microarchitecture Side Channels special interest group at RISC-V International. Slides for her half of a tutorial shared with Giorgos Christou, "Side-Channel Attacks & Transient Execution Vulnerabilities," are labeled Rivos Inc. The session description said that a secure instruction-set design is not by itself enough to secure a system, and reviewed side-channel and transient-execution attacks, including Spectre and Meltdown, for processor and system-on-chip designers, integrators, and users. The group's published charter was to analyze microarchitectural information leakage, with an initial focus on timing side channels, and to propose a RISC-V strategy plus task groups for documentation, threat models, or extensions. Later biographies, including the FOSDEM 2024 note, call the Rivos role principal engineer; the QCon San Francisco 2023 program already listed it as past. Those accounts do not name a Rivos chip or internal project.

Her site also lists a past post as senior engineer at Oxide Computer Company. Oxide, started by former Sun Microsystems and Joyent engineers, builds a rack treated as a single computer: The Register described a system of about 2,500 pounds, with up to 32 compute sleds and custom switching, and reported that the company had built most of the hardware and software stack itself rather than assembling ordinary servers. Public reporting does not describe her assignments there, and conference biographies from 2023 and 2024 that name the Hewlett Packard, SUSE, and Rivos posts do not mention Oxide.

An ElixirConf 2025 biography says she works on open-source software and open hardware at Capabilities Limited, without giving a job title. The consultancy was founded by Robert Watson and Ben Laurie; it says its directors were involved in creating CHERI and that the firm works with Google, the University of Cambridge, DARPA, UKRI, SRI, and Arm on hardware and software security, including CHERI modeling, compartmentalization, and RISC-V standardization. The CHERI Alliance lists Capabilities Limited as a founding member and lists Randal among people associated with the company.

Open-source governance

Since the mid-2000s Allison Randal has held director and officer seats at several free- and open-source nonprofits, often at the same time, across language communities, cloud and compiler infrastructure, and organizations concerned with licensing and software freedom. The offices were governance posts, separate from her employment as an engineer and strategist.

The Open Source Initiative

The Open Source Initiative maintains the Open Source Definition and decides which licenses meet it. In 2015, president Simon Phipps—in office since 2012—described a shift from license stewardship alone toward a membership organization with individual members, affiliates, and corporate sponsors.

In April 2014 the OSI filled four board vacancies from that membership. Individual members, using approval voting, selected Randal with 68 percent approval, Richard Fontana with 61 percent, and Leslie Hawthorn with 42 percent, each for one year; affiliate members selected Stefano Zacchiroli for three years. On 14 May 2015 Phipps wrote that he had not stood again as president, so a successor could be chosen while he was still a director, and that the board had unanimously elected Randal the day before, during an in-person meeting.

She left the presidency in September 2017. In a message carried by LWN, and posted on her site, she said the OSI had kept up its license list and enlarged the membership and affiliate programs that give the community a route into OSI governance, but that paid work had grown busier and she was about to start a doctorate. The board elected Phipps to succeed her. She said she would stay a director, including to work on license review. On 25 March 2019 the OSI thanked her among the outgoing directors, with VM (Vicky) Brasseur, Richard Fontana, and Italo Vignoli.

Language and infrastructure foundations

The Python Software Foundation is the charity behind the Python language. Directors, elected annually, handle its legal and financial affairs and work such as community grants. Members elected Randal to the 13-person board announced on 29 April 2010 and, on 18 April 2011, re-elected that slate, including her, for 2011–2012. The foundation's historical list records her as a director for both terms, not as an officer. In 2010 she was also named a PSF Fellow, a category for members nominated for work on Python and its community.

She had already chaired the first board of the Parrot Foundation, set up to hold intellectual property for the Parrot virtual machine, support development, and let contributors elect the board each year. A June 2008 project post preserved by the Internet Archive named Randal chairman, Jerry Gay president, Will Coleda vice president, Shane Warden secretary, and Jeff Horwitz treasurer. Her presidency of the Perl Foundation is part of the Perl work; a 2020 biography from another nonprofit still listed her as a Perl Foundation director.

In January 2016 an OpenStack Foundation announcement listed her, then affiliated with Hewlett Packard Enterprise, among eight individual directors elected by individual members; the others were affiliated with organizations including CERN, Red Hat, IBM, and Intel. The foundation later widened its brief beyond OpenStack and became the Open Infrastructure Foundation, hosting OpenStack with projects such as Airship, Kata Containers, Magma, StarlingX, and Zuul. At the first board meeting under that name it elected Randal chair of what ZDNet described as a 27-member board. In February 2022 the board elected Julia Kreger chair, appointed Thierry Carrez general manager, and made Randal a vice chair and finance-committee chair, noting that she had been the previous chair. Its board page later listed her as vice chair and individual director. The foundation calls itself a neutral home for open-source infrastructure projects and says it is part of the Linux Foundation.

The LLVM Foundation is a separate U.S. 501(c)(3), founded in 2014, that supports the LLVM compiler project with events, grants, diversity programs, and infrastructure. Its materials describe an 11-person board chosen every two years. November 2024 minutes record the welcome of three new directors, Anshu Dasgupta, Anna Zaks, and Randal. On 5 September 2025 the board made her chair of its governance committee and a member of its legal committee. On 7 August 2026 it approved a 2026–2028 slate including her and elected her secretary for 2026–2027, with Tanya Lattner president and Chris Bieneman treasurer.

Software Freedom Conservancy and other boards

Software Freedom Conservancy is a 501(c)(3) run by a self-perpetuating board. It gives member projects a nonprofit home and works on copyleft compliance, litigation over user rights, and paid internships through Outreachy. On 3 January 2020 it announced that Randal had joined the board, listing seats she held or had held—the OpenStack and Perl foundations, the OSI presidency, the Python Software Foundation, and the Parrot Foundation chair—and her role in starting the FLOSS Foundations group. Executive director Karen Sandler welcomed the appointment. Randal named diversity outreach, project hosting, and defense of user freedoms as the parts of the work she most wanted to stress. The board page lists her as chair. ProPublica's copies of Form 990 filings show her as a director and, on a return filed 16 January 2026, as board chairperson, vice president, and director, unpaid; an earlier return on the same page lists Mark Galassi as chairperson and Randal only as a director.

The FLOSS Foundations group is not a corporation. Its own account says that in January 2005 David Ascher, Bradley Kuhn, Randal, Sam Ruby, and others compared the Python Software Foundation, the Apache Software Foundation, the Free Software Foundation, and the Perl Foundation, then joined a parallel effort by Dave Neary that also involved Nathan Torkington, Danese Cooper, and Ton Roosendaal. The first joint meeting was at OSCON 2005. The group describes an unincorporated forum of about 300 people from more than 50 organizations, used for practical questions about fundraising, lawyers, events, trademarks, contribution policies, and diversity.

In July 2020 Google launched the Open Usage Commons to hold trademarks for open-source projects, starting with the Istio service mesh, Angular, and Gerrit, without moving code or project governance. In an InfoWorld analysis, Matt Asay wrote that IBM and the Linux Foundation had objected on the record, and described the body as limited to trademark protection, usage guidelines, and conformance testing. ProPublica lists Allison N. Randal as an unpaid director of the Open Usage Commons Foundation (EIN 85-1802866). In 2026 its site said it was "going through a reimagining" and thanked former members.

CHERI Alliance C.I.C. was incorporated in Cambridge on 23 February 2024 (company number 15516512) as a community-interest company whose registered activity is that of a membership organization. Companies House lists four statutory directors—Michel Eftimakis, Gavin Ferris, Michael Halsall, and Robert Watson—and does not list Randal. The alliance's site, which presents the company as a body for Capability Hardware Enhanced RISC Instructions, separately places her on a governing board and describes that role as open-source and hardware strategist.

Academic research and hardware security

Doctoral research at Cambridge

In July 2023 Allison Randal submitted a PhD dissertation to Robinson College at the University of Cambridge. The Department of Computer Science and Technology published it in December 2023 as Computer Laboratory Technical Report UCAM-CL-TR-992, Transient execution vulnerabilities in the security context of server hardware (145 pages; ISSN 1476-2986; DOI 10.48456/tr-992). The repository dates the dissertation 18 July 2023 (DOI 10.17863/CAM.104431) and names Richard Mortier as advisor. Mortier, Professor of Computing and Human-Data Interaction, lists the thesis on his departmental page. The printed acknowledgements thank him among the reviewers and do not restate that role.

The dissertation argues that eliminating speculative execution, wholly or selectively, is a feasible mitigation for transient-execution vulnerabilities on large-scale servers. It treats Meltdown-type, exception-based attacks as comparatively tractable, and Spectre-type and other speculation-based attacks as resistant, and it says that removing speculation was still the only reliable countermeasure against Spectre. The alternatives it considers are heterogeneous multicores that combine speculative and non-speculative cores; non-speculative microarchitectures that keep dynamic issue, out-of-order execution, and register renaming; and selective speculation on one core.

An early version of the historical chapter appeared in February 2020 as "The Ideal Versus the Real: Revisiting the History of Virtual Machines and Containers," in ACM Computing Surveys. The survey argues that virtual machines are not simply the secure choice, nor containers—a form of OS-level virtualization—simply the fast one, once their history since the 1950s and the 2018 hardware attacks are taken into account. It discusses CHERI (Capability Hardware Enhanced RISC Instructions), a Cambridge capability architecture, and RISC-V as designs already underway before those disclosures. Citing a February 2018 Computer Laboratory note by Robert N. M. Watson, Jonathan Woodruff, Michael Roe, Simon W. Moore, and Peter G. Neumann, the survey says CHERI blocks some aspects of Spectre and Meltdown but remains open to speculative memory access. The dissertation mentions CHERI only as a 2012 hardware extension of the Capsicum capability model. It is not presented as Randal's design, and the experimental chapters do not measure it.

In 2018 she also wrote a Rust userspace interface to Linux KVM and later ported it to Bhyve on illumos; the dissertation says that code became the base of the Propolis hypervisor userspace at Oxide Computer Company. That November she gave the virtual-machine and container history as a Computer Laboratory security seminar.

Speculation, Spectre-class attacks, and mitigations

On 6 September 2023 she released the sole-authored preprint "This is How You Lose the Transient Execution War" (arXiv:2309.03376), a version of the dissertation's chapter on the vulnerabilities. It traces Spectre-class attacks to older covert channels, side-channel attacks, and fault injection, and argues that commonly deployed mitigations cover only a subset of variants. Older high-penalty patches, it says, remained more popular than newer and broader proposals, so that stacking them would leave later hardware slower and still open to future variants.

The case for removing speculation is limited to large servers. The technical report says elimination is already accepted for embedded systems, cryptographic hardware, and roots of trust, but is often dismissed for general-purpose machines on the assumption—rarely backed, in its view, by measurements—that speculation is required for adequate performance. It reads earlier studies as showing smaller gains from speculation on large servers than on smaller machines, and losses on some workloads. The introduction also says that public cloud providers generally leave many transient-execution mitigations disabled because they are not cost-effective, and that virtual-machine and container isolation offers little protection. That statement is background in the dissertation, not a published audit of individual providers.

Of the three, heterogeneous multicores are treated as nearer to deployment, because such chips already ship in phones and laptops, but as a poor fit for servers: speculation can be turned off only per process or thread, and the mix of cores is fixed when the chip is built. Fully non-speculative cores are described as candidates for privacy-centered workloads, such as hospital data. Selective speculation, on identical cores and with a penalty only where speculation is disabled, is presented as the best match for general-purpose servers.

In 2021 she prototyped the three approaches in RISC-V as design studies rather than finished chips. Reference cores were in-order Rocket, which predicts branches during fetch but does not execute speculatively, and speculative out-of-order BOOM. On SPEC CPU2017 integer-speed runs under FireSim and FireMarshal, modeled at 1 GHz on Amazon Web Services F1 field-programmable gate arrays, unmodified Rocket was 49 percent slower than unmodified BOOM, on average. A BOOM variant without branch prediction, widened in the fetch and issue stages, came within a 13 percent penalty of default BOOM on some benchmarks; the largest configurations did not fit the F1 builds and were timed with Verilator in Chipyard. Selective-speculation runs matched BOOM or the non-speculative core at the two extremes and fell between them when instructions were mixed. The dissertation puts full Spectre mitigation, using countermeasures available at submission, at about a 50 to 200 percent penalty, and says the non-speculative results indicate performance as good as or better than a speculative core once those mitigations are applied. The 49 and 13 percent gaps are against unmitigated Rocket and BOOM, not a trial of every shipping mitigation on one design. The report adds that later independent work both favored selective speculation and superseded the prototypes, and it does not claim credit for that work.

The concluding chapter holds that partial or complete elimination of speculation is feasible for large servers, and that selective speculation is the most practical of the three for general-purpose use. During the research she presented the argument as "Ghosting the Spectre: fine-grained control over speculative execution" at an IRISA seminar in Rennes on 3 June 2022 and at the Open Infrastructure Summit that month, and in December 2022 gave a RISC-V Summit tutorial on side channels and transient-execution vulnerabilities.

Conferences and public commentary

Talks and interviews

In a May 2004 Perl.com interview with Simon Cozens, Randal described herself as a Perl programmer, president of The Perl Foundation, and project manager for Perl 6, later renamed Raku. She said the role meant supplying what contributors needed rather than giving orders, and estimated a complete Perl 6 beta within about two years.

At the July 2002 Open Source Convention in San Diego she gave "Tagmemics: An Introduction to Linguistics for Perl Developers," on Kenneth Lee Pike's theory and its influence on Larry Wall's design of Perl. David E. Wheeler described a packed room and comments from Wall, Damian Conway, and Eric S. Raymond. In a 2006 Perl Review interview she said tagmemics—context, multiple views of one element, and overlapping hierarchies—deepened her appreciation of Perl, largely because it was Wall's preferred theory.

She later shared the program chair role for O'Reilly Media's Open Source Convention with Edd Dumbill. For the 20–24 July 2009 meeting in San Jose, titled "OSCON 2009 Open for Business," they reviewed nearly 800 proposals. In a July 2009 Forbes essay, "Recession-Proof Open Source," she wrote that free suites, operating systems, and building on existing components looked more attractive when funding was scarce, but that releasing unprofitable software still required guidance. She and Dumbill also gave that year's welcome. In 2010 she told a Girls in Tech interview, quoted by Linux Magazine, that the theme was "make it happen" and that open source, now broadly accepted, needed to "educate and expose as many individuals as possible."

On 27 February 2019, during a research sabbatical at the University of Cambridge, she gave the Turing Lecture "Open source influences on technology innovation" at the Alan Turing Institute in London. The institute's text said early open source had tried to make software freedom approachable to business; that use and contribution now ran from Fortune 50 companies to startups; and that the lecture would treat that success as the start of a further phase and survey open source's effect on innovation.

Commentary on community and governance

In a 2011 Linux Plumbers Conference keynote, as Jake Edge reported for LWN.net, she argued that free and open-source projects have no single development model because the limits are human—time, knowledge, memory, distraction, and patience—and that waterfall and agile methods are often too process-heavy for volunteers. In that account, developers rather than companies set direction, and forks were evolutionary paths that could merge back. She separated tie-breaking benevolent dictators from trailblazers, cited GNOME for consensus, and described a "JFDI" style that had to "embrace the chaos." She called the Linux kernel a working case in which Linus Torvalds mostly broke ties while Git encouraged branching, said Debian stayed consensus-based as its leader took a trailblazing role, and said she had moved the Perl Foundation to a committee to remove a bottleneck. She called Parrot's centralized Git use a "painful branching and merging strategy," and said a model that works today "almost certainly" will not in ten years.

SiliconANGLE's April 2016 account of an interview at the OpenStack Summit in Austin, when she was a distinguished technologist at Hewlett Packard Enterprise and a board member of the OpenStack Foundation, focused on "monocultures" and on recognizing organizers who leave no code-based "digital footprint." On FLOSS Weekly (6 January 2021) she discussed developers, companies, and foundations as the "three legs of the FLOSS stool," using Red Hat's dropping of CentOS and the OpenStack Foundation's move toward the Open Infrastructure Foundation as examples. Its notes presented her as a veteran of Perl, Python, Parrot, and OpenStack organizations and of companies including Hewlett-Packard, Canonical, SUSE, and O'Reilly, while Linux Magazine called her one of OSCON 2010's key organizers.