Software engineering · applied AI · developer tools · security systems
I build projects where correctness, reliability, and product behavior matter: static analysis tools, runtime tracing, durable backends, real-time sync, and AI workflows with structured outputs.
Currently focused on program analysis, supply-chain security, backend/platform systems, and applied AI engineering. Starting to explore robotics through simulation, perception, and control.
| Project | What makes it interesting | Stack / links |
|---|---|---|
| typing-race | Real-time multiplayer system with server-owned race state, reconnect handling, spectator mode, analytics, monitoring, and load tests. | Cloudflare Workers, Durable Objects, D1, React, k6 · Live |
| any-map | Program-analysis CLI that traces TypeScript any propagation as a graph, ranks blast radius, and supports PR diffs. |
TS Compiler API, graph algorithms, CLI, npm · npm |
| installsentry | Runtime tracing for npm install: lifecycle scripts, file/network access, secret canary reads, dependency graph reports, and SARIF. |
TypeScript, Node, SARIF, CI · npm |
| sentinelflow | Supply-chain risk control plane with policy evaluation, audit logs, durable jobs, GitHub checks, and signed webhook replay. | Fastify, PostgreSQL, React, GitHub App · Demo · Docs |
| apibump | Rust CLI + GitHub Action that detects Python public API changes and recommends the right SemVer bump before merge. | Rust, Python, GitHub Actions · Action |
| appledger | Windows app activity recorder for file/process/network attribution, registry persistence checks, session reports, and cleanup hints. | C#, ETW, SQLite, PowerShell |
- Building toward public AI systems with grounded retrieval/tool use, strict schemas, deterministic guardrails, evals, and clear failure handling.
- Private prototypes include document analysis, identity verification, review-grounded Q&A, and workflow agents.
- Robotics is a target area; the next step is a public simulation/perception/control project with reproducible demos.
- typescript-eslint: fixed false positives in
no-unnecessary-type-assertion. - refined-github: restored
esc-to-cancelbehavior on pull request pages.
- Developer tools, static analysis, and compiler-backed workflows
- Backend/platform systems with durable jobs, persistence, and observability
- Security tooling around npm, dependency risk, and runtime behavior
- Applied AI products with structured outputs, tool use/RAG, and evals
- Robotics simulation, perception, and control foundations

