Software engineer | AI developer tools · backend reliability · developer security · cross-platform software
I build and maintain practical developer software with reproducible tests, explicit security boundaries and reviewable changes.
| Project | Why it matters | Try it / verification |
|---|---|---|
| LeaseLedger · Python / SQLite | Durable, single-host job queue: fenced worker leases, crash recovery, retries and consistent backups. | One-command recovery demo · CI |
| PatchPilot · Python / FastAPI | Local-first AI coding workflow with bounded execution, fail-closed Docker test isolation and reviewable Git diffs. | Preview release · Isolation CI |
| ClonePeek · Python / GitHub Actions | Passive scanner for known editor, package, devcontainer and AI-agent execution hooks in unfamiliar repositories. | Real CLI replay · GitHub Action |
| RepoPilot · FastAPI / React | Browse and search repository source locally, with optional Ollama Q&A and guarded ZIP/Git imports. | Real browser walkthrough · First-run guide |
Hands-on evidence: Three short engineering case studies · Full technical portfolio · Watch/try real demos
138 PRs merged into repositories outside this account as of 28 October 2026 (GitHub search). This is a count of accepted PRs, not a claim that every PR received independent human review or has equal technical significance. A few representative merged, traceable changes:
- ChurchCRM #10806 — block unauthenticated browser access to nested dependency metadata across Apache, nginx and Caddy/FrankenPHP, with security regressions.
- Caura #2020 — add bounded, opt-in API retries while refusing to retry write operations that could duplicate side effects.
- Concord #1215 — fix outgoing transfer-debit accounting and add regression tests.
- PyPA #2145 — clarify Python C API versus ABI after maintainer-requested revisions and approval.
- ChurchCRM #10759 — repair Slim application routing in FrankenPHP.
- agent-trace #264 — add a read-only Codex hook activation preflight.
Accepted upstream PRs · Open upstream PRs. Open/draft changes are not described as accepted.
- chatgpt-bot-telegram — maintained JavaScript/Telegram example, safer configuration and regression tests.
- ChatGPT-Telegram-Bot and whatsapp-chatgpt — popular legacy examples; the original API integrations are not presented as current production-ready software.
- FxSound Linux/macOS — experimental native audio port with Linux/macOS build CI. Alpha, not a finished replacement.
Clean checkout evidence: 54 + 100 + 116 Python tests on Kali, commands and limitations.
Independent testers: Reproduce the flagship demos and report verified feedback. The review checklist distinguishes real users from automated fixtures and lists security, benchmark and release boundaries.
Reproduce → isolate the cause → write a regression → implement the fix → run CI → document limits → get review.
Tooling: Python · TypeScript/JavaScript · C++ · SQLite · FastAPI · React · Linux/macOS · Docker · GitHub Actions.
Security claims are scoped to the demonstrated boundary. Tests, synthetic benchmarks and maintainer-run examples do not imply independent security certification or production adoption.
Collaboration: Issues and discussions · Technical writeups · [email protected]
Want every architecture detail and source link? Read the original extended profile.