Portfolio

WiFi sensing ships in routers and sees through walls. A $9 ESP32 does through-wall presence detection. Surveillance is commoditizing fast and defense is basically empty, so ØCLOAK fills the gap: at-cost devices you own outright and an anonymous, location-based threat-intel network. No subscriptions, no VC, open firmware.

No supervisor, no orchestrator. Every node carries the same capability-locked immutable core (intent, guardrails, alignment), holds a slice of a conserved budget token, invents its own product, and measures its own revenue from real receipts rather than self-report. A node spawns a peer by handing over part of its budget, so recursive self-replication stays bounded: spawning only ever divides an existing pot. Cedar sits at the enforcement point as a real policy engine, not a paragraph in a system prompt.

A fullscreen transparent overlay pet built in Godot 4. The cat wanders, naps, follows your cursor, reacts to CPU load and battery, and comments via canned lines or a live LLM daemon. Not hardcoded to a cat - bring your own creature spritesheet.

Engrammic treats agent memory as epistemology, not retrieval: memory that fades without reinforcement, claims that require sources, and an auditable chain from observation to conclusion. A whole ecosystem sits under it (an engine, an MCP server, a modality-agnostic substrate), but the thesis is simple: an agent should know what it knows versus what it merely generated.

The Engrammic ideas, packaged so any agent can have durable, sourced memory in a couple of lines. `npm install -g @engrammic/veil` and your agent stops starting from zero every session.

The schema library under Engrammic: types and rules for turning observations into claims, facts, and beliefs. `pip install engrammic-primitives`.

Contributing to Microsoft's DeepSpeed: type hints for better DX, changelog automation, and fixing silent failure modes. The kind of unglamorous work that makes a library nicer to use.

Active contributor to Tapestry, the AI Alliance's distributed training project. Merged PRs on the eval gate schema and CI, and engaged on the M1 heterogeneous-hardware epic.

Contributed to Microsoft's LightGBM, a fast gradient boosting framework used across industry.

Contributed to the ROSIN (ROS-Industrial) ecosystem, an EU-funded project building quality-assured components for industrial robotics.

A tongue-in-cheek "strategic advisor" that dispenses gloriously unhinged guidance. It was never meant to be serious, which is exactly why it became my most-starred project. The internet rewards the right kind of nonsense.

A small Go package that packs a logic-bomb: dormant until a condition fires, then it does its thing. A study in triggers and payloads more than a weapon, but a fun one.

A Go/cgo forkbomb wrapped as a package. Mostly an excuse to poke at cgo and resource limits and watch a VM fall over. Do not run it on anything you like.

A little C CLI that deliberately mangles files. Useful for testing how software handles corruption, and just satisfying in a chaotic-neutral sort of way.

Notes and walkthroughs on malware development, put together with @AraChn3. The kind of practical, no-fluff reference that is weirdly hard to find when you are learning offensive security.

The archive of TryHackMe rooms I worked through: enumeration, footholds, privesc, repeat. Half the reason this site has a blog. Many of these are written up in full over there.