Portfolio

No supervisor, no orchestrator. Every node carries the same capability-locked immutable core (intent, guardrails, alignment), holds a slice of a conserved budget token, invents its own product, and measures its own revenue from real receipts rather than self-report. A node spawns a peer by handing over part of its budget, so recursive self-replication stays bounded: spawning only ever divides an existing pot. Cedar sits at the enforcement point as a real policy engine, so the guardrail is code the node cannot talk its way past.

A fullscreen transparent overlay pet built in Godot 4. The cat wanders, naps, follows your cursor, reacts to CPU load and battery, and comments via canned lines or a live LLM daemon. Not hardcoded to a cat - bring your own creature spritesheet.

The schema library under Engrammic: types and rules for turning observations into claims, facts, and beliefs. `pip install engrammic-primitives`.

Every model writes the same way: `delve`, `robust`, `crucial`, `it's not X, it's Y`, a one-line paragraph dropped in for punch. anti-slop bans that vocabulary outright, enforces ASD-STE100 grammar (one fact per sentence, active voice, simple tenses, keep the articles), and kills the structural tells. A `SessionStart` hook injects the rules and restores them after a compaction drops them. A `UserPromptSubmit` hook lints the previous turn and restates the rule every tenth prompt, because a rule stated once at turn 1 has stopped steering by turn 40. A standalone Python linter runs the mechanical subset as a pre-commit hook.

Contributing to Microsoft's DeepSpeed: type hints for better DX, changelog automation, and fixing silent failure modes. The kind of unglamorous work that makes a library nicer to use.

Active contributor to Tapestry, the AI Alliance's distributed training project. Merged PRs on the eval gate schema and CI, and engaged on the M1 heterogeneous-hardware epic.

Contributed to Microsoft's LightGBM, a fast gradient boosting framework used across industry.

Contributed to the ROSIN (ROS-Industrial) ecosystem, an EU-funded project building quality-assured components for industrial robotics.

Takes over the entire screen with an image or looping GIF. Blocks keyboard and mouse input on Linux (X11) and Windows. Exit requires holding Ctrl+Shift+Escape for 2 seconds. Comes with a TUI orchestrator for managing assets, building cross-platform payloads in Docker, and generating Rubber Ducky deployment scripts.

Tests Applicant Tracking Systems for parsing vulnerabilities, injection vectors, and LLM prompt injection in AI-based screening. Five stealth levels from raw payloads to polyglot/orphan object techniques. Canary tokens detect when ATS systems parse the injected content. Web UI for visual payload selection, CLI for automation.

Embeds a payload into an existing binary. On execution, the stub extracts both payload and host to /tmp and runs them in sequence. Prepender mode runs payload first; postpender mode runs host first. Inspired by guitmz's Linux.Fe2O3.

Self-replicating worm written in Go. Scans network ranges, spreads via SSH and SMB, runs on Windows and Linux. Configurable scan ranges and spreading vectors. Educational/research purposes only.

Minimal RAT with HTTP-based command and control. Supports command execution, file upload/download, and screenshot capture. Runs on Windows and Linux. Educational/research purposes only.

A small Go package that packs a logic-bomb: dormant until a condition fires, then it does its thing. A study in triggers and payloads more than a weapon, but a fun one.

A Go/cgo forkbomb wrapped as a package. Mostly an excuse to poke at cgo and resource limits and watch a VM fall over. Do not run it on anything you like.

A little C CLI that deliberately mangles files. Useful for testing how software handles corruption, and just satisfying in a chaotic-neutral sort of way.

Notes and walkthroughs on malware development, put together with @AraChn3. The kind of practical, no-fluff reference that is weirdly hard to find when you are learning offensive security.

The archive of TryHackMe rooms I worked through: enumeration, footholds, privesc, repeat. Half the reason this site has a blog. Many of these are written up in full over there.