Security · Networks · Cloud
I build identity-based security for agentic systems.
I'm Emmanuel, Solutions & Pre-Sales Engineer at Orange Business. I design secure cloud and network architectures for enterprise accounts. On the side, I build open-source security tools (mostly for AI), experiment with edge hardware, and publish design notes on system tradeoffs.
One thread
how the projects connectProjects
All projects →
pythagoras-sec
Most MCP setups rely on static, implicit trust. pythagoras-sec replaces static config with cryptographic identity (SPIFFE/SPIRE) at handshake, then enforces runtime policy on every tool execution.
secu-mcp
The public lab of pythagoras-sec: a generic MCP reverse proxy that refuses any server unable to prove its workload identity, and enforces default-deny on everything an authenticated server can do.

leVPN
A multi-region HTTP CONNECT proxy built in Go and provisioned on AWS with Terraform, hardened as an egress gateway: web ports only, no private or cloud-metadata destinations, and every destination checked after DNS resolution.
twin
A self-hosted AI assistant running on personal data exports. It routes prompts between local open-weight models and cloud APIs based on strict data privacy tiers.
Notes from events
All events →-
8 “Our work habits are really changing, even at GitHub. Reviewing every line of AI-generated code by hand is becoming wasted time, provided the work is tightly structured and the checks are automated. For a long time we believed the quality of our tools made the quality of the result; the capabilities of harness providers now let us shrink our set of tools.”
Agents & APIs: Paris Developer Meetup Attendee · Oct 2026 -
6 “AI is an enabler, not an end goal. The real impact comes from rethinking business processes, not from bolting models onto legacy workflows. And there is no ROI without adoption: the most valuable use cases come straight from frontline teams, who know the operational context.”
Paris AI Security Attendee · Oct 2026 -
4 “Tools are turning into code generated for each request. Pigment dropped its purpose-built analysis tools: the agent now writes Python that runs in a sandbox and calls MCP itself. Tools stop being a fixed catalogue and become code produced for the request.”
LangChain Paris meetup: agents in production, with Pigment Attendee · Oct 2026 -
8 “Freeze the demonstration build well before the final presentation. Code changes continued until the final hour before judging, including backend commits at 17:05 and refactoring at 17:56. The live backend failed during the presentation. A stable, frozen build with a well-rehearsed demonstration path always outperforms last-minute feature additions.”
LLM x Law Hackathon Paris Participant · Oct 2026 -
5 “Technical feasibility matters little if the economic model lacks clear budget ownership. While our technical pitch focused on telematics sensors mounted on municipal vehicles for predictive road repair, jury questions centered almost exclusively on procurement, contract ownership, and budget allocation. Developing a viable business case requires as much technical precision as the underlying code.”
La Nuit des Loups-Garous Participant · Mar 2026
Articles
All →Upcoming: Design breakdowns for secu-mcp architecture and leVPN proxy routing.
Get in touch
I discuss cloud architecture, agent security, and enterprise connectivity. Feel free to connect on LinkedIn or check my open source work on GitHub :)









