Projects

What I have built

Each project page details the core engineering problem, key choices made, alternatives rejected, and measured operational limits.

One thread

how the projects connect

pythagoras-secpolicy engine twinpersonal AI · paused secu-mcppublic lab Lexorahackathon · shipped

CyberCarrobotics · in progress

extracted as a public lab control point WhatsApp gateway pilots

Active

pythagoras-sec

Most MCP setups rely on static, implicit trust. pythagoras-sec replaces static config with cryptographic identity (SPIFFE/SPIRE) at handshake, then enforces runtime policy on every tool execution.

Go
SPIFFE/SPIRE
mTLS
k3s
NetworkPolicy

Active

secu-mcp

The public lab of pythagoras-sec: a generic MCP reverse proxy that refuses any server unable to prove its workload identity, and enforces default-deny on everything an authenticated server can do.

Go
SPIFFE/SPIRE
mTLS
MCP
k3s

Shipped

A multi-region HTTP CONNECT proxy built in Go and provisioned on AWS with Terraform, hardened as an egress gateway: web ports only, no private or cloud-metadata destinations, and every destination checked after DNS resolution.

Go
Terraform
AWS EC2
Route 53
S3

Paused

twin

A self-hosted AI assistant running on personal data exports. It routes prompts between local open-weight models and cloud APIs based on strict data privacy tiers.

Python
FastAPI
MCP
Qdrant
Ollama

Shipped Hackathon

Lexora

WhatsApp legal intake platform built in 36 hours at the LLM x Law hackathon. Processes voice notes, documents, and photos, generating structured case files and urgency alerts for legal teams.