| Project | What it proves |
|---|---|
 |
Production-grade REST backend — JWT rotation with reuse detection, RBAC, rate limiting, pytest suite, Docker Compose |
 |
Native-feeling mobile AI console — Expo 57 + RN 0.86 + TS strict, streaming SSE chat, bring-your-own-endpoint, Keychain-stored keys, design-law compliance matrix |
 |
One OpenAI-compatible endpoint over GLM + Qwen + DeepSeek + custom APIs — load balancing, failover, streaming |
 |
Full-stack product: Node.js API + realtime WebSockets + Vue 3 SPA + SQLite + Docker, bilingual RTL |
 |
Cryptographic engineering: X25519 handshake, ChaCha20-Poly1305, forward secrecy — auditable pure Python |
 |
Postman mastery: chained CRUD contracts, HMAC request signing, data-driven runs, Newman CI reports |
 |
ML meets production: transformer backend + deterministic fallback, batch inference, Prometheus metrics |
Also worth a look: BaleForge (async bot framework) · Snaplink (Next.js + Prisma) · HabitGrid (Expo app) · BalePhp (PHP/Laravel SDK) · NetPilot (single-binary Go network toolkit) · ModbusLite (Modbus TCP for .NET 8)
I'm a generalist who dives deep. My work sits at the intersection of modern web engineering, AI infrastructure and IoT & industrial automation. I architect cross-platform systems — web platforms, mobile apps (React Native / Expo) and desktop apps (Tauri / Electron) — build NLP/GenAI services, program PLCs in LD & ST (IEC 61131-3) — and I approach every problem with a security researcher's mindset: threat-model first, then build.
I ship in public: every repository linked above is a working build with documentation, tests and deployment scripts — no vaporware.
-F59E0B?style=flat-square&logo=codeforces&logoColor=white){kind=icon}
🎨 Frontend
|
📱 Mobile & Desktop
|
⚙️ Backend
|
🗄️ Database
|
🧠 AI / ML
|
🧰 Tools
|
Security isn't a checkbox here — it's the workflow: every repo runs secret scanning + push protection, dependencies are covered by Dependabot automated fixes, credentials are env-only, and sensitive flows (JWT rotation, RBAC, rate limiting) are implemented and tested in the open. Security-audit tooling (gitleaks, custom pattern scanners) is part of my routine.
