Projects
Code lives on GitHub. A project is listed here only after its repository has passed a metadata audit (commit authorship, history, config files).
A Magic Keyboard's Touch ID sensor rehoused as a standalone puck for Apple Silicon Macs. A build guide whose real subject is the trust boundary: from Apple's own platform documentation, why the Secure Enclave chain survives the move, and the one risk it adds, a used donor board.
Reference implementation of a guardrailed CVE triage pipeline driven by EPSS and KEV, which threat-models its own LLM against prompt injection.
Remediation agent for CVE verdicts where every action needs its own authorization: empty registry by default, typed refusals, no feedback path into the ranking system.
Cross-border early warning from public air-alert feeds. A rule must clear a base-rate gate (recall, a shared alarm budget, association) before it may wake anyone.
Repeatable post-quantum inventory pipeline: passive Certificate Transparency collection, harvest-now-decrypt-later scoring, Sigma and KQL detection, capability resolution.
Offline audit of a browser's cookie store that maps what trackers can infer about its owner.