Security
Secret management: envelope encryption + auto rotation
KeyGuard encrypts credentials, rotates them with no downtime, and keeps an immutable access log.
Read
Notes
Journal
Ship notes, craft posts, and product changelog.
Security
AI & agents
Snapshot-tested RAG: reliable, not magic
RAG doesn't fall from the sky: you test the retriever and the prompt like code.
Read
Infra & ops
Zero-trust API: mTLS between services + short JWTs
ZeroTrust API: mutual TLS, short-lived tokens, hash-chain audit.
Read
AI & agents
Versioned AI skills with guardrails (refusal + PII redaction)
SkillForge wraps prompt + RAG retriever + guardrails, snapshot-tested before prod.
Read
AI & agents
Model Context Protocol in practice: rewiring tools to LLMs
MCP Hub: a registry of versioned, guarded tools that agents discover at runtime.
Read
Security
Integrity proof with a hash-chain (no blockchain)
CryptoLedger seals each record by chaining SHA-256 hashes — a verifiable proof, offline.
Read
Security
Encrypted mail gateway: automatic PGP, S/MIME fallback
CipherMail adds end-to-end encryption to a firm’s mail, without requiring clients to install anything.
Read
Security
Client-side end-to-end encryption — without lying about zero-knowledge
How LockVault encrypts documents in the browser (WebCrypto + Argon2id) and why the server only ever sees ciphertext.
ReadContact
Let's talk about your next project
A brief, an idea, an app to launch. Write to me, I reply quickly.