Software engineer with mathematics background specializing in systems programming, security research, and AI/ML applications. I build production tools across the full stack—from WebGPU-accelerated browser applications to Rust CLI tools to bare-metal NixOS infrastructure.
What I ship:
- Observatory - WebGPU deepfake detection running 4 ML models in-browser (live demo)
- specHO - LLM watermark detection via phonetic/semantic analysis (The Echo Rule)
- filearchy - COSMIC Files fork with sub-10ms trigram search (Rust)
- nautilus-plus - Enhanced GNOME Files with sub-millisecond search (AUR)
- indepacer - PACER CLI for federal court research (PyPI: pacersdk)
Self-hosting 32GB bare-metal infrastructure (NixOS) with post-quantum cryptography (ML-KEM, Rosenpass VPN), authoritative DNS, and containerized services.
Philosophy: AI as augmentation, not replacement. Privacy by default. Ship tools that make people better at their jobs.
Live Demo: look.definitelynot.ai
Browser-based AI image detection running 4 specialized ML models (ViT, Swin Transformer) through WebGPU. Zero server-side processing—all inference happens client-side with 672MB of ONNX models.
| Model | Accuracy | Architecture |
|---|---|---|
| dima806_ai_real | 98.2% | Vision Transformer |
| SMOGY | 98.2% | Swin Transformer |
| Deep-Fake-Detector-v2 | 92.1% | ViT-Base |
| umm_maybe | 94.2% | Vision Transformer |
Stack: JavaScript (ES6), Transformers.js, ONNX, WebGPU/WASM Design: 2006 "Purist" UI aesthetic - no frameworks, pure web standards
3,372+ PNG icons with semantic CLI discovery. Find the right icon by meaning, not filename.
icon suggest security # → lock, shield, key, firewall...
icon suggest data # → chart, database, folder...
icon use lock shield # Export to ./icons/Features: Fuzzy search, theme variants, batch export, markdown integration Stack: Python, FuzzyWuzzy, PIL
COSMIC Files fork with embedded trigram search engine. Memory-mapped indices achieve sub-millisecond searches across 2.15M+ files with ~0 bytes resident memory.
filearchy/
├── triglyph/ # Zero-RSS trigram library (mmap, ~0 bytes resident)
└── triglyphd/ # D-Bus daemon for system-wide search
Performance: 2.15M files indexed, sub-10ms query time, 156MB index on disk Stack: Rust, libcosmic, memmap2, zbus
LLMs echo their training data. That echo is detectable through pattern recognition:
| Signature | Detection Method |
|---|---|
| Phonetic | CMU phoneme analysis, Levenshtein distance |
| Structural | POS tag patterns, sentence construction |
| Semantic | Word2Vec cosine similarity, hedging clusters |
Implemented in specHO with 98.6% preprocessor test pass rate. Live demo at definitelynot.ai.
Core: Rust · Python · TypeScript · C · Nix · Shell
| Project | Description | Stack |
|---|---|---|
| observatory | WebGPU deepfake detection, 4 ML models client-side · live | JS, Transformers.js, ONNX |
| specHO | LLM watermark detection via Echo Rule (phonetic/semantic) | Python, spaCy, Gensim |
| definitelynot.ai | Unicode security: Trojan Source, homoglyph, BiDi defense | PHP, JavaScript, ICU |
| marginium | Multimodal generation with LLM visual output awareness | Python |
| gemini-cli | Privacy-enhanced Gemini CLI fork, telemetry disabled | TypeScript, Node.js |
| Project | Description | Stack |
|---|---|---|
| eero (private) | Mesh WiFi router security analysis, HackerOne prep | Python, Wireshark |
| blizzarchy (private) | Battle.net OAuth analysis, telemetry RE | Rust, Python, Ghidra |
| featherarchy | Security-hardened Monero wallet fork | C++, Qt6 |
| alienware-monitor (private) | Dell monitor firmware RE, GSFW decoder | Python, Ghidra |
| proxyforge (private) | Transparent MITM proxy, TLS interception | Python, mitmproxy |
| Project | Description | Stack |
|---|---|---|
| filearchy | COSMIC Files fork with embedded trigram search engine | Rust, libcosmic |
| ↳ triglyph | Zero-RSS trigram index library (mmap, ~0 bytes resident) | Rust, memmap2 |
| ↳ triglyphd | D-Bus daemon for system-wide search | Rust, zbus |
| nautilus-plus | Enhanced GNOME Files with 512px thumbnails, search-cache | C, GTK4 |
| ↳ search-cache | HashMap-based file indexing, sub-ms search for 2.15M+ files | Rust, DashMap |
| cod3x | Terminal coding agent with 3D ASCII interface at 60fps | Rust, SQLite |
| bitmail (private) | Modern Bitmessage client with Python CLI and Rust TUI | Python, Rust |
| Project | Description | Stack |
|---|---|---|
| indepacer | PACER CLI for federal court research, MFA, cost protection | Python, Click, Rich |
| iconics | Semantic icon library (3,372 PNGs), CLI discovery/export | Python |
| gemini-sharp | Single-file Gemini CLI binaries, 15+ color themes | C#, .NET |
| Project | Description | Stack |
|---|---|---|
| omarchy | DHH's omarchy fork: waybar RSS, NVIDIA config, compact UI | Hyprland, Shell |
| waybar-config | RSS ticker for self-hosted FreshRSS, hover-pause | JSON, CSS, Shell |
| claude-desktop-arch | Claude Code preview patch for Arch Linux | JavaScript, Shell |
| qualcomm-x870e-linux-bug-patch | WiFi 7 firmware fix for WCN7850 on X870E | Python, ACPI |
| arch-dependency-matrices | Graph theory analysis of 1,553 Arch packages | Python, NumPy |
| Project | Description | Stack |
|---|---|---|
| NetworkBatcher | Energy-efficient network batching for iOS 26+ | Swift |
| Liberty-Links | Tracker-free, privacy-respecting link alternatives | Markdown |
Primary Server: Intel Xeon E3-1270v5 | 32GB RAM | 3.6TB SSD (btrfs) | NixOS 24.05
| Service | Technology |
|---|---|
| Security | Post-quantum SSH (sntrup761x25519), Rosenpass VPN (ML-KEM + Kyber-512), nftables firewall |
| DNS | Unbound recursive resolver with DNSSEC, ad/tracker blocking, no third-party DNS |
| Services | FreshRSS, Caddy (HTTPS/HTTP3), cPanel/WHM, Podman containers |
| Network | Local 10Gbps, authoritative BIND9 with RFC2136 ACME |
Infrastructure as Code:
| Project | Description | Stack |
|---|---|---|
| NixOS Server (private) | Bare-metal config: post-quantum SSH, Rosenpass VPN, BIND9 | Nix, agenix |
| unbound-config (private) | Recursive DNS with DNSSEC, ad/tracker blocking | Unbound, Shell |
AI should expand human capability, not replace workers. I call it additive innovation: build tools that make people better at their jobs, not tools that eliminate their jobs.
The best way to predict AI's impact is to build the tools that shape it.
SF Bay Area · Open to remote · Icons from iconics








