About

Reviewable systems, telemetry, and defensive engineering artifacts.

I build small public repositories that are intentionally narrow, reproducible, and easy to inspect. The main arc is systems foundations into telemetry and monitoring, then into defensive security tooling and public-safe security writing.

Current emphasis: LogLens, telemetry-lab, repo-sentinel-lite, scientific-computing-toolkit, systems-foundations, and sec-writeups-public.

Selected Projects

telemetry-lab

Deterministic telemetry and detection demos for windowing, dedup, bounded AI-assisted case drafting, and config-change investigation.

repo-sentinel-lite

Deterministic repository hygiene and lightweight secret-adjacent scanning with baselines and pre-commit integration.

scientific-computing-toolkit

Flagship-led scientific and supply-chain review infrastructure centered on the deterministic `sbom-diff-and-risk` tool.

systems-foundations

Linux auth and networking-state mini-labs that turn low-level evidence into reviewable normalized artifacts.

sec-writeups-public

Public, sanitized security notes with explicit publication boundaries, taxonomy, and reviewer-friendly governance.

Writing

telemetry-lab / Design Notes

Why the project is intentionally a small telemetry asset instead of a platform, and how the pipeline is structured.

systems-foundations / Text Processing Pipelines

A systems note on turning shell and text-processing work into reusable, inspectable workflows.

sec-writeups-public / SOC Fundamentals

A public-safe blue-team note on SOC roles, triage flow, alert meaning, and why context decides whether a detection matters.

Contact