DevSecOps & Cost Governance for agentic AI.
Low-level security with token-spend optimization
to scale up your business.
roas / mo
+0%
Improve support latency, sharpen shop visuals, make checkout 3s faster. Tiny changes compound.
Latest releases
AI / Spatiotemporal / Research
Similarity-based human mobility prediction across 225K+ users and 4 cities using DTW, GMM blending, and interpretable pattern transfer
A production-grade trajectory prediction algorithm for the SIGSPATIAL GISCup 2025 challenge. The algorithm finds users with similar movement patterns and blends their behaviors with Gaussian Mixture Models to predict where an individual moves next. It reaches competitive GEO-BLEU scores and stays interpretable.
AI / Workflow Systems
Interview transcription and AI chat built around Celery chains, embeddings, and context routing
Built for a client processing large volumes of interviews. Celery orchestrates the recordings, the system embeds uploaded documents, and a tag system controls which context slices each interview can reach, so the AI chat answers from the right material rather than the whole corpus.
Mobile / Factory Ops
Cross-platform factory ERP app used daily on-site for stock tracking and task management
We built the full Flutter client and Django REST backend for a production app that workers in a factory use every day. The project rewards reliability and usable flows over launch-page polish.
Performance / CI
Reducing Docker build time by -96%
I took over a slow CI pipeline, reworked the shell scripts, restructured the Dockerfiles for layer caching, and added multi-stage builds. The result cut delivery time and carried over to several other projects.
Low-Code / Cloud
Power Automate and PowerApps frontends extended with a service running on Azure AKS
We built an order management solution on Microsoft's low-code stack, then pushed past the platform limits with a Flask microservice on Azure AKS. A case of working with the stack a client already runs instead of forcing a rewrite.
Web Delivery
Angular frontends on Django backends with Playwright coverage across multiple projects
Several production frontend implementations for agency clients: component architecture, routing, reactive forms, API integration, and end-to-end coverage in Playwright. This is the steady client work that carries a project.
Security / Hardening
JWT, OAuth2, Entra ID, CORS/CSRF, and Kubernetes RBAC configured for production setups
We configured production Django APIs with OAuth2, JWT, and CORS/CSRF enforcement to match client requirements instead of the shipped defaults. SSO runs through Azure Entra ID via Django Allauth. Kubernetes clusters use RBAC and namespace isolation.
Open Source / Security
SVG threat detector PoC built after hitting upload vectors that basic validation misses
This proof-of-concept goes past MIME checks. It parses SVG structure and inspects embedded script behavior, event handlers, and injection surfaces. It works as a case study because it shows how you reason when a standard package solves half the problem.