Backend systems where the consequences are real.
Healthcare, regulated industries, the trust substrate for AI agents.
Former 101st Airborne, Purple Heart. MBA. Pomona College.
Senior Software Engineer at Carefeed. Own all EHR integrations across 9+ platforms (Epic, PointClickCare, MatrixCare) and architected the enterprise PDF/OCR pipeline serving hundreds of healthcare facilities. Authored the team's foundational standards for LLM-assisted coding tools.
PhotoPare -- Privacy-first iOS app for cleaning up photo libraries. Finds duplicates, blurry shots, and forgotten screenshots using Apple's Vision framework, 100% on-device. No accounts, no uploads, no tracking SDKs. Free to scan, $4.99 one-time unlock for deletion (no subscription). Swift + SwiftUI + StoreKit 2. Launched on the App Store.
Imara -- Runtime governance layer for AI agents. MCP tool call interception, YAML policy engine, SHA-256 hash-chained audit trails, compliance mapping (EU AI Act, SOC 2, HIPAA). Same compliance instincts from healthcare SaaS, applied to autonomous systems. TypeScript monorepo, Apache 2.0, published on npm.
Mavryn -- MCP gateway that proxies multiple upstream MCP servers through a single endpoint. Tool namespacing, search, policies, health checks, and audit logging. Published on npm. TypeScript.
Prior Auth Assistant -- Reference architecture for a HIPAA-shaped healthcare AI app: Postgres row-level security with a two-role deployment, Fernet field-level PHI encryption with rotation, HMAC-chained tamper-evident audit log, prompt-injection hardening (delimited nonces + identifier post-validation), Claude doing OCR + extraction + appeal generation through one vendor. Public demo at prior-auth-assistant.pages.dev. Python, FastAPI, React, MIT.
Aether -- AI agent runtime with hardware-level isolation via Firecracker microVMs. Distributed scheduler, multi-tenant RBAC, PostgreSQL persistence, Kafka messaging, OpenTelemetry observability, Kubernetes/Terraform deployment. 48K lines of Go. Beta.
Kombe -- AI-assisted iOS SSH terminal with WireGuard tunneling, Claude API command assistance, and a companion macOS daemon. SwiftUI, pre-App Store.
Castellan -- Specifications and decision records for a proof-of-concept on delegated authority in local AI agent systems, applied to industrial maintenance work-order triage. Capability-broker architecture, hash-chained audit substrate, refusal as a first-class outcome. Written from the auditor's perspective. Implementation kept private.
| Project | What it does | Stack |
|---|---|---|
| PayApp2Excel | Construction pay app PDF to Excel/CSV with LLM extraction | Next.js, TypeScript |
| Laravel Outbox | Transactional outbox pattern for reliable distributed messaging | PHP, Laravel |
| Technical Debt Tracker | Quantifies tech debt in developer-hours and dollars | TypeScript |
| PDF Dedup | Content-aware PDF deduplication, ~91% storage reduction | TypeScript, Node.js |
| Pulse Markets | Real-time prediction market with WebSocket order books | Laravel, Alpine.js |




