// projects
This is what I build — labeled honestly. A fork is called a fork, what's paused says paused, and what stands on someone else's work says so. The anatomy lives on the detail pages, the backstory in the log.
// built because it was missing
A CLI-first server inventory: one YAML file as the source of truth, everything else generated — SSH config, Ansible inventories, fuzzy host targeting, parallel OS audits. Built because hand-maintained SSH configs rot.
A Discord concierge for service businesses with a deterministic security gate: the LLM only drafts text, it never acts. RBAC on Discord roles, human approval before every side effect, append-only audit log.
A multi-tenant semantic search platform: Express backend, TypeScript SDK, and WordPress plugin from one monorepo, six embedding providers behind one abstraction, per-client isolation.
A local RAG system for arbitrary document domains: ingest from PDF, YouTube, and web, metadata-aware retrieval, cross-reference fact checking — fully via Ollama if you want, without a byte leaving the machine.
// small, but in daily use