Projects
Things I’ve built in the open. Most came out of real work — security automation and DevSecOps — alongside a few personal experiments. Everything lives on GitHub.
Security & DevSecOps
DevSecOpsKB
Go
Normalizes OWASP ZAP findings into a deduplicated, versionable knowledge base and publishes it as an Obsidian vault with dashboards and a persistent triage board. Tool-agnostic by design; ZAP is the first module.
View on GitHub →
wherewasmypassword
TypeScript
A password manager you can actually remember: hide each word of a strong random passphrase along a route through an illustrated memory house (the method of loci). Browser extension, Argon2id + AES-GCM, zero network requests.
View on GitHub →
Experiments & personal
rolescout
Python
A local-first job-match pipeline: collects ATS postings, scores them against your resume evidence, and prepares grounded application materials. Never auto-applies.
View on GitHub →
decision-log
TypeScript
A personal calibration journal — log predictions with probabilities, then score your forecasting calibration over time. Includes suggested questions and a practice mode.
View on GitHub →