ENGINEERING / REPOSITORIES & TEST EVIDENCE
Engineering case studies backed by implementation evidence, source repositories, constraints and explicit limitations.
Each case study covers the problem, implementation, tests and current limitations. Where possible, I link directly to the code and the relevant workflow results.
TESTED COMPONENTS / ACTUAL SOURCE FILES
These projects have committed implementation and inspectable test or scan artifacts. That does not establish an independently validated production deployment.
backend/tests/test_drift_engine.py
Terraform state parser and drift-engine regression tests
Inspect original source ↗Infrastructure reconciliation
Terraform drift detection and review-based remediation for AWS infrastructure.
Implementation and limitations ↗controller/internal/remediation/tier_test.go
Manual-gate policy tests that reject automatic merge
Inspect original source ↗Kubernetes / Policy enforcement
Policy-tiered Kubernetes remediation with a deliberately bounded GitOps approval path.
Implementation and limitations ↗.github/workflows/sentinel-scan.yml
Trivy and Kubescape scan jobs with uploaded artifacts
Inspect original source ↗Kubernetes security scanning
A Kubernetes security-scanning lab combining container vulnerability and posture scan evidence with scheduled CI automation.
Implementation and limitations ↗PROTOTYPES / ONGOING RESEARCH
These projects have narrower implementation or validation boundaries. Each case study explains what exists today and what is still unproven.
Cloud security / agentic remediation
A cloud-security remediation agent prototype with deterministic security mappings, Terraform proposal generation and GitHub pull-request delivery.
AWS security / Remediation assurance
Source-backed AWS Security Hub remediation hardening: live-state verification, Terraform ownership and fail-closed proposal eligibility.
Kubernetes platform engineering
A Kubernetes platform prototype combining AWS infrastructure, k3s bootstrap, ArgoCD reconciliation and basic observability configuration.
Distributed systems / Execution safety
Rust execution-assurance research for exact action identity, effect contracts and ambiguous external outcomes.
FinOps / infrastructure experimentation
Engineering research into proving whether infrastructure optimization produces safe, attributable, realized savings.
SOURCE DIRECTORY / ADDITIONAL PUBLIC WORK
Public repositories linked by their verified names, without claiming independent production readiness or a completed case study for each one.