Skip to main content
ZombieMutex

30 results · ↑ ↓ navigate · Enter open · Esc close

Code / Engineering

Projects

This is the implementation record: independent code and test fixtures, production engineering case studies, and published security evidence. I keep those categories separate so it is clear what I built, what I verified locally and what remains private. There are also mobile apps, audio projects and small tools I made because they were interesting.

Professional systems

Mobile, backend and security work from enterprise environments. Architectural decisions and failure paths, not private customer artifacts.

Read the case studies →

Independent source and tests

Runnable Rust, Go and backend implementations, with source downloads, attack reproduction, local evidence and limitations.

Inspect Rust and Go →

Security analysis

Documented authorization failures, reproducible local tests, and defensive analysis.

Security write-ups →

Start with evidence

Three places to inspect real decisions

More published evidence →

Rust ELFGuard

Checked ELF parsing, 6 tests and 10,000 mutation cases. Inspect the source and the hardening claims it deliberately cannot make.

Code, tests and limits →

Go AuthRace

A local 24-request replay attack: 120 units applied by the vulnerable handler, 5 by the fixed one.

Reproduce the exploit and fix →

Agent Security

A policy reference and separate local Go runtime with explicit delegation, tenancy, egress and replay boundaries.

Inspect the trust boundary →

Projects / Browse

Find a project

13 notebooks

Showing 6 of 13 projects

Audio MLImplemented

Audio ML Training, Evaluation & Ablations

I trained a small audio-activity classifier with NumPy, built clean and noisy held-out sets, and ran controlled feature and augmentation ablations using repeatable seeds and explicit precision/recall/F1 results.

Audio · Python

SystemsDocumented

Backend Verification Under Load

I built backend verification safeguards so retries and dependency outages would not quietly bypass risk and authorization checks.

Backend

Voice agentsImplemented

Event-Driven CRM Integration

I implemented a voice-to-CRM event service with HMAC-verified webhooks, replay-window checks, tenant-scoped idempotency, duplicate detection and recovery after simulated downstream outages.

Backend

SystemsDocumented

Hardening iOS Device Trust Signals

I hardened iOS device-trust decisions by separating untrusted client signals from evidence verified by backend services.

iOS · Backend · Swift

Audio MLImplemented

Neural Audio Codec & Vector Quantization

I implemented and trained a small nonlinear vector-quantized audio autoencoder with a learned encoder, decoder and discrete codebook, then compared measured reconstruction error to an 8-bit companding baseline.

Audio · Python

SystemsDocumented

Session Recovery Without Blind Trust

I worked on session-recovery controls that made identity checks, step-up decisions and failure states explicit instead of weakening authentication during recovery.

Backend

Search and filters run in your browser. No account, tracking API or paid search service.

Systems & notes

Mobile, backend and security projects · Scroll through the cards

Swipe, scroll, or use the arrows to browse

Hardening iOS Device Trust Signals

I hardened iOS device-trust decisions by separating untrusted client signals from evidence verified by backend services.

Swift, iOS app telemetry, API verification service, structured logs

Session Recovery Without Blind Trust

I worked on session-recovery controls that made identity checks, step-up decisions and failure states explicit instead of weakening authentication during recovery.

Backend auth services, state machine modeling, observability instrumentation

Backend Verification Under Load

I built backend verification safeguards so retries and dependency outages would not quietly bypass risk and authorization checks.

API gateway policies, distributed tracing, metrics dashboards, incident runbooks

iOS apps

Apps built for Apple's platforms. · Engineering work and published releases

I've made mobile apps and integrations, but not every project has a public store listing. Here are the related experiments and write-ups I can share.

Swipe, scroll, or use the arrows to browse
Swift · Security

Device trust & attestation

App Attest, request binding and where client integrity stops being authorization.

Explore project
Swift · Concurrency

Swift concurrency

Cancellation, lifecycle edges and recovering from asynchronous work that does not cooperate.

Explore project
Interactive lab

Device-attestation lab

Try the trust-boundary decisions instead of just reading about them.

Explore project
iOS + Android

Mobile authorization boundaries

An integrity check is useful. Letting it replace an authorization check is not.

Explore project
All iOS apps

Android apps

Android applications and engineering work. · Engineering work and published releases

I've made mobile apps and integrations, but not every project has a public store listing. Here are the related experiments and write-ups I can share.

Swipe, scroll, or use the arrows to browse
Kotlin · Security

Play Integrity binding

Bind server challenges and request context to integrity verdicts, without trusting client booleans.

Explore project
Kotlin · Coroutines

Coroutines & lifecycle

Structured concurrency, cancellation and surviving the unexpected screen change.

Explore project
Interactive lab

Session recovery lab

Replay-resistant session transitions and failure handling.

Explore project
Android malware

Android toll-fraud analysis

OTP interception and the trust boundaries that malware tries to hop over.

Explore project
All Android apps

GitHub projects

Public originals and forks · Scroll through the repositories

Fetching public projects…

No public original projects to show right now. The private stuff is staying private.

Forks and explorations

Swipe, scroll, or use the arrows to browse
Forked project

armistice

Hardware private key storage for next-generation cryptography (e.g. BLS) supporting USB armory MkII devices

0
View repository

Have a project idea or a weird bug?

I like hearing about small tools, surprising bugs and things people build for fun. If something here sparks an idea, send it my way.

Say hello