Detailed write-ups for selected work.
Security-first homelab agent on the Claude Agent SDK: a default-deny toolset that refused a live prompt-injection payload, exactly-once event replay across hard container kills, and cadence state that survives redeploys
Astro portfolio with GSAP scroll animations and a 42-command interactive terminal hidden in the About section
Defense-in-depth sandbox isolating Claude Code with network namespaces, filesystem bind mounts, a domain-filtering egress proxy, and cross-platform Nix packaging for Linux and macOS
Merged PR adding security hardening, centralized error handling (14% code reduction), and the project's first test suite to a Taiga MCP server
Microsoft Teams AI bot that unifies a consultancy's internal tools (leave tracking, employee handbook, seat booking, CV management) behind a single conversational interface powered by Claude
Self-hosted terminal chat system built as a Cargo workspace: Tokio async server, Cursive TUI client, and a shared typed ndjson protocol with compile-time checked PostgreSQL queries
Discord bot that ingests Dutch bank CSV exports, categorizes transactions with regex rules and Claude AI, and streams them to a Google Sheets budget
Three-device hybrid cloud-home infrastructure with automated cross-device backups, Prometheus monitoring and alerting, recursive DNSSEC resolution, and Cloudflare Zero Trust networking