Small, focused write-ups for selected work.
Defense-in-depth sandbox isolating Claude Code with network namespaces, filesystem bind mounts, a domain-filtering egress proxy, and cross-platform Nix packaging for Linux and macOS
Merged PR adding security hardening, centralized error handling (14% code reduction), and the project's first test suite to a Taiga MCP server
Self-hosted encrypted chat system built as a Cargo workspace with Tokio async networking, a custom typed JSON protocol, and single-command Docker Compose deployment
Config-driven portfolio with MDX auto-discovery, multi-theme support, dynamic OG images, and server-side form handling on Cloudflare Workers