Coming from a strong sysadmin and infrastructure background, I spent years managing servers, networks, and keeping systems alive. Over time, I realized a fundamental truth: the most dangerous system risks are often the ones you don't even have visible inventory for.
That mindset naturally led me into the world of open source. I started building tools to solve real-world problems around API governance, edge safety, data integrity, and automation.
Here is what I’ve been building in public, what each project taught me, and why these areas matter today:
1. Governing LLM & API Traffic: AI-Gateway
As AI applications move to production, controlling model access, enforcing limits, and monitoring traffic becomes critical.
- The Project: AI-Gateway — A lightweight proxy layer designed to secure, route, and manage API requests and policies for AI services.
- Key Lesson: Security in the AI era isn't just about firewall ports; it's about context-aware policy management and dynamic traffic control.
2. Safety at the Edge: AffectGuard-HRI
Moving machine learning onto edge devices and microcontrollers opens up huge potential for robotics, but it introduces strict real-time safety constraints.
- The Project: AffectGuard-HRI — An open-source framework tailored for human-robot interaction, focusing on real-time safety, intent tracking, and affective monitoring.
- Key Lesson: Edge AI demands extreme efficiency. You can't rely on cloud latency when dealing with physical robotic hardware—safety loops must run reliably at the hardware level.
3. Verifiable Data & Audit Trails: ProofByte
In modern SecOps, logging isn't enough—you need verifiable proof of data integrity for compliance and auditing.
- The Project: ProofByte — A lightweight tool aimed at data validation, cryptographic verification, and maintaining tamper-evident audit trails.
- Key Lesson: Building trust in distributed workflows requires cryptographic validation at every step of the pipeline.
4. Modern Workflow Governance: AutoGov
Processes in enterprise environments often break down due to manual bottlenecks and fragmented oversight.
- The Project: AutoGov — An automation and workflow governance engine built to streamline standard operating procedures and administrative checks.
- Key Lesson: Good automation doesn't replace governance—it bakes governance into the infrastructure so compliance happens by default.
What’s Next?
Transitioning from maintaining infrastructure to building developer tools in public has been an incredible learning experience.
I’d love to hear from the community: What is your biggest pain point right now when securing edge devices or managing AI API endpoints?
Feel free to check out the repos, leave stars if you find them useful, or open issues/PRs! Let’s connect! 🚀
Top comments (1)
"The most dangerous risks are the ones you don't have visible inventory for" is the line I'd underline twice. I'm a non-developer who ended up building a pile of internal tools, and the scariest moment wasn't any single vulnerability — it was realizing I could no longer list what I'd shipped, let alone what each thing could reach.
Your ProofByte lesson (validate at every step) and your AutoGov one (bake governance in rather than bolt it on) landed together for me. The fix that actually held wasn't a policy doc — it was moving the guarantees into the scaffolding: every new tool starts from a skeleton that already has the security helpers wired in, so the safe thing is the default state, not a step someone has to remember. Governance you have to remember is governance that eventually gets skipped.
Four tools in and already thinking about inventory and default-safe — that's the part most "I built X" posts skip.