Systems & automation
Things I've built
Running systems, not slideware. Everything below is designed, built, deployed, and operated end to end - hardware to cloud to interface.
Defense-in-depth service patterns for public telemetry, private content, validation, rate limiting, logging, and failure handling.
service boundaries · access control · observability LiveWine-fridge monitoringCustom ESP32 sensor rig streaming temperature telemetry to a cloud ingest API, with dashboards, trends, and alerting on drift.
ESP32 · HMAC ingest · time-series · alerts LiveRoom climate & AC automationEnvironmental monitoring with a desired-state controller for the AC - sensors report, the system reconciles.
sensors · desired-state control · Flask APIThis site's own stack: hardened auth server with TOTP 2FA, per-IP rate limiting, strict CSP, session security, and a contact pipeline through local mail infrastructure.
Python stdlib · PBKDF2 · TOTP · nginx · CSPNative SwiftUI network scanner with a real SSH terminal - shipped on the App Store with subscriptions and a privacy-first design.
SwiftUI · Network framework · SSH · StoreKitAutomation experiments across data pipelines, document generation, and operational tooling - the dashboard's automation counters are fed by these systems.
LLM pipelines · schedulers · data extractionArchitecture Full write-up →
The monitoring stack shares one architecture: frontend → secure API layer → sensor services, with storage, automation, and analytics behind it. The write-up shows how the pieces fit - without exposing anything an attacker could use.