Selected work

Built in the open.

The clearest read on how I work is the code I write in the open: a self-hosted social platform, the libraries underneath it, the infrastructure I run it on, and contributions to mainstream open source projects that I use. Thirteen-plus years of client work, across many stacks, sits behind it on the resume.

Open source and projects

What I build

Riposte

Rust · Axum · React

A self-hosted social platform built from scratch. Single Docker image, encrypted at rest, RBAC, OIDC. This site is one deployment of it.

riposte-social

Riposte design system

TypeScript

Design tokens across eight themes, a localStorage-backed theme engine, and accessible components. The design language behind every Riposte surface.

riposte-design-system

BatchHound

Node · NestJS · Postgres · React · MCP

A pet food recipe hub for building and validating homemade dog food. Recipes are checked against FEDIAF 2025 and AAFCO 2016 nutrient standards with specific deficiencies flagged, portions are calculated per dog by weight and life stage, and shopping lists are generated by pack quantity. Ships an MCP server with token generation so AI assistants can help draft recipes against an authenticated account.

BatchHound

H-eL-seven

Rust · Dioxus

A schema-aware HL7 v2 → JSON translator and learning resource. Resolves message structures, decodes fields by HL7 data type, and validates usage, cardinality, and table membership into named, typed JSON built for Postgres JSONB. Ships a CLI, a Dioxus visualizer, and a live demo.

H-eL-seven

HCApproval

Rust · Dioxus · X12

An end-to-end healthcare prior-authorization demo spanning provider and payer sides: X12 278 intake and response, auto-adjudication with explainable rule traces, pended-review work queues, CMS-0057-F decision clocks, reasoned denial letters, and a full dispute and appeal mechanism. A single data-driven engine interprets committed JSON definitions, a seeded generator doubles as the test oracle, and Dioxus portals serve provider, payer, and compliance roles.

HCApproval

Axum rate limiter

Rust

Token-bucket rate-limiting middleware for Axum services.

rate-limiter

Axum CSRF middleware

Rust

CSRF protection for Axum and tower-sessions.

axum-tower-sessions-csrf

i18n email templates

Rust

Localized transactional emails authored in markdown and rendered from i18n catalogs.

i18n-md-email-templates

zsh-secret-guard

Zsh · Perl

A Zsh hook that redacts secrets before they reach your shell history. Commands matching API-key, password, and token patterns are rewritten to <REDACTED> on disk while still running normally and keeping history intact.

zsh-secret-guard

Self-hosted infrastructure

Nix · Terraform

Networking I run on my own infrastructure: a Headscale control plane with Keycloak OIDC, and Terraform-provisioned SFTP behind WireGuard.

headscale-deployment

Multi-agent CLI rewrite

Rust · MCP · ACP

A full rewrite of a multi-agent assistant CLI stack in Rust, including its MCP server, with an added ACP server. Private; available to discuss.

Contributions

Work merged into projects I use

Zed

Rust

Merged contributions to the Rust code editor.

zed-industries/zed

nixpkgs

Nix

Package contributions to nixpkgs.

NixOS/nixpkgs

More of the day-to-day is on GitHub.

Client work

Thirteen-plus years, shipped

New builds, rewrites, migrations, and rescues at SchoolMint, Doran Jones, AXA-Equitable, Liaison, and others, across Node, Java, .NET, and more. The full history is on the resume, tailored to the role and shared by a quick access code.