I design cloud platforms and agentic AI systems teams can trust.

Developers submit through a portal, API or CLI; policy evaluates the request and produces deterministic evidence for human review. The public release demonstrates the simulation, proposal generation, Terraform validation and protected workflow design. It does not call a cloud API, create resources, or validate a real environment.

• Readable policy feedback across ownership, cost, network, encryption, logging and expiry.
• Deterministic evidence with request IDs, fingerprints, content hashes and expected resources.
• Separate provider roots for AWS and Azure, with protected workflow designs and short-lived OIDC boundaries.
• Credential-free local path covering the portal, API, CLI, proposal generation and validation.

View repository → · Read documentation →

A deliberately constrained order service modernized without losing its HTTP contract. The project separates locally verified application behavior from a reviewable AWS target, using a non-root container, operational runbooks, and plan-only Terraform rather than implying a deployment.

• Preserved /v1 behavior with validation, idempotency, ownership, transitions, reports and safe error envelopes.
• Runtime hardening through non-root, read-only container behavior, health/readiness boundaries and immutable image input.
• Operational seams for PostgreSQL, JWT, SQS, S3, telemetry, graceful shutdown and recovery runbooks.
• Deterministic evidence covering tests, container acceptance, Trivy, SBOM, PostgreSQL integration and backup/restore.

View repository → · Read architecture docs →

A local-first URL shortening service with explicit ownership, lifecycle and resolver boundaries. The public v0.1.0 release verifies the local Compose/PostgreSQL lifecycle, Terraform validation, pinned multi-platform images and CI evidence; it has no public endpoint and no applied AWS environment.

• Secure lifecycle with custom/random aliases, expiry, disable, tombstone deletion and no code reuse.
• Destination safety through HTTP(S)-only validation, DNS checks and rejection of private or metadata addresses.
• Bounded resolver with safe click metadata, no client IP/user-agent storage and explicit 302/404/410 semantics.
• Reviewable delivery design with Terraform validation, CI quality/security gates and no AWS apply or endpoint claim.

View repository → · Read architecture docs →

Two repositories make the ownership boundary visible: the application repository tests, scans and publishes an immutable multi-architecture image; the GitOps repository owns reviewed Kubernetes desired state and Argo CD reconciliation to a Docker Desktop cluster. This is verified locally, not a managed-cloud or production deployment.

• Application repository owns tests, non-root image build, vulnerability scanning and multi-architecture GHCR publication.
• GitOps repository owns reviewed manifests, Kustomize overlays, probes, security context, NetworkPolicy and Argo CD reconciliation.
• Immutable hand-off uses the published digest rather than a moving tag.
• Operational evidence includes a diagnosed broken image, Git revert recovery, rollout checks and endpoint verification on Docker Desktop.

Application repository → · GitOps repository → · Read architecture docs →

A focused generative-AI support workflow: customers receive policy-grounded answers, review a proposed escalation, and explicitly confirm before a ticket is created. An authenticated operator desk then advances tickets through resolution. The serverless AWS deployment was verified and removed after acceptance; no continuously hosted endpoint is claimed.

• Grounded assistance combines Bedrock Converse, Knowledge Bases, citations and Guardrails with deterministic local safety checks.
• Controlled escalation requires explicit confirmation and idempotency before ticket creation.
• Authenticated operations uses Cognito PKCE and operator-group authorization for ticket progression.
• Cost-aware lifecycle includes expiry, throttles, short retention, alarms, manual OIDC deployment and exact-target teardown.

View repository → · View v1.0.0 release → · Read AWS verification →

An agentic support system for a fictional electronics retailer. The assistant combines grounded knowledge, cross-session memory, approved Gateway tools, restricted browsing, and isolated calculations. Customers can view orders, confirm eligible returns, and follow safety cases while trusted application rules retain authority over identity, ownership, eligibility, and every business change.

• Identity-owned workflows prevent one customer from reading or changing another customer's records.
• Deterministic authority keeps return eligibility, confirmation, idempotency and audit decisions outside the language model.
• Bounded AgentCore capabilities provide approved knowledge, memory, Gateway tools, restricted research and isolated calculations without general business-record access.
• Evaluation and acceptance evidence combines 30 versioned scenarios with automated invariants, live adversarial checks, deployment, teardown and residual-resource checks.

View repository → · Read validation evidence → · Read security model →