A body of engineering work spanning systems programming, full-stack platforms, infrastructure automation, networking, and security hardening.
Local-first AI personal assistant
A fully local, multi-LLM AI desktop assistant with voice interaction, semantic memory, and a modular skills system.
AI-powered platform for Moroccan artisans
Built and shipped a complete AI-powered product for Moroccan artisans to help them sell online during a 48-hour hackathon.
End-to-end AI content generation system
A complete local AI pipeline for automated content generation using n8n, Ollama, ComfyUI, and FLUX.
Full-stack blogging platform
A complete blogging platform built with Java Spring Boot backend and Angular frontend with JWT authentication.
Offline-resilient mobile application
A mobile application with offline-resilient architecture, watcher dashboard, and AI assistant built with React Native and Go.
Full-stack social platform
A complete social networking platform with real-time features, WebSockets, and optimized database performance.
AI-powered coaching platform
An AI-powered coaching platform providing personalized guidance and recommendations.
Modern API architecture
A GraphQL API implementation with efficient data fetching and type safety.
E-commerce platform
A complete e-commerce platform with product management and payment integration.
Location-based application
A location-based application providing navigation and location services.
Desktop fleet tracking system
A desktop application for managing and tracking vehicle fleets with real-time monitoring.
Real-time multiplayer browser game
A multiplayer Bomberman-inspired game rendered entirely through DOM manipulation on a hand-built mini-framework. Players move, drop bombs, destroy obstacles, and collect power-ups across synchronized real-time sessions.
Unix-like shell in Rust
A minimalist Unix-like shell written in Rust. It parses and executes commands with native built-in implementations of core operations, spawning no external binaries for them.
HTTP/1.1 server in Java
A custom HTTP/1.1 server built in Java on non-blocking NIO. A single event-driven selector loop handles multiple ports, request routing, GET/POST/DELETE, file uploads, cookies and sessions, configurable error pages, and CGI execution.
Debian server operations
End-to-end Debian server administration: clean installation, logical volume management, networking, systemd service units, resource monitoring, and operational documentation.
Least-privilege security
A Linux permissions and security build enforcing least privilege: scoped sudo policies, POSIX ACLs, SSH hardening, password policy via PAM, shared directories, and automated permission verification.
Reproducible Debian environments
Automated virtual-machine provisioning that builds a reproducible Debian environment and configures its system and access-control requirements entirely through code.
Routed subnets & core services
A multi-subnet network build: two routed segments behind a gateway with routing, NAT, DHCP reservations, internal DNS, and default-deny firewall policy.
Secure server-fleet operations
Secure administration of a server fleet through a bastion host and SSH ProxyJump: hardened authentication, intrusion prevention, key rotation, fleet-wide automation, and centralized logging.
Reconnaissance to remediation
A controlled security assessment of self-built infrastructure: network reconnaissance, service enumeration, vulnerability assessment, controlled exploitation, risk analysis, and verified remediation after rebuild.