██████╗ ██████╗ ████████╗    ██╗███╗   ██╗ ██████╗
██╔══██╗██╔══██╗╚══██╔══╝    ██║████╗  ██║██╔════╝
██████╔╝██████╔╝   ██║       ██║██╔██╗ ██║██║
██╔══██╗██╔══██╗   ██║       ██║██║╚██╗██║██║
██████╔╝██║  ██║   ██║       ██║██║ ╚████║╚██████╗
╚═════╝ ╚═╝  ╚═╝   ╚═╝       ╚═╝╚═╝  ╚═══╝ ╚═════╝

I build production-grade software: systems with test suites, CI/CD pipelines, security audits, and deployment documentation. Autonomous aerial systems with DAL-A safety discipline. Three-tier architecture combining formal verification, numerical methods, and real-time control.

The interface IS the model. Operator interfaces compress 6 data signals into the space marketing sites use for one headline.

Three areas I go deep on:

• Security-conscious system design — auth flows, RBAC, session management, secrets hygiene, OWASP Top 10
• Production infrastructure — Docker, Nginx, GitHub Actions, Prometheus/Grafana, Kubernetes
• Applied mathematics & quantitative methods — ARIMA/SARIMA time-series analysis, Prophet forecasting, Monte Carlo simulation, stochastic modeling, complexity analysis (Kolmogorov, algorithmic information theory), formal invariants

Available globally via BRT Inc. and Upwork.

flowchart TB
  subgraph T3["Advisory · cloud or local"]
    AI["AI router<br/>Claude · Ollama mistral:7b<br/>$5/day cap · circuit breaker"]
  end
  subgraph T2["Executive · 10–50 Hz · DAL-A"]
    GOV["Safety governor<br/>No eval/exec/getattr<br/>NO_GO on exception"]
    SHIELD["Formal shield · 5 invariants"]
    DMS["Deadman switch<br/>NTP-attack detection"]
  end
  subgraph T1["Reactive · 1 kHz · on Pixhawk"]
    PX4["PX4 · NuttX RTOS<br/>Attitude · motor mix"]
  end

  AI -->|"suggestion (advisory)"| GOV
  GOV --> SHIELD
  SHIELD --> GOV
  GOV --> DMS
  GOV -->|"approved setpoint"| PX4
  PX4 -.->|"telemetry"| GOV

  classDef advisory fill:#1a0d2e,stroke:#8b5cf6,color:#e2e8f0
  classDef executive fill:#0a1e2e,stroke:#06b6d4,color:#e2e8f0
  classDef reactive fill:#1c0a13,stroke:#ff006e,color:#e2e8f0
  class T3,AI advisory
  class T2,GOV,SHIELD,DMS executive
  class T1,PX4 reactive

Key principle: The AI never writes to the flight command path. The executive owns final authority. The reactive layer owns hard real-time. This separation is why an LLM can be useful in flight-adj[...]

• sentinel — Audit closed (9/9 findings resolved). BRT Inc. launched with UEDF SENTINEL v5.0 in production.
• agentic-uav-stack — Tier 1+2+3 wave stable on main. SRL-3 HIL ramping. 783 tests passing.
• levin-search — Shipped. Levin Universal Search over BrainFuck with O(2^|p*| · t*) total work. Kolmogorov complexity bounds verified.
• second-brain — Ingestion pipeline iteration. Qdrant + ONNX embedding server next.

Military command & control platform · 27,900 lines · PHP 8 + MySQL · production-ready

Real-time drone fleet management and threat detection system. RBAC with 4 roles, TOTP 2FA, blockchain-chained tamper-evident audit log, Node.js WebSocket telemetry shim, NATS JetStream integration. Si[...]

Security audit: 3 Critical + 6 High findings → all 9 resolved · 22 files patched · 317 lines fixed · 0 regressions · audit-gate[...]

PHP 8.3 · MySQL 8 · Node.js · NATS JetStream · WebSocket · PHPUnit · GitHub Actions

Multi-scale autonomous drone platform · Three-tier architecture · Formal verification

Currently SRL-3, HIL ramping. 783 tests passing. Kardashev 0.68.

Subsystems shipped: Brain daemon with key isolation; Simplex formal shield (5 geometric invariants); deadman's switch with NTP-attack detection; Octogent multi-agent vulnerability scanner; N-versi[...]

Python 3.12 · NATS JetStream · MAVLink · ROS 2 Jazzy · DDS · pytest · GitHub Actions

Economic intelligence system · FastAPI + Plotly Dash · 54 tests passing · Quantitative Methods

Production-grade backend with 11 endpoint groups, SQLAlchemy ORM, JWT auth (3-tier RBAC). Forecasting engine: auto-order ARIMA/SARIMA time-series decomposition, Facebook Prophet with changepoint detection, Monte Carlo fiscal sustainability simulation (10,000 paths, 95% CI bounds). Impulse-response analysis for shock scenarios.

Python · FastAPI · Plotly Dash · Prophet · statsmodels · pandas · SQLAlchemy · PostgreSQL · Docker · Nginx · pytest

Production-grade booking platform · React 19 + TypeScript + Supabase + Vercel

Live business app deployed for Studio P, Manzini. OS-aware UI via userAgent/platform/maxTouchPoints (applied synchronously, zero layout flash). Two-round orchestrated parallel booking validation[...]

React 19 · TypeScript · Supabase · PostgreSQL RLS · PBKDF2 · Web Crypto API · Vercel

Levin's Universal Search over BrainFuck · Algorithmic Information Theory · Speed-optimised

Deterministic universal search algorithm over programs in an esoteric language. Achieves O(2^|p*| · t*) total work asymptotically — matching Levin's theoretical bound. Mathematical foundations: Kolmogorov complexity, prefix-free enumeration, halting problem bounds.

Three optimizations:

Phase 6 ≈ 60 MB RAM, phase 8 ≈ 3.8 GB. CLI: find <target>, run <program>, kolmogorov <target>.

Production-grade compression pipeline: adaptive streaming, multi-codec orchestration, edge-deployed. Shell + infrastructure tooling for high-throughput data reduction at the edge of the UAV sensor pip[...]

Obsidian-style knowledge vault. 29 cross-linked wiki articles + 28 studio agents compounding knowledge via per-session ## Evolution Log entries. Karpathy-style synthesis pipeline (<scratchpad> bef[...]

1. No AI in the flight command path. AI is advisory; formal shield + governor have final say. Engagement recs require human authorization.
2. DAL-A invariants are CI-gated. scripts/check_dal_a_rules.py rejects eval, exec, getattr, __import__ in safety-critical files.
3. Fail-safe means NO_GO. Governor returns NO_GO on exception; decision variables pre-bound before try block.
4. API keys never leave the daemon process. brain/daemon.py loads .env, pops secrets, then subprocess.Popen(..., env={}). Audit via make audit-keys.
5. Defense in depth at every layer. SROS2 enclaves enforce topic-level pub/sub authorization at DDS layer.
6. Multi-persona security review. 9 concurrent personas (red-team, blue-team, supply-chain, compliance, insider-threat, architecture-integrity, trojan-horse, goldilocks, cat-burglar) run weekly wi[...]

I write so the next operator can pick this up cold. National Libraries, government officials, defence forces are the design audience for the compliance posture. Repos and docs reflect that — read `a[...]

Not a content marketer. Not a vibe-coder. Not a wrapper around someone else's API. Work targets compliance gates before features, not after; tamper-evident audit before "observability"; deterministic [...]

Building something that needs a solid engineer?

BRT Inc. · hello@brtinc.dev · Upwork

"Every project ships with a test suite, CI/CD pipeline, and deployment documentation — not just working code."

Through the issue tracker on any repo above. No DMs on other platforms.