Public engineering work · 2026
One boundary at a time.
Every claim reviewable.
I worked across product UX, identity, ML storage, and signed Kubernetes delivery—in small public review slices.
- Use
- Store
- Curate
- Ship
- Decouple
- Verify
Merged evidence
4 selected public proof linksView authored PRs Swipe through the evidence05 / 06
Small workflow fixes made image review and export less brittle.
MLflow metadata and artifacts reached the right self-hosted stores without committed credentials.
A vision-data workbench needed three storage modes and one tightly bounded privileged sidecar.
Signed builds, image references, GitOps, and admission policy had to agree before Kubernetes would run the image.
React call sites no longer needed to know whether Entra or OIDC supplied the token.
Provider-neutral authentication only works if tokens and signing-key rotation fail safely.
System viewOne frontend boundary hides provider-specific identityprovider-neutral frontend boundary