Selected work
Click a project to open its write-up.
2026 · Featured
Hunter Visitors Center Training Simulator
The department's first digital training and certification platform, independently
commissioned by Hunter College Public Safety and built solo: four training modules,
a 30-question assessment, and scenario simulations that replicate the EasyLobby
interface. Built as a secure offline desktop app (Tauri, Rust, encrypted SQLite)
because the material is sensitive.
Approved by the College's VP of Administration, deployed to Visitor Center
workstations, and handed off to IT with full build documentation.
Dec 2025 – 2026 · Working prototype
A role-based access control system with tamper-evident audit logging for high-value inventory. A theft investigation that would mean hours of manual log review becomes a sub-second query, with behavioral analytics that surface internal access anomalies.
↗
Jan 2026 · 47 pages
Built from passive OSINT alone — certificate transparency, DNS forensics, SPF analysis — with prioritized fixes and risk quantified against IBM benchmarks and the NY SHIELD Act.
↗
Oct 2025 · 0 outbound packets
An air-gapped Linux environment that runs AI on confidential data, with isolation verified by packet capture rather than policy. Built for legal, healthcare, and financial work that can't touch the cloud.
↗
Nov 2025
A daily-driver Linux workstation hardened with user compartmentalization, application sandboxing, browser hardening, and network controls — so one compromise stays contained instead of becoming total.
↗
Sep 2025 · Zero data loss
A full Windows-to-Linux migration with full-disk encryption added in the same window — a planned, verified methodology that scales to enterprise workstation transitions.
↗
Oct 2025
A hardened Android OS I run as a daily driver — verified boot, per-app isolation, and hardware-backed encryption that protect sensitive communications at the OS level.
↗
Oct 2025 · Four layers
Four independent controls — enterprise mobility management, DNS filtering, a kernel firewall and self-healing enforcement — stacked so that no single bypass switches the policy off.
↗
