Projects

Security automation, private infrastructure, and independent software.

Syphon Suite

Self-hosted infrastructureIn progress

A self-hosted media server written from scratch, not a wrapper around an existing one. It runs on hardware you own, keeps a private library in sync between several homes, and uses Tor onion services for both syncing and remote access.

A single Rust binary with a SQLite database, licensed under AGPL-3.0.

Built around privacy and trust

Mesh sync between locations over Tor onion services, paired by a request-and-approve flow
Device trust in place of IP allowlisting
Password login, strong encryption at rest, and a private per-user vault
A malware scanner on every ingest path: downloads, uploads, and mesh sync
Signed updates with rollback and database snapshots

Rust
SQLite
Tor onion services
AGPL-3.0

Automated Backup & Evidence Pipeline

Security automationCompleted

Incremental encrypted backup system built in Bash: rsync hard-link snapshots, GPG encryption at rest, SHA-256 manifest generation and verification on every run, and systemd timer scheduling for unattended operation. Built with forensic evidence preservation in mind; chain of custody and integrity verification are first-class requirements.

Bash
GPG
Evidence preservation

Civic Nexus

Security engineeringLive

Independent political insight and research platform built from scratch with security engineering decisions made at the design stage. Privacy-by-design architecture, hardened FastAPI backend, Cloudflare edge security, and a data minimisation model applied throughout. A live production system where the security decisions are visible in the codebase.

FastAPI / Python
Cloudflare
PostgreSQL