Projects
Each of these ships as something you can actually run — a CLI, a library, or a deployable app — with its own tests, CI, and source on GitHub.
Concord
A hypothetical bank compliance framework (SBP/ISO 27001/PCI DSS/NIST CSF), plus grcmap: a cross-framework GRC mapping and gap-analysis engine grounded in the real current versions of all four frameworks.
Penumbra
fwlint: an offline C++ static analyzer that finds shadowed, redundant, correlated, and generalized rules in real Cisco ACL / JSON firewall policies, with witness packets and SARIF output.
Rollkeeper
A Flask student-records app with role-based access control, atomic audit logging, layered rate limiting, and a CI pipeline (Ruff/pytest/Bandit/pip-audit) -- not just a CRUD demo with security controls bolted on.
Squall
A hands-on 802.11 deauth-attack lab (Aircrack-ng) plus deauthguard/, a real passive Scapy/Python flood detector -- the defensive counterpart the original lacked.
Temper
A lab demonstration of hash cracking with John the Ripper/Johnny, plus pwaudit: a NIST SP 800-63B-4 password-policy auditor grounded in real HIBP breach data and real John the Ripper experiments.
Titrate
Firewall Tutor: a Blazor WebAssembly + C# tool that steps through Cisco ACL evaluation field-by-field, showing exactly why a packet was allowed or denied.
Tremor
A passive, host-based ransomware behavioral-detection engine (RansomWatch) -- explainable sliding-window rules grounded in RansomWhere?/CryptoDrop research, no malware anywhere in the repo.
Interlock
An NE555-timer and D-flip-flop-based 4-way traffic signal controller, verified in Proteus simulation and on physical hardware.
Marshaller
A Cisco Packet Tracer aviation-network simulation (OSPF, ~20 VLANs), plus avionics-configgen: a declarative Python/Jinja2 IOS config generator that reproduces all 77 of its real captured addressing facts exactly.
Escapement
cpu16: a C++ instruction-set simulator and assembler that actually implements the diagrammed CPU (CU/ALU/register-file/RAM-ROM/bus), replacing x86 calls that never touched the design.
Fulcrum
numsolve: an explainable C++ CLI that traces Gaussian elimination step-by-step, derives PLU factorization from the same multipliers, and diagnoses conditioning, pivoting, and residual error.
Squid
bracketsched: a native C++ library (with a C ABI) for deterministic single- and double-elimination bracket generation for any team count, with a named seeding algorithm and documented invariants.
Turnstile
schedsim: a C++ CPU-scheduling simulation framework (RR/priority/MLFQ/CFS-lite) validated against real Linux 6.12.25 kernel benchmark data from a hand-patched round-robin scheduler.
Witness
A real Selenium WebDriver/pytest E2E suite (Page Object Model, RBAC-UI and forced-browsing tests) against Rollkeeper, plus real Locust load results -- rebuilt from an original Selenium IDE report.