Code by language
Hover
- JavaScript43 %
- TypeScript42.5 %
- TeX5.4 %
- Python4.4 %
- Shell1.2 %
- CSS0.8 %
- PLpgSQL0.7 %
- C#0.7 %
- Rust0.6 %
- HTML0.4 %
- SCSS0.4 %
GitHub engineering activity
Commits over the last 90 days
HOVER A POINT FOR DETAILS23 Aug4 Oct15 Nov
Repositories by technology
Hover
- Node.js26 repos
- JavaScript26 repos
- TypeScript23 repos
- CSS21 repos
- React20 repos
- HTML17 repos
- Tailwind CSS14 repos
- Python9 repos
- Next.js9 repos
- Shell9 repos
- Dockerfile3 repos
- Rust2 repos
- Pandas1 repos
- PHP1 repos
- scikit-learn1 repos
Recent commits by scope
Hover
- Public personal work279 commits
- Private personal work37 commits
CURRENT DIRECTIVE
Enterprise Focus
Lerøy Seafood Group
Leading Architecture, Security & AI
Orchestrating adaptive, highly scalable, and cyber-secured systems across Python, Node.js, Rust, Java, SQL/PostgreSQL, Redis, and Agentic AI workflows. Driving Zero-Trust security, cloud native microservices, and long-term maintainability.
SYSTEM TENETS
Core Philosophies
Latest writing
Browse all postsField notes
AI Security
AgentBaiting and Fake AI Tools: Evidence, Enterprise Exposure and Defensive Architecture
An evidence-led investigation of FakeGit, malicious AI agent tools, poisoned registries, and practical enterprise controls.
Read noteAppSec Brief
AppSec Lead Brief: isolate build identities and harden HTTP boundaries
A kaniko token leak, Actix request parsing flaws and Azure Key Vault cache poisoning make identity isolation the priority.
Read noteAI Governance
AI That Cannot Sign the Audit: Design Rules Behind Revios
Why we are building Revios, audit software for Nordic audit firms, and the engineering rules that keep AI useful without letting it make audit decisions: human approval, a signed audit log, privacy-separated data, and tenant isolation in the database.
Read noteAppSec Brief
AppSec Lead Brief: stop treating metadata as proof
Account takeover, signature bypass and CI trust flaws show why state, metadata and cached artifacts need explicit validation.
Read noteAppSec Brief
AppSec Lead Brief: patch Wasmtime, then prove dependency visibility
Critical Wasmtime compiler flaws, a Tokio use-after-free, Rust TLS trust fixes, and new package-control options.
Read noteAppSec Brief
AppSec Lead Brief: treat archives and sandboxes as hostile boundaries
Rust archive extraction, Wasmtime sandbox escape, decompression denial of service and TLS-secret logging fixes.
Read note