A security reviewer that only lives in its own web app gets opened twice and forgotten. Cygent reads smart-contract codebases, finds the vulnerabilities, writes the fix and opens the PR, so it had to answer wherever the review already happens: GitHub, Slack, Discord, Telegram, and whatever MCP client someone turns up with. Five wire formats and five ways to fail, against one set of service contracts. Customer code raised the bar again, so every team got an isolated environment with its own compute, services and data boundaries instead of a shared tenant and a WHERE clause. I built and operated that platform. It launched in April 2026 and it is live. In July, Cyfrin laid off the engineering team and took the company a different direction, so I handed it over still running.

Updraft teaches 200,000+ people to write secure smart contracts, and past a certain size you cannot tell a learner anything without a system deciding who actually needs to hear it. I built the backend APIs and the notification system behind that, wrote Svelte on the front end, and ran the infra and deployments across Updraft, CodeHawks and Solodit. Docker images, Coolify pipelines, devcontainers. I hit two bugs in Coolify on the way through and fixed those too, both merged upstream.

Campaign people describe what they want, which is rarely the thing they need, and somebody has to sit in the room and work out the difference. For nine years at the family firm in Tampa I was that somebody and the half of it that wrote code. 50+ WordPress sites to keep online, plus the custom pieces the campaigns actually ran on: landing pages, funnels, and whatever had to talk to whatever else. Most of the job was fixing things I didn't build, which turned out to be the useful part and is still how I read an unfamiliar codebase fast.