I build AI products that run in production, and I still write the code. Most of my work lives in private repositories for clients and employers, so this page describes it; the public projects are below.
At CyberX (cybersecurity consultancy, Porto), where I lead development:
- Private LLM platform. EU-resident assistant on Azure with self-hosted models (Ollama, Qwen) and RAG over the company knowledge base, so client data never leaves the tenant. I cut its response time from 211 s to 13 s after tracing the delay to hidden reasoning tokens.
- GuardianX, pentest management: React, TypeScript, Vite, TanStack Query and Firebase, with TOTP MFA, role-based access, Vitest and Playwright tests, and a deploy on every merge.
- The O, an OSINT platform of 21 containerised services: NLP pipelines (multilingual sentiment, spaCy NER, OCR) and a React analyst UI, with an LLM client that falls back between providers.
- MailX, email marketing and phishing simulation in English, Portuguese and Arabic (RTL).
At blue·auth, my own product: I built it because signing contracts and internal documents was slow and legally fragile. It issues eIDAS-qualified signatures, connects to the Portuguese state ID (Chave Móvel Digital) and meets all 24 of ARTE's integration guidelines. 61 institutions and 5,400+ users rely on it. TypeScript, React and Firebase, plus a remote MCP server so AI agents can sign and verify documents while a person approves every write.
Belka, practice management for Portuguese law firms, in pilot with a practising lawyer: an AI assistant whose every action is validated, authorised and audited in one transaction, deadline extraction from court letters, and legal research that checks citations against official sources. Next.js, Cloud Run, Firestore, 1,800+ automated tests.
| Project | What it does |
|---|---|
| cite-or-abstain | Qwen3-1.7B fine-tuned on a 16 GB Mac (LoRA SFT + GRPO, MLX) to answer only with a verbatim quote or abstain. Hallucinations from 56.5% to 5.5% on 400 held-out questions |
| n8n-nodes-blueauth | n8n community node for document-signing workflows (TypeScript, npm) |
| blueauth-gemini-extension | blue·auth signing in Gemini CLI through MCP |
| VozTTY | Local voice dictation for macOS terminals and VS Code, reviewed before anything is sent (Swift) |
| danyalgil-dynamic-island | The iPhone Dynamic Island on macOS (Swift) |
| CyberXShot | Fast, editable screenshots for macOS and Windows (TypeScript) |
| nova-jornada | Free simulator of the 40-hour week for small Brazilian businesses |
AI: RAG, agents and tool calling, MCP, evaluation, Ollama, Claude, OpenAI, Gemini, Hugging Face Transformers, spaCy
Front end and mobile: React, React Native, Next.js, TypeScript, Vite, TanStack Query, Tailwind
Back end: Python, FastAPI, Node.js, NestJS, Firebase
Data and cloud: PostgreSQL, MongoDB, Redis, Firestore, Azure, GCP, AWS, Docker, GitHub Actions
| When | Role |
|---|---|
| 2025 → | Development Lead · CyberX |
| 2023 → | Founder & Lead Engineer · The Danyalgil Company (blue·auth) |
| 2022 | Moved to Portugal at the invitation of the Municipality of Fundão to set up its blockchain programme |
| 2015 – 2019 | CTO & Head of R&D · BankSystem, Brazil · about 60 people across several Scrum teams; clients included Bradesco, Banco do Brasil and federal government bodies |
| 2009 – 2015 | Co-Founder & Lead Developer · BS Software Builder · systems for state and federal public bodies · acquired by BankSystem in 2015 |
Education: PhD candidate in Informatics, University of Minho (auditable AI) · MSc, Innovation and Development · Certified ScrumMaster
Languages: Portuguese (native), English (C1), Italian, Spanish


