Principal Software Architect · AI Systems & Security Researcher · Systems Engineer
Designing deterministic AI agent architectures, sub-millisecond prompt-injection firewalls, high-performance graphics engines in Rust, and mission-critical distributed platforms across Python, TypeScript, Kotlin, and PHP/Laravel.
LightGuard-Agent: A Lightweight Defense Architecture Against Indirect Prompt Injection in Tool-Calling AI Agents
- Threat Model: Autonomous AI agents executing tool calls via the Model Context Protocol (MCP) and external APIs are critically exposed to Indirect Prompt Injection (IPI), homoglyph evasion, and multi-turn crescendo jailbreaks embedded in untrusted external data streams.
- Defense Architecture: A sub-millisecond (
< 0.1 ms) three-tier security pipeline combining deterministic syntactic isolation, semantic intent heuristics, and a least-privilege execution policy firewall. - Empirical Verification: Achieved a 100.0% mitigation rate across adversarial benchmark suites with zero false positives on benign clinical, financial, and developer workflows.
- Published Artifacts: Permanent DOI
10.5281/zenodo.22731104· PyPI Package (pip install lightguard-agent) · Interactive Playground · Paper Manuscript
|
Sub-Millisecond AI Agent Security Firewall Universal runtime protection for LLM tool-calling loops and MCP workflows. Defends against indirect prompt injection, unicode homoglyphs, and unauthorized tool escalation with zero external LLM latency overhead.
|
Deterministic Interface Engineering & Runtime Gate Architecture Compiler-grade design system governance and static analysis gates for AI coding agents (Claude Code, Cursor, Codex, Antigravity). Enforces WCAG 2.2 AAA APCA contrast, W3C DTCG tokens, CSS Logical BiDi/RTL parity, and finite-state UI completeness.
|
|
Evidence-Grounded Medical AI Skills Ecosystem Modular clinical informatics ecosystem featuring 24 risk-stratified medical AI skills (IEC 62304 Class A/B/C), 12 zero-token deterministic clinical calculators (ESC 2024 CHA₂DS₂-VA, CKD-EPI 2021, Bedside Schwartz, NEWS2, HAS-BLED, DDI Engine), epistemic provenance locks, and 126-case multilingual negation benchmarks.
|
On-Device Zero-Knowledge Fraud & Phishing Engine Privacy-first Android security engine analyzing SMS, links, and social engineering patterns completely on-device with zero cloud telemetry. Built with clean architecture, Kotlin Coroutines, Jetpack Compose, and Material 3.
|
PhotoCraft Engine — Core Systems Contributor
High-performance, professional digital creative and graphics studio engine written in Rust.
-
Memory Safety & Extreme-Canvas Stability: Hardened high-resolution canvas trimming and multi-layer duplication against out-of-memory panics on ultra-dense canvases exceeding
$2^{30}$ (1 billion+) render pixels. -
Photoshop Actions (
.atn) Binary Engine: Architected deterministic binary.atnrecording and export pipelines, normalizing active layer references at record time, eliminating dangling numeric identifiers, flushing pending recording buffers on save, and validating complex geometric selections. - Compositing & Rendering Mathematics: Eliminated exterior stroke bleeding into opaque glyph interiors across transparent raster/vector surfaces, and engineered dynamic brush-diameter blur sigma scaling for mathematically uniform stroke feathering.
- Cross-Platform Desktop Runtime: Hardened global snapping and smart guide engines for deterministic view-state synchronization across Linux, macOS, and Windows, and integrated native clipboard support for macOS modal dialogs.
FastMCP (PrefectHQ) — Framework Contributor
The standard framework for building Model Context Protocol (MCP) servers in Python and TypeScript.
- Content-Negotiation Cache Isolation: Engineered HTTP
Acceptheader cache partitioning for list operations, preventing cross-format cache pollution and decoupling test dependency injection.
| Project | Domain | Architectural Highlights |
|---|---|---|
| mcp-arabic-toolkit | Arabic NLP & MCP | High-performance MCP server providing Arabic text normalization, morphological processing, diacritization (Tashkeel), and dialect classification for AI agents. |
| mcp-postgres-guard | Database Security & MCP | Secure PostgreSQL MCP server featuring read-only transaction sandboxes, AST-level SQL injection prevention, and automated slow-query EXPLAIN auditing. |
| agentic-rag-faithfulness | LLM Evaluation | Sub-millisecond evaluation engine measuring RAG groundedness and detecting entity/negation hallucinations across Arabic and English retrieval pipelines. |
| laravel-llm-router | Enterprise PHP / AI | Modular Laravel 11 package for multi-provider LLM routing, token budget enforcement, circuit-breaker failover, and semantic response caching. |
| laravel-pgvector-eloquent | Vector Search | Native PostgreSQL pgvector integration for Laravel Eloquent with cosine/L2/inner-product distance scopes and automated HNSW index migrations. |
| prompt-injection-detector-action | DevSecOps CI/CD | GitHub Action security gate that audits agent system prompts, SKILL.md manifests, and MCP tool schemas for injection vulnerabilities on every pull request. |
| unified-whatsapp-webhook-gateway | Distributed Messaging | High-concurrency webhook orchestrator bridging Evolution API and WAHA with multi-tenant CRMs, WooCommerce, and automated AI handoff queues. |
| zero-downtime-db-sync | Data Infrastructure | Resilient streaming database migration and verification CLI for zero-downtime synchronization across MySQL, PostgreSQL, and SQLite. |
| Engineering Pillar | Core Languages, Engines & Frameworks |
|---|---|
| Systems & Graphics Engineering | Rust, C++, WebAssembly (WASM), SIMD Vectorization, Binary Format Parsers (.psd, .atn), egui, Memory-Safe Concurrency |
| AI Agents, MCP & Security | Python, Model Context Protocol (MCP / FastMCP), Agent Skills (SKILL.md), Prompt Injection Firewalls, Clinical CDS, PyTorch |
| Distributed Cloud & Backend | TypeScript, Node.js (NestJS), Python (FastAPI), PHP 8.3+ / Laravel 11, High-Concurrency WebSockets, REST & JSON-RPC 2.0 |
| Data, Vector & Caching Layers | PostgreSQL (pgvector), Redis, MySQL, SQLite, Hybrid Dense + BM25 Retrieval, Reciprocal Rank Fusion (RRF) |
| Mobile & Frontend Systems | Kotlin (Jetpack Compose, Coroutines, Material 3), Next.js 15, React, Tailwind CSS, Logical CSS BiDi/RTL, WCAG 2.2 AAA |
| DevSecOps & Infrastructure | Docker Swarm, Traefik v3 Edge Proxies, Linux Kernel & CloudLinux Hardening, Ansible, GitHub Actions CI/CD |
I partner with engineering organizations, healthcare innovators, and technology leaders on:
- Securing Autonomous AI Agents & MCP Ecosystems: Designing deterministic runtime gates, custom MCP servers, and sub-millisecond prompt-injection firewalls.
- High-Performance Systems & Distributed Platforms: Architecting Rust engines, multi-tenant SaaS platforms (Next.js / Laravel / FastAPI), and zero-downtime cloud infrastructure.
- Specialized Domain AI: Building verified, regulatory-aware AI systems for clinical informatics, Arabic NLP, and RTL-first enterprise products.
