YOUR NAME_
$ whoami
End-to-end AI engineer who ships production systems from copper to UX. Designs and operates a private compute farm of 12+ hosts running self-hosted LLMs, computer vision, voice pipelines, and multi-agent workflows. Comfortable across the stack: Python, JavaScript, Bash, network/TLS, container orchestration, and live-system debugging. Bias toward small, durable systems over flashy ones.
$ ls -la competencies/
- Agentic AI
- Claude Code SDK, multi-agent orchestration, hook-based event automation, autonomous task delegation, transcript-driven state, deploy-key & PR workflows
- Local LLM Inference
- Ollama (llama3.1, deepseek-coder-v2, qwen2.5-coder, moondream), prompt engineering, dual-model comparison, side-by-side summarization at scale
- AI Pipelines
- faster-whisper STT, openWakeWord wake-word, Piper TTS, Web Audio synthesis, Web Speech API, ComfyUI + Stable Diffusion image generation
- Infrastructure
- Docker Compose, Tailscale (subnet routing, sidecar pattern, MagicDNS), Caddy + Let's Encrypt DNS-01, nginx, OPNsense REST API, Wazuh SIEM, Frigate NVR
- Languages
- Python, JavaScript (Canvas / Web APIs), Bash, HTML/CSS, SQL, Mermaid
- Tooling
- Git (deploy keys, hooks), MediaWiki API, systemd timers, cron, msmtp, ufw/nftables, KVM/libvirt, MeshCentral, TacticalRMM, Vaultwarden API
$ cat projects/*.md
Multi-Agent Game Studio// 2026
Autonomous agent system that designs, codes, and ships browser games to an end user.
- Orchestrator spawns sub-agents that clone a private repo via read-only ed25519 deploy keys, generate self-contained HTML5 games with Web Audio / Web Speech synthesis, push to GitHub, and trigger remote
git pulldeploys - 9 games shipped — physics, memory, counting, picture books with TTS, ambient-music storybooks — all generated and refined autonomously by sub-agents
- Site behind Caddy with real Let's Encrypt certs on dual hostnames (Cloudflare DNS-01 + Tailscale-issued
*.ts.net), no public port exposure
Security Digest · Dual-LLM Threat Aggregator// 2026
Daily side-by-side threat intel summary from two local LLMs, no cloud calls.
- RSS pipeline aggregates Krebs, Schneier, SANS ISC, BleepingComputer, r/netsec, r/security plus the NVD CVE API, dedupes and keyword-categorizes into Vulns / Breaches / Threat Intel / Tools
- Identical prompt sent to llama3.1 and deepseek-coder-v2 via Ollama; renders a static HTML side-by-side toggle for direct model comparison
- Cron-driven, nginx-served, zero runtime dependencies after generation
Voice Assistant Stack — "Hey Jarvis"// 2026
Always-on local voice loop integrating wake-word, STT, intent dispatch, and TTS.
- Pipeline: openWakeWord → record-to-silence → faster-whisper (tiny.en) → bash dispatcher → Piper neural TTS via PipeWire — all CPU, no cloud
- Skills: light control via Alexa REST bridge, weather (wttr.in), PBS NewsHour headlines, Frigate camera snapshot to Telegram, Billboard chart search, security report mail
- Echo-cancellation handled with a speaking-flag file and 3 s cooldown; runs as a user systemd unit
Hugo + LLM Blog Pipeline// 2026
Daily auto-generated technical journal that narrates the farm's own activity.
- Parses Claude Code agent transcripts, summarizes via local Ollama, renders a Hugo (PaperMod) post with an AI-illustrated header image generated locally on ComfyUI / Stable Diffusion (T550 GPU)
- Nightly cron, OPNsense Unbound host overrides, served at
blog.dev1.cbwserv.comon db13ltp001 - 40+ daily posts generated, illustrated, and published without manual intervention
AI Compute Farm Architecture// 2026
12-host private homelab unifying LLM serving, vision, security, and end-user services.
- Hosts include LLM serving (NVIDIA T550), KVM virtualization, Frigate NVR with OpenVINO object detection, Wazuh SIEM, self-hosted Bitwarden (Vaultwarden), MediaWiki, TacticalRMM, HomeAssistant
- Zero-trust networking via private Tailscale tailnet with subnet routing into VLAN200; OPNsense at the edge with automated DNS overrides through its REST API
- End-to-end automated TLS for both internal (
*.ts.net) and public (*.dev1.cbwserv.com) hostnames; cron-based cert renewal for non-Caddy paths