Skip to content
View bharat3645's full-sized avatar

Block or report bharat3645

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
bharat3645/README.md
Terminal boot log that mounts the portfolio's five domains with their repo counts, reports overall CI health, flags any failing build, and confirms the flagship and public-repo totals Header for Bharat Singh Parihar, agent-security and AI-infrastructure engineer, with live tiles for flagship repos, green CI, languages, public repos and followers

▌ WHOAMI

I build small, verifiable tools for the parts of the AI stack that fail quietly — agent sandboxes, MCP gateways, model-fit predictors, and post-quantum crypto. Each of the flagship repos below ships with a real test suite, CI, and — where it makes a claim about speed or correctness — a committed benchmark you can re-run yourself.

That's the current chapter. The arc behind it runs from C data structures in 2023, through computer-vision research and a stretch of hackathons and Web3 builds, into GenAI platforms, and now into infrastructure and security. The whole path is below, not just the recent sprint.

  • 💼 Now: CTO @ a stealth AI startup (clinical AI) · AI Engineer @ Nextent Labs — groundwater & environmental intelligence for government water departments
  • 🛠️ Recently: AI/ML Developer @ RnR Consulting (Delhi) — shipped a model-routing harness that cut inference cost 58% / 65%; Go microservices in a 29-service, Temporal-orchestrated backend serving 500+ concurrent users
  • 🎓 Research: 1 Springer Q1 journal · 3 IEEE / SCOPUS papers, plus 2 book chapters in progress — GenAI/GraphRAG, deepfake detection, federated learning
  • 🧭 Focus: agent security · AI infrastructure · post-quantum readiness · backend systems
  • 🧪 How I work: reference-validated implementations, adversarial tests, reproducible benchmarks — no unverified claims
  • 🎓 B.Tech (Hons.) CS, Data Science — Symbiosis Institute of Technology, Nagpur (2022–26), CGPA 8.5/10
  • 📫 Reach me: LinkedIn · Portfolio · Email

▌ LIVE SYSTEM STATUS

Live system-status board showing, for each public flagship repo, its CI pass or fail verdict, release tag, time since last commit, and a bar of recent build results

The board above is regenerated daily from the live GitHub API — CI dots, uptime bars, versions and "last commit" ages are real. When a flagship's build is red, it says so.


▌ PORTFOLIO MAP

Radar chart mapping the flagship repositories across five domains — agent security, AI infrastructure, post-quantum crypto, backend systems and supply chain — sized by live repo count per domain

🛡️ Agent Security

Repo Stack Release What it does
The-Ideal-Harness TypeScript The control-plane OS around a stateless model. A deny-wins, fail-closed policy floor on PreToolUse/PostToolUse hooks — enforcement below the model, not a paragraph in a prompt — plus secret redaction, injection fencing, skill vetting, a hash-chained audit journal, code-graph memory and cache-safe tool-result compression. Six modules, 329 tests, zero runtime dependencies. Contributors welcome — see the good first issue label.
agent-rules-audit JavaScript Static linter for AI-agent rule files (Cursor / Claude / Copilot) — flags over-broad tool grants and injection-prone instructions.
mcp-sentinel Rust Offline risk scanner for MCP client configs — grades each server A–F on inline secrets, @latest pins, shell indirection, typosquats.
toolcage Rust v0.1.0 Per-tool-call WASM sandbox for MCP servers — every tools/call runs in a fresh wasmtime instance with only the filesystem that tool's policy grants.
agent-flightbox Go v0.1.0 Flight recorder for agent processes — captures the syscall / exec / network surface of a run to tamper-evident JSONL, with a session diff.

🧠 AI Infrastructure

Repo Stack Release What it does
mcp-gateway-lite Go v0.4.0 Single-binary reverse proxy for MCP — allowlist filtering, rate limiting, tamper-evident audit log, tools_lock against rug-pulls.
modelgate Go Multi-provider LLM gateway — routing, automatic fallback, token/cost accounting, metadata-only audit trail. stdlib-only.
localmodel-fit Go v0.1.0 Memory-bandwidth-aware local-LLM advisor — predicted decode tok/s, the best quant that fits, speculative-decoding hints. Published methodology, validated against real ollama runs.
trace2eval JavaScript Turns raw agent traces into scrubbed, deduplicated eval datasets — PII scrub before dedupe, deterministic, offline.

🔌 MCP Ecosystem

Repo Stack What it does
voraxx-mcp-server Python Stdlib-only MCP server with three security tools — CVE lookup via OSV.dev, host exposure via Shodan InternetDB, and orchestration of a locally installed Nuclei scanner. No exploit code bundled; 19 tests.
mcp-registry-finder JavaScript Zero-dependency MCP server for searching the official registry — find servers by keyword, inspect details, get install snippets. node:test suite with recorded fixtures.
acts-as-mcp Ruby Expose a Rails app as a policy-aware, read-only MCP server — explicit attribute exposure, per-call authorization, audit events. Zero runtime dependencies.

🔐 Post-Quantum Crypto

Repo Stack Release What it does
ml-kem-rb Ruby Reference ML-KEM (FIPS 203) in pure Ruby, plus a real hybrid X25519 + ML-KEM-768 KEM implementing the TLS 1.3 draft wire format.
pqc-scan 🔒 private Rust Crypto inventory → CycloneDX CBOM → A–F post-quantum readiness grade, with live TLS 1.3 handshake checks. Launches Sept 2026.

🧰 Developer Tooling & Responsible ML

Small, single-purpose CLIs. Each one exists because a specific check was missing, not because a category needed filling.

Repo Stack What it does
biasscope Python ML fairness report cards — demographic parity, equal opportunity, disparate impact, computed directly in pandas/numpy, graded A–F and explained in plain English.
a11y-agent Python Context-aware accessibility scanner — catches the semantic a11y smells (generic alt text, vague link text, colour-only meaning, heading skips) that axe-core and eslint-plugin-jsx-a11y miss.
shiftsense Python Incident postmortem auto-drafting — parses a raw timeline into phases, extracts action items, assembles a blameless-postmortem scaffold.
moodmesh Python Engineering-team burnout early warning from git and PR metadata — trend-based, ethics-first, manager-only by design.
FrameSage Python Tool-calling EDA agent for pandas — an offline heuristic planner drives 9 dataframe tools to profile CSVs into Markdown reports. 34 tests, LLM planner optional.
gemfile-lock-audit Ruby Offline A–F supply-chain risk scanner for Gemfile.lock — zero dependencies, zero network calls.
VeriNet Python SHA-256 checksum manifests for a directory tree, verified later to detect modified, missing or new files.

🗄️ Backend Systems

Repo Stack Release What it does
idempotent-rack Ruby v0.1.0 Idempotency-Key middleware for Rack/Rails — dedupes retried POST/PUT against a pluggable store. (0.3.0 Redis/ActiveRecord backends in progress.)
prism-infranest Python AI backend-generation platform — natural-language prompt → clarifying questions → YAML DSL → production-ready Django, Go Fiber or Rails project with Docker, tests and docs.
compliance-manager Go Desktop PII/compliance scanner (Go + Wails) — extracts document text, matches rule definitions, scores risk, browses results as a file hierarchy. Optional Python ML validation and OCR.
DAG-Pipeline JavaScript Visual node-based pipeline builder (React Flow) with a FastAPI backend that validates the graph as cycle-free using Kahn's algorithm.

▌ THE ARC — 2023 to now

The flagships above are the current chapter. This is how it got there. Each row is a real repo, and the honest caveats each one carries in its own README are carried through here too.

2023 — foundations

Repo What it is
FDS Fundamentals of Data Structures in C — stack-via-two-queues, valid parentheses, Dutch National Flag partitioning. The earliest thing on this account.

2024 — research and first tools

Repo What it is
Real-and-fake-face-distinction Keras CNN classifying real vs AI-generated faces — the research behind the SCOPUS-indexed IEEE deepfake-detection paper (93.5% accuracy).
pbl Deep-learning image encryption — DCGAN key generator + attention/residual CNN, with NPCR/UACI security analysis.
hackathon A CLI that scaffolds a hackathon project skeleton in seconds. First tool I built because the friction annoyed me — the same instinct behind everything in the tooling section above.
shadcn-dashboard Next.js 15 + shadcn/ui admin template. Mock data, no backend — a UI study, labelled as one.

2025 — building broadly

Computer vision, accessibility, Web3, and a lot of shipping.

Repo What it is
HandTalk Real-time ASL sign recognition in video calls — React client, Node/WebRTC signalling, Flask ML backend with MediaPipe + a fine-tuned MobileNet. Team project.
NeuroOCR Offline handwriting OCR — custom-trained TensorFlow.js CNN, fully client-side inference. No server, no uploads.
DreamCanvas Webcam drawing canvas controlled by hand gestures — point to draw, four fingers to erase. Flask + OpenCV + MediaPipe.
Task-Tokenizer Web3 gig platform on Ethereum — Identity, Job, Reputation and Escrow contracts via Hardhat, Next.js frontend. Wallet connect works; homepage listings are demo data.
GigX The decentralized gig marketplace variant — 3rd place, BITS Pilani Web3.0 '25.
GlobalGive Blockchain crowdfunding — Solidity contracts plus frontend, transparent low-fee fundraising.
ChainFusion AI agents bridging Web2 apps to Web3 — LangChain/LangGraph routes with Hardhat tooling.
Quorix Local-first agentic-UI reference app — intent routing over 7 pure-TypeScript tools, word-by-word streaming, no backend.
NomadAI Telegram voice-bot travel companion — Whisper transcribes, Groq Llama-3 detects language and vibe, Maps finds spots, gTTS answers in voice.
Mentoro Emotion-adaptive gamified learning buddy — Remix + Go + Postgres monorepo. Prototype; most endpoints are mock data, stated plainly in its README.
medical-insurance-cost-prediction R pipeline — EDA, linear/Ridge/Lasso and random forest, plus a Shiny app.
GenAI-Platform GenAI workspace: multi-PDF RAG chat, GraphRAG entity graphs, ATS resume feedback, text-to-SQL. This is the implementation behind the Scientific Reports paper below. Later iteration: genai-platform-v2 with a Kubernetes path.

2026 — infrastructure, security, and applied CV

Everything in the flagship tables above, plus:

Repo What it is
firesat-ai Hybrid CNN-LSTM + attention wildfire risk forecasting for Alaska — Sentinel-1/2, Landsat, MODIS, ERA5. The geospatial thread that connects to my current environmental-intelligence work.
fire_detection Fire detection from satellite/aerial imagery — Keras CNN with Grad-CAM explainability, exposed via Streamlit, FastAPI and CLI.
Image-Captioning CNN encoder + LSTM decoder on MS COCO (PyTorch) — beam search, Gradio demo, Docker, CI.
opencv-object-detection-suite MobileNet-SSD webcam script, Flask + YOLOv3 web app, and a YOLOv3 CLI.
ScribeLens Browser-based handwritten OCR with Tesseract.js — entirely client-side.
AnyBrush Multi-modal accessible AI-art studio — eye tracking, voice commands, single-switch control, freehand drawing.
Wisely Privacy-first desktop meeting assistant (Tauri: Rust + React) — local Whisper STT, screen OCR, LLM chat. GPL-3.0 fork with added interview-mode features; upstream credited.
liquidation-aggregator Indian government/bank auction aggregator — scrapes liquidation notices, values lots, grades flip economics.
Automation-AI Node-based workflow automation — FastAPI backend, natural-language-to-workflow generation, cron and webhook triggers.

🤝 Client & freelance work

Project What it is
Sona-Sapphire Cinematic agency site — Next.js 16, React 19, Tailwind 4, StringTune choreography. Local-SEO tuned with geo meta, JSON-LD LocalBusiness, sitemap; Resend inquiry form.
adv-samit-siddhanta archived Single-page site for a Supreme Court advocate — zero-dependency vanilla HTML/CSS/JS, scroll reveals, parallax, BCI-compliant disclaimer. Client deliverable.
3D-Portfolio-Website My own portfolio — Next.js 14, React Three Fiber / Spline, Framer Motion. Live at bharat3645.vercel.app.

▌ ACTIVITY PULSE

Heatmap of commits per flagship repository over the last 14 days, one row per repo sorted by activity, with brighter cells meaning more commits that day

▌ THE JOURNEY

Multi-year timeline across five eras (2022 foundations, 2023 first builds, 2024 research, 2025 build and ship, 2026 infrastructure and security), plotting real dated milestones — B.Tech CS begins, first repos, hackathon wins, the deepfake-detection research and the IEEE and Springer papers, the AI/ML developer role at RnR, the agent harness, and the current CTO and AI engineer roles

▌ RESEARCH & IMPACT

Research and impact panel: peer-reviewed output — one Springer Q1 journal paper in Scientific Reports, three IEEE SCOPUS-indexed conference papers, and two book chapters in progress — with venues, plus shipped-work proof points: 58 to 65 percent AI inference cost reduction, a 29-service backend at 500-plus concurrent users, 93.5 percent deepfake-detection accuracy, and under 1 percent false positives on ID validation

A unified multimodal GenAI platform integrating GraphRAG multi-agent systems and custom language models for intelligent document processing and knowledge synthesisScientific Reports (Nature) 16:16508, April 2026. doi:10.1038/s41598-026-47145-x

Plus 3 SCOPUS-indexed IEEE papers (ICISCT '24 @ Kookmin University, ICPCT '25 @ Amity) and 2 book chapters in progress (federated learning; renewable-energy AI). The deepfake detector above fed one of the IEEE papers; GenAI-Platform is the implementation behind the Scientific Reports work.


▌ VERIFIED BENCHMARKS

Four verified benchmarks — mcp-gateway-lite proxy overhead, toolcage WASM-sandbox overhead, localmodel-fit prefill-scaling error, and ml-kem-rb hybrid-KEM byte sizes — each reproducible from that repo's own harness
Reproduce these numbers yourself ▸
# mcp-gateway-lite — reverse-proxy overhead (Apple M4, go1.26.5)
go test -run '^$' -bench . -benchtime=2s ./gateway/...      # 29.3µs direct vs 69.9µs through gateway

# toolcage — per-call WASM sandbox overhead (ubuntu-latest CI, 200 echo calls)
python3 ci/bench.py WORK ./target/release/toolcage x.wasm 200   # 0.415ms median vs 0.089ms unsandboxed floor

# localmodel-fit — prefill 1/params scaling (Apple M4, real ollama)
go run ./bench -model qwen2.5:0.5b -hw m4 -params 494032768     # measured 0.5b/1.5b ratio 3.06–3.18 vs exact 3.125

# ml-kem-rb — hybrid X25519+ML-KEM-768, TLS draft wire format (FIPS 203)
ruby -rml_kem/hybrid -e 'p MLKem::Hybrid.client_init[0].bytesize'  # => 1216 (server share 1120, shared secret 64 B)

▌ POST-QUANTUM MIGRATION CLOCK

Two of my repos (ml-kem-rb, pqc-scan) exist because the crypto deadlines below are real and close. The clock counts down live against these US federal dates (NIST / NSA primary sources).

Post-quantum migration clock counting down to four real US federal cryptography deadlines: the FIPS 140-2 sunset, NSA CNSA 2.0, and the NIST IR 8547 deprecate and disallow dates

▌ LANGUAGE MIX

Treemap of the portfolio's language composition by bytes across the public flagship repos, with each language block sized in proportion to its share

Go, Rust, TypeScript, Python and Ruby across the flagships — plus C, R, Java and Solidity further back in the arc. The language follows the problem: Rust where a sandbox boundary has to hold, Go for single-binary tooling, Ruby where the ecosystem gap was (a pure-Ruby ML-KEM did not exist), Python for anything touching data.


▌ AGENT-SECURITY STACK

Architecture diagram placing each flagship in a real agent request path: modelgate on the LLM lane; mcp-gateway-lite and toolcage on the tool lane; mcp-sentinel, agent-rules-audit, agent-flightbox and trace2eval as observers; over a post-quantum foundation of ml-kem-rb and pqc-scan

These aren't scattered side-projects. The Ideal Harness is the control plane the whole path runs through; modelgate gates the LLM calls; mcp-gateway-lite filters the tool calls; toolcage sandboxes each one; mcp-sentinel, agent-rules-audit, agent-flightbox and trace2eval watch the run — and ml-kem-rb / pqc-scan are the post-quantum floor the whole thing has to stand on.


▌ PORTFOLIO CONSTELLATION

Network graph of the flagship repositories clustered by domain, node size proportional to commit count, connected through a shared-MCP hub with labeled links including the mcp-gateway-lite and mcp-sentinel CI cross-check

Node size is real commit count. The MCP hub links the repos that actually speak the protocol; the bright edge is the CI cross-check where mcp-gateway-lite verifies mcp-sentinel's own lockfile output — a real test, not a diagram flourish.


▌ CONTRIBUTION GRAPH

An animated snake that eats its way through my real GitHub contribution graph, regenerated from live contribution data every day

── EOF ────────────────────────────────────────────────────────────
   if a tool makes a claim, it ships with the test that proves it.
────────────────────────────────────────────────────────────────────

This whole page is a program. Twelve custom SVG instruments, built from live GitHub data by assets/generate.py, committed to this repo, and refreshed every day by a GitHub Action — plus the classic animated contribution snake, regenerated daily from real commit data by its own long-running GitHub Action and committed to this repo's output branch. No flaky Vercel-hosted widget services. No mocked numbers. Every figure is real and reproducible — down to the red build I haven't hidden.

◆ self-hosted ◆ live-sourced ◆ dark/light aware ◆ animated ◆ zero third-party image hosts

Pinned Loading

  1. ChainFusion ChainFusion Public

    AI agents that help bridge Web2 apps to Web3 - Python backend (LangChain/LangGraph agent routes) with a React/Yarn frontend and Hardhat/Scaffold-ETH tooling. Built on Replit.

    TypeScript

  2. GlobalGive GlobalGive Public

    Blockchain-based crowdfunding platform - Solidity smart contracts plus a JS/HTML/CSS frontend for transparent, low-fee fundraising. Live demo and video walkthrough linked in the README.

    JavaScript

  3. HandTalk HandTalk Public

    Real-time ASL sign recognition in video calls - React client, Node/WebRTC signaling server, and a Flask ML backend using MediaPipe + OpenCV with a fine-tuned MobileNet (best_model.keras); training …

    JavaScript

  4. TruthGuardAI TruthGuardAI Public

    Early-stage AI misinformation/fact-checking tool - Vite + React + TS frontend with a small Node backend and Supabase; UI exists, the fact-checking pipeline is work in progress.

    TypeScript

  5. The-Ideal-Harness The-Ideal-Harness Public

    Agent harness / control-plane around a stateless LLM: deterministic policy floor on PreToolUse/PostToolUse hooks, secret redaction, injection fencing, tool-result compression, code-graph memory, or…

    TypeScript 3

  6. agent-rules-audit agent-rules-audit Public

    Offline scanner for AI agent instruction files (AGENTS.md, CLAUDE.md, .cursorrules, skills, MCP configs) — flags prompt-injection payloads, hidden Unicode, encoded blobs, exfiltration and permissio…

    JavaScript 2