Software developer in the U.S. Air Force focused on security engineering — lately, open-source tooling for DoD PKI, digital signatures, and compliance workflows.
Most of what I build sits somewhere between software development, cybersecurity, and automation. Practical first, flashy second.
- fossroot — an open-source, auditable replacement for DISA InstallRoot (Rust, single binary)
- CACSign — an Adobe-free PDF viewer, annotator, and CAC/smart-card signer for Windows
- e2096 — automating DAF Form 2096 personnel actions end-to-end (SBIR concept prototype)
Open-source, single-binary, cross-platform manager for DoD PKI CA certificate trust stores — a modern, auditable replacement for DISA InstallRoot. Pins the DoD root CAs, fetches the live DISA certificate bundle, and installs to system trust stores from either an egui GUI or a scriptable CLI, in one executable.
| GUI | CLI |
|---|---|
 |
 |
Rust egui PKI X.509 Windows / macOS / Linux
Free local PDF viewer, annotator, and CAC/smart-card signer for Windows — an Adobe-free way to view, fill, and digitally sign PDFs. Renders and fills forms, adds ink and text annotations, and produces standards-based digital signatures from a smart card, with signature details you can actually inspect.
| Viewer | Signing | Signature Details |
|---|---|---|
 |
 |
 |
C# .NET WPF iText PKCS#11 PAdES / digital signatures
An airman describes a personnel action in plain English; an LLM grounded on an AFECD/AFOCD retrieval corpus derives the correct classification action, fills the actual DAF Form 2096 PDF, routes it through human approvals with real PAdES digital signatures, and archives every version in a hash-chained, write-once signature vault. Built as an SBIR demonstration prototype — all data is fictional and every generated PDF is watermarked.
| Platform Dashboard | Signed DAF Form 2096 | Demonstration Report |
|---|---|---|
 |
 |
 |
Python FastAPI pyHanko pypdf RAG PAdES / digital signatures SQLite
Modern web-based DISA STIG viewer and checklist workbench — import XCCDF benchmarks, work findings with status and comments, and export STIG Viewer-compatible .ckl files. Local-first ASP.NET Core 8 / Blazor, no cloud dependency.
| Dashboard | Checklist | Benchmark |
|---|---|---|
 |
 |
 |
C# .NET 8 ASP.NET Core Blazor XCCDF SQLite
Self-hosted VA disability claim preparation that never sends your records to anyone's cloud. Upload service and medical records, let a local LLM (via Ollama) analyze them with cited condition suggestions, and walk away with a filled, ready-to-file claim packet — 21-526EZ, personal statements, Intent to File, and an indexed evidence PDF. Local inference, local OCR, zero telemetry. Not affiliated with the VA.
| Record Analysis | Draft Documents | Filled 21-526EZ |
|---|---|---|
 |
 |
 |
Python FastAPI React TypeScript Vite Ollama SQLite
A satellite mission-tasking API where the pipeline is the product: SAST, secret scanning, SBOM generation with Sigstore signing, Trivy container scanning, CodeQL, and a simulated Kubernetes deploy — six GitHub Actions workflows gating every change.
Python FastAPI GitHub Actions Sigstore Trivy CodeQL Kubernetes
| Project | What it is |
|---|---|
| cert-compass | Interactive security-certification atlas for 2026 — curated chart, honest verdicts, real pricing, 12 role-based career paths. |
| cmmc-atlas | All 110 NIST SP 800-171 controls mapped to Microsoft 365/Azure implementations, with a live DoD SPRS score calculator. |
| rampart | Policy-as-code security gate for Kubernetes — Kyverno, OPA/Rego, and a from-scratch policy engine wired into CI. |
| xyzbrowsersync | Secure, anonymous, open-source browser syncing — a modern continuation of xBrowserSync (GPL-3.0). |
| hooklens | Zero-dependency webhook & HTTP request inspector — one Python file, live dashboard, copy-as-curl replay. |
| Project | What it is |
|---|---|
| ach-workbench | Analysis of Competing Hypotheses workbench — refutation-based ranking, diagnosticity analysis, ICD 203 estimative language. |
| ttpmap | Maps threat-report prose to MITRE ATT&CK techniques with span-level citations and calibrated confidence. Zero dependencies, offline. |
| seerstone | Palantir-inspired local intelligence workbench — entity link graphs, case timelines, search over SQLite. Fully offline. |
| Project | What it is |
|---|---|
| militarysmartcards.com | Open-source, up-to-date guide for servicemembers configuring their CAC to DISA standard. |
| usaf-mobile-index | Open-source index documenting Air Force and military mobile apps — because no such project existed. |
| OCHO | Offline-first military disaster response PWA built for Operation Agile Saber 2026 — field reports, UXO sightings, EOC dashboard. |
| USAF Contracting AI Tool | Converts stakeholder input into SMART requirements, RFIs, and complete RFP packages. |
| Project | What it is |
|---|---|
| nestward360 | Life360-style family safety app — private circles, live location, place alerts, SOS. Expo React Native + NestJS, safety-by-design. |
| switchboard | Local Amazon Connect emulator — learn cloud contact centers (flows, routing, CCP, metrics) without an AWS bill. |
| sitrep | Situation reports for your money — offline financial reports from Amex, Chase, and USAA CSV exports. Zero dependencies. |
| cadence-crm | Local-first personal CRM — follow-up cadences, interaction timelines, drag-and-drop deal pipeline. No backend. |
| claude-cert-prep | Unofficial offline study app for the Anthropic Claude certification exams — 171 original practice questions, timed mocks. |
If one of my projects is useful, feel free to open an issue, submit a PR, or just steal an idea and build something better. That's half the point of open source.