Software factories, AI agent infrastructure, and hands-on engineering leadership.
My current focus is thirdshift, an open-source software factory in Rust that takes GitHub issues through implementation, review, and CI to pull requests.
As Head of Engineering at Educational Travel Adventures, I lead a two-engineer team and remain hands-on with the reservations, payments, Linux fleet, and AI-agent infrastructure of a multi-million-dollar specialty-travel business.
Start here · thirdshift · Portfolio · Resume · LinkedIn · Contact
- A deterministic Rust engine supports six coding-agent harnesses and coordinates standards and spec reviews, CI checks, and bounded repair loops.
- Dependency-aware parallel tickets run in separate Git worktrees. Failed runs preserve their work for continuation; merging is explicitly configured.
- I test the assumptions behind the factory. Fresh Eyes Beat a Second Family reports 183 replayed code-review sessions, with fresh-session controls, acceptance bars, and limitations.
Source & architecture · Project
- Removed ~80% of measured database query time with three online indexes, guided by production measurements and verified with query plans.
- Cut manifest load time from 5–7 seconds to ~1 second and SQL statements per request from 2,650 to 183, while preserving byte-identical HTML.
- Built isolated Docker sandboxes for non-engineering managers; the marketing workflow alone has produced 30+ pull requests merged by engineering.
- Instrumented 14 hosts with Prometheus, Grafana, and Alertmanager, covering host metrics, database replication, uptime, and TLS expiry.
Most of this code is private. The ETA platform case study documents the problems, decisions, and measured outcomes; infrastructure-patterns shares sanitized architecture decisions, threat models, and operational review practices.
| Project | What to look for |
|---|---|
| thirdshift | Rust orchestration for unattended issue-to-PR delivery: dependency scheduling, review and CI gates, repair loops, and resumable work. |
| infrastructure-patterns | Production architecture decisions and their trade-offs: tenant isolation, agent identity, deployment, and human review. |
| vaulted-agent | Rust launcher that resolves vault secrets into agent processes, with per-agent secret manifests and optional prompt authentication. Product |
| muxboard | Python dashboard for tmux sessions across a host or fleet, with browser attach, default-deny authentication, and a documented threat model. Product |
-
Chart35 - Offline-first charting with end-to-end encrypted sync across web, iOS, and Android. The public showcase explains the architecture and privacy boundaries. Product
-
Thereish - A couch word game for two to six phones and a laptop: everyone bridges two far-apart words and a language model grades how close the table landed. Phoenix LiveView, with the rules as one pure reducer and every model call behind one seam. Write-up
-
Cascade - A waterfall sound player with one headless Rust core and six platform shells: web, Android, macOS, Windows, iOS, and watchOS. Architecture · Apps
- Merged and released: Per-profile hidden-folder support in
obsidian-remote-ssh, making selected hidden directories browsable over SSH, including agent worktrees, while preserving configuration and ignore rules. Shipped and credited in v1.1.8. - Merged: MySQL 8.4 authentication fix in
php-mysql-replication, enabling binlog readers to connect without downgrading server authentication. - Reported and validated: Herdr / Muse stale working-state bug, with reproduction evidence and workaround verification. A Herdr maintainer confirmed the bug; the Muse team shipped the fix in Muse Code 1.2.1.
Published libraries and more projects
TypeScript and Go libraries with cross-language test fixtures:
| Library | TypeScript | Go |
|---|---|---|
| HMAC webhook verification | webhook-verify · npm | webhook-verify-go |
| AES-256-GCM encryption envelopes | webcrypto-envelope · npm | webcrypto-envelope-go |
St. Carlo Acutis, pray for us.