Projects

Australian-built security tooling focused on useful, honest capabilities. The public repository contains the company website, learning material, blog, and the safeguards that keep its release independent from private services.

Standalone security-controls explorer covering retained history from the Australian ISM, New Zealand ISM, Cyber Essentials, NIST CSF, and NIST SP 800-53. The catalogue runs locally in the browser from a checksum-verified SQLite snapshot.

Public, read-only vulnerability intelligence explorer. Its restored static interface is live while the rights-gated data pipeline and browser-local DuckDB/Parquet experience are developed in public.

Browser-local explorer for structured security knowledge rather than live IOC monitoring. The static interface is public; its rights-gated ATT&CK data pipeline and immutable Parquet releases remain in development.

Graphics-first browser recreation of Civilization II Multiplayer Gold Edition, preserving the original interface, rules, music, movies, and Windows-era character. Requires a legally owned copy before original game assets load.

Independent, graphics-first browser recreation of Spacebase DF-9 using the published Lua source as its behavioural reference. Rebuilds the simulation, interface, audio, and game systems in TypeScript and Three.js.

Privacy-first iOS app for tracking autoimmune disease activity across 14 conditions with 17 validated clinical scores. Longitudinal charting, daily symptom logging, and shareable reports, with health data kept on-device and in the user's iCloud.

Portable operating system for ESP32 devices with a hardware-independent Rust kernel, loadable apps and drivers, swappable window managers, and signed over-the-air delivery.

No-std Rust widget toolkit for e-paper and LCD displays. A semantic widget tree, flexbox-style layout, themes, and display-specific colour mapping let the same application UI render across embedded displays.

Public catalogue and distribution site for ThistleOS apps, drivers, firmware, window managers, and themes.

Open reference architecture for a personal AI assistant that separates knowledge, collection, review, and tool execution behind explicit boundaries and human approval. The public repository contains architecture and sanitised examples, not live deployment state.

Trust and sandboxing layer for OpenClaw with per-tool and per-skill kernel sandboxing, explicit capabilities, approval gates, and a tamper-evident local audit trail.

Portable cryptographic identity verification with client-side proofs, signed identity history, key rotation, revocation, and document signing. Private keys remain in the user's browser.

Custom Home Assistant integration that syncs a Notion Kanban board as a todo list with a drag-and-drop Lovelace card.

Custom Home Assistant integration to browse and select recipes from a Notion database, with a gallery-style Lovelace card.

Restartable, read-only Proton Mail exporter that writes complete RFC822 messages through Proton Mail Bridge and records durable SQLite checkpoints for safe resume and deduplication.

Auditable Ubuntu 24.04 and KDE Plasma workspace images built from scratch for Kasm, with separate core and custom layers plus a Kasm-compatible registry.

Bootstrap templates for Claude Code managed software projects, with opinionated project scaffolding and CLAUDE.md conventions.

Infrastructure-as-code example for a multi-node homelab using Proxmox virtualisation, Docker containers, Ansible provisioning, and Terraform VM creation.

Curated list of applications that enable or natively support Attribute Based Access Control for security and IAM practitioners.

Materials and resources from conference presentations at ComfyCon AU.

Personal website and blog. Hugo static site with a custom theme, Notion as CMS, and GitHub Actions for CI/CD.