I work where infrastructure and software meet.
On the infrastructure side: Microsoft 365, Entra ID, Intune, Windows Autopilot, Conditional Access and Azure for enterprise clients, plus servers, firewalls, backup and the incident that wakes someone up at night.
On the software side: Python services and TypeScript products, with tests, CI and code I would be comfortable handing to someone else.
San Rafael, Mendoza, Argentina
Both of these ask the same question: where does a control belong, and what happens when it sits in the wrong place.
permission-rag — access control applied during retrieval, before a model ever sees a document. Ships an eval suite that fails the build on any leak, and a benchmark measuring what the opposite order costs: recall falls from 100% to 37% once 20 restricted near-duplicates compete per topic.
midea-mf200-tools — reverse engineering of the local protocol of the washer-dryer in my flat. The hardware can run cold-air ventilation; the firmware blocks the program id. Five strategies tested against the machine, offsets documented, negative result reported to the vendor.
web-posture — passive security posture checks for a domain: DMARC and SPF policy, TLS, security headers, cookie flags and exposed files. Standard library only, 23 offline tests, and an authorization gate that refuses to scan without an explicit flag and a recorded reason.