Working prototype
Revenue tracking with authenticated income APIs, Prisma persistence and integer-cent aggregation by month and category.
Next.js · TypeScript · Prisma · SQLite
Scope
The public page uses fictional sample data. Private routes use a single admin token; Stripe, Shopify and QuickBooks adapters are future work, not connected integrations.
Tested reference implementation
GitHub audience snapshots, rename-aware relationship history, refollow-safe lost followers and public repository metrics.
Open public demoCloudflare Pages
Python · FastAPI · SQLite · TypeScript · Chart.js
Scope
Original code inspired by GitPulse's documented concept; upstream source was not imported because its license file could not be verified. One public REST sync was tested. The public dashboard uses fictional data; private API hosting remains unverified.
Release evidence
Open sample dashboard
Tested reference implementation
Source-dated financial research, comparative statements, price charts and private report history with optional grounded AI synthesis.
Open public demoCloudflare Pages
Python · FastAPI · React · Chart.js · yfinance · SQLite
Scope
Adapted from Hema Kalyan Murapaka's GPLv3 MarketInsight. Complete sample/API workflows, Linux/Windows CI, package checks and a non-root container pass. Real Yahoo quote/history was verified; paid AI inference remains unverified. The public workspace uses fictional data and provides research, not investment advice.
Release evidence
Open synthetic reference
Download reference release
Tested reference implementation
Bounded source discovery, incremental documentation summaries, private drafts and digest-bound reviewed README publication.
Python · Click · Groq adapter · SHA-256 caching · AGPLv3
Scope
Adapted from Hema Kalyan's AGPLv3 Doclify. Offline workflows, installed packages and Linux/Windows CI pass. Offline output is structural, not AI inference; live Groq generation remains unverified. This is a local CLI, not a hosted AI service.
Release evidence
Download reference CLI and source
Tested alpha tool
Read-only intake checks for third-party apps and binaries: evidence-backed SBOM across Go, Rust, npm, NuGet, Python and Maven, known vulnerabilities, Electron hardening, code-signing changes, an update check between versions and an approve/review/reject policy gate.
Python · CycloneDX · SARIF · OSV.dev · GitHub Actions
Scope
Original code. Go build info, Rust cargo-auditable, npm/ASAR, NuGet, Python metadata and Maven pom.properties inventories (including nested Spring Boot and WAR archives), Electron fuse and webPreferences rules and the Authenticode signer of Windows executables; vulnerability lookup is opt-in and sends only package name, version and ecosystem. The update check gates on new vulnerabilities, weakened fuses, string-literal network endpoints, new native modules, removed signatures and a changed publisher. v0.3.0 parsers are checked in CI against rust-audit-info on Linux, Windows and macOS, Maven Central and PyPI artifacts (Log4Shell inside a nested JAR) and Windows Get-AuthenticodeSignature; published on PyPI and the GitHub Marketplace with PEP 740 provenance attestations. Findings are version-level evidence, not reachability analysis.
Verification evidence
Real-world case study
GitHub Marketplace action
PyPI package
Tested alpha tool
Offline privacy gate for recorded web traffic: which personal data leaves the browser, to which first or third party, and how, including WebSocket messages and compressed payloads, with redacted evidence.
Python · HAR · Playwright · SARIF · GitHub Actions
Scope
Original code. Test-persona matching including hashed, Base64 and gzip-compressed forms, WebSocket messages with Socket.IO and SignalR framing, checksum-verified IBAN, Steuer-ID and KVNR detectors, health-data fields and a GDPR-oriented data-flow map; third-party eTLD+1 connections are always inventoried, with opt-in connection gating. Reports never contain raw values and the redacted HAR export is self-checked. A Playwright Test (Node) fixture records WebSocket messages, and CI requires identical findings from Python and Node recordings of a fictional demo shop with real Chromium. Technical evidence for privacy reviews, not legal advice.
Verification evidence
Real-world case study
GitHub Marketplace action
PyPI package