I design and build resilient microservices, secure cloud infrastructure, and resource-efficient embedded/IoT architectures. My work focuses heavily on memory-safe backend engineering (Go, Rust), infrastructure automation, and software supply chain security.

🌐 Website: amurru.dev | 📬 Contact: Contact via amurru.dev

• Languages & Runtimes: Go, Rust, C/C++, Python, Dart, Java, PHP, TypeScript
• Architecture & Security: Supply Chain Security (SLSA Level 3), Zero-Trust Architecture, Clean Architecture, Threat Modeling
• Infrastructure & Cloud: Kubernetes, Docker, Terraform, CI/CD Pipelines, Linux Internals
• Edge & IoT: Low-power Embedded Systems, Microcontroller Firmware, Hardware-to-Cloud Protocols

Here are a few tools and platforms I've designed and built:

A high-autonomy, general-purpose AI research and navigation agent built in Go, with a terminal TUI and a browser-based web UI.

• Key Tech: Go, Google ADK, Bubble Tea TUI, Vue 3, MCP
• Focus: Multi-agent orchestration (web researcher + code interpreter), sandboxed execution, self-evolving skill library, persistent knowledge base.

An intelligence security spearhead tool for executing Lua scripts on remote devices, driven over gRPC or an MCP (Model Context Protocol) interface.

• Key Tech: Go, gopher-lua, gRPC, MCP, mTLS
• Focus: Embedded config packs into the binary for single-artifact remote deployment; optional mutual TLS transport and remote UDP telemetry.

A simple terminal podcast client written in Go with various integrations.

• Key Tech: Go, Audio Streaming, Concurrency Controls, System Interfaces
• Focus: Low-latency playback control, memory efficiency, clean modular design.

CLI utility for secure file manipulation, batch processing, and integrity verification.

• Key Tech: Go, Pipeline Optimization, SLSA 3
• Focus: CLI.

A fast, zero-config file lister that groups files by kind instead of making you remember extensions. Find all images, documents, videos, audio, code, archives, and more with a single command.

• Key Tech: Go, Magic-Byte Detection, Multiple Output Formats
• Focus: Group files by kind (images, documents, video, audio, code, archives), magic-byte detection for accurate classification, multiple output formats, configurable sorting.

• 🐇 Building Moonbunny: An AI-Assisted, Zero-Trust Command & Control (C2) Framework in Go — A lightweight, secure-by-default C2 framework for Red Team operators that speaks natively to AI models.
• 📷 The Camera Was the Sensor: Hybrid Supply Chains and the New Espionage Surface — IP-camera espionage, Passwork's European shell, and the Lebanon pager attacks: why the supply chain is no longer just software.
• 🦠 Silent Blight: The Industrialization of Software Supply Chain Attacks — A first-person field report on self-propagating supply chain worms, forged SLSA attestations, eBPF rootkits, and how to survive them.
• 🔐 The Quantum-Ready Codebase: Achieving Cryptographic Agility Before 'Q-Day' — An interface-first playbook for swapping ciphers without rewriting business logic, with Go and Python.
• 🎧 Building Gocaster: A Terminal Podcast Client with Clean Architecture in Go — A layer-by-layer walkthrough of a full-featured TUI podcast client with SQLite, MPV, and Bubble Tea.
• 🏗️ The Security-First Architecture: Designing Threat Models Before Writing Code — A Sprint Zero framework for catching architectural security flaws with STRIDE and Data Flow Diagrams.

📌 More articles on amurru.dev/blog

_{Building secure systems, one package at a time. Visit amurru.dev to learn more about my consulting work and projects.}