Skip to content
View rafagomes's full-sized avatar
35 followers · 15 following

Achievements

Achievement: Pull Sharkx4Achievement: Pair Extraordinairex4Achievement: YOLOAchievement: QuickdrawAchievement: Arctic Code Vault Contributor

Achievements

Achievement: Pull Sharkx4Achievement: Pair Extraordinairex4Achievement: YOLOAchievement: QuickdrawAchievement: Arctic Code Vault Contributor

Highlights

  • Pro

Block or report rafagomes

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
rafagomes/README.md

Hi, I'm Rafa

Head of Engineering at Oak Network. I take agentic AI from demo to production.

Based in Brazil (GMT-3), working remotely with US teams. Over 18 years I went from hands-on full-stack and blockchain engineering to leading a 25-engineer team across the US and LatAm, and I still work hands-on in architecture and code.

Website LinkedIn X Security research

At work

  • 4 AI agent systems in production at Oak, instrumented for cost, observability and usage.
  • An agentic development culture across the team: spec-driven delivery, a separate agent reviewing every PR, and AI coding measured by cost and usage per developer through self-hosted Claude Code telemetry (OpenTelemetry, Prometheus, Loki, Grafana).
  • Engineering for a crowdfunding protocol with 1M users, from architecture to infrastructure.

Open source

  • ai-workflow: a spec-driven, trunk-based delivery workflow for Claude Code. You decide what to build, agents build it from the spec, a separate agent reviews it, you merge.
  • cdp: Credential Delegation Protocol (work in progress). An open protocol and Rust reference implementation so AI agents get authenticated access without ever seeing the credentials.
  • spec-kit-preset-claude-ask-questions: a Spec Kit preset that turns /speckit.clarify and /speckit.checklist into Claude Code's native question picker, with a recommendation and its reasoning.
  • claude-code-mods: function-hook plugins for Claude Code, such as an English coach, a toolbar and a status line.
  • ecies-bls12381: a Go package for ECIES encryption over the BLS12-381 curve.
  • tailscale-exit-node-terraform: a self-hosted Tailscale exit node on AWS, deployed with Terraform.

Writing

Stack

  • Languages: TypeScript, Go, Python. Also Rust and Solidity.
  • AI: LLMs, agentic systems, multi-agent orchestration, Claude Code tooling
  • Backend and web: Node.js (NestJS), React, Next.js, PostgreSQL, API and SDK design
  • Infrastructure: AWS, Kubernetes, Docker, Terraform, CI/CD, OpenTelemetry, Grafana
  • Blockchain: EVM/Solidity, Solana, protocol design

Security shapes how I design, though it is not my day job: CEH, threat modeling and secure system design. I publish independent research as 0xrafasec: CVE deep-dives, malware analysis and blockchain security.

Open to

Conversations about AI engineering, technical leadership and running AI systems in production.

Portuguese (native), English (professional).

Pinned Loading

  1. ai-workflow ai-workflow Public

    Spec-driven, trunk-based delivery workflow for Claude Code: agents build from the spec, a separate agent reviews the PR, you merge.

    HTML 9 2

  2. ecies-bls12381 ecies-bls12381 Public

    Go package for ECIES keypair generation, encryption and decryption over the BLS12-381 curve, built on Kyber. Suitable for proxy re-encryption.

    Go 2

  3. spec-kit-preset-claude-ask-questions spec-kit-preset-claude-ask-questions Public

    Spec Kit preset that upgrades /speckit.clarify and /speckit.checklist on Claude Code from Markdown tables to the native AskUserQuestion picker, with recommendation + reasoning.

    7 1

  4. cdp cdp Public

    Credential Delegation Protocol: an open protocol and Rust reference implementation that gives AI agents authenticated access without ever exposing the credentials.

    Rust 2

  5. tailscale-exit-node-terraform tailscale-exit-node-terraform Public

    Deploy a self-hosted Tailscale exit node on AWS with Terraform. Privacy-first VPN alternative using your own cloud instance, minimal cost, zero open ports, multi-region ready

    HCL 1

  6. claude-code-mods claude-code-mods Public

    Mods for Claude Code: function-hook plugins that run inside the session (English coach, toolbar) plus a status line.

    TypeScript