Code by language
Hover
- TypeScript43.9 %
- JavaScript42.9 %
- TeX5.4 %
- Python3.8 %
- CSS0.7 %
- PLpgSQL0.7 %
- C#0.7 %
- Shell0.6 %
- Rust0.5 %
- HTML0.4 %
- SCSS0.4 %
- MDX0.1 %
GitHub engineering activity
Commits over the last 90 days
HOVER A POINT FOR DETAILS15 Aug26 Sept7 Nov
Repositories by technology
Hover
- Node.js26 repos
- JavaScript25 repos
- TypeScript23 repos
- CSS21 repos
- React20 repos
- HTML16 repos
- Tailwind CSS14 repos
- Next.js10 repos
- Shell10 repos
- Python7 repos
- Rust2 repos
- Dockerfile2 repos
- Pandas1 repos
- PHP1 repos
- scikit-learn1 repos
Recent commits by scope
Hover
- Public personal work263 commits
- Private personal work29 commits
CURRENT DIRECTIVE
Enterprise Focus
Lerøy Seafood Group
Leading Architecture, Security & AI
Orchestrating adaptive, highly scalable, and cyber-secured systems across Python, Node.js, Rust, Java, SQL/PostgreSQL, Redis, and Agentic AI workflows. Driving Zero-Trust security, cloud native microservices, and long-term maintainability.
SYSTEM TENETS
Core Philosophies
Latest writing
Browse all postsField notes
AI That Cannot Sign the Audit: Design Rules Behind Revios
Why we are building Revios, audit software for Nordic audit firms, and the engineering rules that keep AI useful without letting it make audit decisions: human approval, a signed audit log, privacy-separated data, and tenant isolation in the database.
Read noteAppSec Lead Brief: stop treating metadata as proof
Account takeover, signature bypass and CI trust flaws show why state, metadata and cached artifacts need explicit validation.
Read noteAppSec Lead Brief: patch Wasmtime, then prove dependency visibility
Critical Wasmtime compiler flaws, a Tokio use-after-free, Rust TLS trust fixes, and new package-control options.
Read noteAppSec Lead Brief: treat archives and sandboxes as hostile boundaries
Rust archive extraction, Wasmtime sandbox escape, decompression denial of service and TLS-secret logging fixes.
Read noteAppSec Lead Brief: recheck JWT and agent execution boundaries
JWT verification failures, Docling local-file disclosure, vm2 sandbox breaks, and Dependency-Track 5.2 identity improvements.
Read noteAppSec Lead Brief: check your cache and sandbox boundaries
Next.js patches, a critical Wasmtime sandbox flaw, and practical checks for tenant isolation and developer tooling.
Read note