My day job is security engineering: investigations, telemetry, and incident response. Independently, I design and ship ML and AI projects end-to-end (feature engineering, calibration, validation, deployment) on real datasets with measured outcomes. The projects below reflect that work: real datasets, real metrics, real users.
Currently exploring: conformal prediction intervals, regime-aware recalibration, and LLM-as-judge evaluation harnesses for production model bundles.
| row chronological train/test split across 8 NBA targets | PRA holdout, regular season to playoff bundle | shipped open-source projects, 2 with live apps |
📚 KoNotesPython · Streamlit · LLMs · NLP Local-first AI-assisted knowledge analytics. Converts Kobo and Kindle annotations into structured, queryable insight with explainable, rule-based recommendations. |
Python · Jupyter · scikit-learn Reference workflow for security alert classification: TF-IDF and lexical features, calibrated thresholds, and a structured evaluation harness for repeatable model comparison. |
Python · CLI Context-aware macOS trust assessment. Fast evaluation of apps, launch items, and system controls with low false-positive design. |
| ML / Modeling | scikit-learn, classification, regression, anomaly detection, calibration, time-aware validation, residual diagnostics, threshold tuning |
| Data Science | Python, SQL, pandas, NumPy, statistical reasoning, EDA, reproducible Jupyter workflows |
| Applied AI | LLM summarization, structured extraction, text classification, AI-assisted triage, RAG, embeddings |
| Domain | security telemetry, alert triage, signal engineering on auth / network / endpoint, false-positive reduction |
| Delivery | Streamlit dashboards, Typer CLIs, joblib model artifacts, ReportLab reports, REST APIs |




