Security architecture, governance, and risk — applied to the systems that matter. These are the projects where that work lives.
A reference architecture for governed agentic systems — synthesizing NIST, OWASP, CSA, ISO, EU AI Act, OpenTelemetry, MITRE ATLAS, and academic research into a composable governance framework.
A multi-tenant SaaS platform for AI governance and compliance — helping organizations profile AI systems, surface relevant risks from the MIT AIRISK database, and map to established frameworks like NIST AI RMF.
To develop and prove the ideas in AGF, I built a complete agentic operating environment — 9 components, running live, evolving daily. Work management, knowledge synthesis, memory, observability, orchestration. The content on this site was produced by it. The AGF design patterns came out of it.
The system isn't a collection of independent tools. Each component fills a specific ring or layer function in the architecture — and each one was built because practice demanded it, not because it was planned in advance.
How the system works →Developer tools produced as outputs of the system — things you can use today.
A text-to-diagram generation tool for architects and developers — turning structured descriptions into professional architectural diagrams without touching a drag-and-drop UI.
