# Emiliano G.O.: Portfolio

> Systems and infrastructure engineer building reliable data, database, and security tooling in Rust, Python, Go, and SQL. Based in Montevideo, Uruguay.

## https://emiliano-go.com/

Personal portfolio and project showcase: selected work, engineering principles, studies, open-source contributions, and references.

### Key sections

- **Projects**: TrustSight (evidence-driven AUR security analysis), rypipe (Rust ingestion framework), Kestrel (Arch-based Linux distribution), DBWarden (declarative schema compiler for SQLAlchemy), xmlstreamer-ng (fault-isolating XML feed streaming), eclipse (byte-level distillation research), and more.
- **Engineering principles**: explicit state, determinism, fail closed, reproducibility, separation of concerns, show evidence.
- **Open Source**: Director of LibreCourseUY (FOSS organization in Uruguay); co-maintainer of FastAPI-boilerplate.
- **Studies**: Bachelor's in Statistics (UdelaR / FCEA) and Computer Engineering (UdelaR / FING); University of Tokyo GCI World 2026 in Data Science and Machine Learning.
- **References**: Igor Benav (Benav Labs), Carlos A. Planchon (Busco Jobs), Maximiliano Schmidt (Casas Y Mas).

## https://emiliano-go.com/projects

Full project index: 11 featured projects plus smaller packages, tools, and experiments, with links to GitHub, docs, PyPI, npm, and crates.io. All TrustSight-related repositories are listed under the TrustSight case study.

### Featured

- **DBWarden**: declarative schema compiler that derives deterministic migrations from SQLAlchemy models. 63K source LOC, 166 test files, 5 DB backends, 7 plugins, impact analysis, offline CI generation, snapshots and a release-certification harness. Python/PyPI.
- **TrustSight**: evidence-driven security analysis for AUR packages; never executes code, fail-closed. 3,967+ tests, 185 scoring rules, cluster detection across ~186K source URLs, signed IOC baselines.
- **rypipe**: format-agnostic Rust ingestion framework with Python bindings. 476 tests, 15.9K docs lines, 7.63 GB/s bounded / 4.23 GB/s full-RAM (crxml), 2.12 GB/s parallel (xmlstreamer-ng). PyPI + crates.io.
- **Kestrel**: standalone Arch-based Linux distribution with Hyprland, Quickshell and a per-task scheduling bridge from kernel to sched_ext. Live ISO installs by copying the root filesystem.
- **postal**: native WhatsApp desktop client speaking the multi-device protocol directly, no webview. ~0.3% idle CPU, bounded RAM, opt-in history sync, durable SQLite archive. Rust/Tauri 2/Svelte 5.
- **neurafly**: terminal audio visualizer driven by the real FlyWire connectome (138,333 neurons, 2,052,622 synapses, release v783), rendered in braille. Rust, crates.io + AUR.
- **easeo**: deterministic SEO metadata generator; one Rust core with Python and Node.js bindings, byte-for-byte conformance. PyPI + npm + crates.io.
- **ClickVault**: HashiCorp Vault database secrets engine plugin for ClickHouse. Dynamic credentials, password rotation, cluster-aware DDL. 85.4% coverage.
- **dsig**: GPG message signing for Discord (Vencord/Vesktop). Invisible and compact footer encodings, 142 tests. TypeScript.
- **xmlstreamer-ng**: fault-isolating XML feed streamer built on rypipe and adapted from carlosplanchon/xmlstreamer. Parallel XmlSource: 15.8M rows/s and 2.12 GB/s; bounded parallel 10.2M rows/s and 1.36 GB/s. Bounded memory, conservative recovery. PyPI.
- **eclipse**: byte-level distillation rig for Ornith 1.5 9B. Exact End-Of-Token targets, 48M byte student, reproducible feasibility study.

### Other projects

- **crxml**: Crystal Reports XML parser built on the rypipe engine. 184 Python + 63 Rust tests, bounded memory. PyPI.
- **schemap**: automatic Pydantic v2 schemas from SQLAlchemy 2.0 ORM models. 149 tests. PyPI.
- **detrack**: strip tracking parameters from URLs. 345 patterns, zero dependencies, 126 tests. PyPI.
- **dbwarden-harness**: release-certification harness across 5 databases. 189 tests, 12 suites, MCP server.
- **vigil**: self-hosted GitHub activity tracker (FastAPI + ClickHouse + Prefect + Docker).
- **mapcreator**: browser-based multi-floor building map editor with A* pathfinding. React 19 + Canvas.
- **acrresolv**: hybrid acronym resolver (lookup + rules + T5-small), 95.5% accuracy on unseen data. PyPI.
- **interferon**: Docker sidecar watcher + Python SDK turning container lifecycle events into typed signals.
- **tagurl**: natural-language query to ranked tags and an SEO URL path (design spec).
- **lambda-compiler**: compile Python lambdas into declarative filter specs via bytecode analysis.
- **carpricepredictor**: linear-regression car price predictor with FastAPI service, containerized.
- **autoimmune-disorder-prediction**: ML exploration of the All Autoimmune Disorder 10k dataset.
- **portable-oss**: config-driven Astro dashboard for open source projects, driven by one `oss.config.toml`.
- **totem**: persistent memory layer for engineering agents. MCP server + CLI.
- **RBG**: single-LLM control plane for coding agents with deterministic retrieval and verification.
- **gpg-mcp**: security-focused MCP server for GnuPG that never exposes private key material to the agent.
- **hestia**: self-hostable agentic project cockpit with persistent Totem memory.
- **opencode-bgj**: MCP server for supervised background shell jobs.
- **panopticon**: read-only repository, history, release, package and CI index exposed as REST, MCP and a dashboard.
- **laya-coding-decisions**: training data and tooling for a coding-agent judge used by Hestia.

## Tech stack

Astro, Tailwind CSS, TypeScript. Deployed on Cloudflare Pages.