I build evidence-first developer tools and practical AI systems. My current open-source focus is Signal Scout: a Git-native way to turn public-page changes into reviewable evidence.

• I prefer a working vertical slice over a disconnected demo.
• I keep network and repository side effects explicit.
• I ship small releases with tests, reproducible artifacts, and honest limits.

Evidence before claims. Review before side effects.

Signal Scout captures a baseline, detects an exact change, and preserves the result as a deterministic signal-scout/evidence@1 packet. The same scanner runs locally or as a first-party Node 24 GitHub Action:

- uses: derprofi1313/signal-scout@v0.2.0
  with:
    config: signal-scout.config.json

• Exact before/after evidence with hashes and bounded metadata
• Caller-owned cache, artifacts, notifications, commits, and pull requests
• Reproducible Action bundle, CI, CodeQL, and desktop/mobile verification

Action guide · v0.2.0 release · Evidence schema

Cash-Claw is a public MIT-licensed autonomous-agent project built on OpenClaw. At inspection time on 2026-07-31, the repository showed 5 GitHub stars. I treat it as proof of architecture and implementation surface, not a revenue claim.

• Local-first gateway with REST, WebSocket, and dashboard surfaces
• Operator setup for LLM providers, chat channels, Stripe, limits, and sandboxing
• Security docs covering loopback binding, auth tokens, redaction, and Docker isolation

Repository · Security policy · MIT license

• RepoPilot-OSS — a TypeScript repository-analysis CLI with provider credential redaction, a real ESLint gate, Node 22/24 CI, and 253 passing tests.
• Hermes Trading Sandbox — a Python paper-trading service with fail-closed LAN admin controls, pinned CI, and an honestly reported suite of 97 passing and 16 skipped tests.
• OBLITERATUS GLM-5.2 — a clearly attributed maintained derivative of elder-plinius/OBLITERATUS, with corrected CLI documentation and a CPU-safe CI gate.
• macOS Malware Incident Evidence — an inert incident-response evidence set with a cryptographic manifest, non-executing integrity CI, publication limits, and safe-handling guidance.
• Roblox Luau Service Examples — server-authoritative gameplay modules with finite-value and target validation, exact-once async signal semantics, compile checks, and regression tests.
• Desktop AI Agent 2 — a host-integrated React source snapshot with deterministic model-action validation, explicit side-effect confirmations, and a restrictive embedded browser policy.

• Review project direction through Signal Scout issues.
• Discuss Cash-Claw changes through Cash-Claw issues.
• Reach me through my GitHub profile.

_{Generated weekly from the public GitHub GraphQL API by a tested, repository-owned renderer — no profile-view counter and no third-party stats card.}

Current public snapshot: 9 owned non-fork repositories · 6 stars · 69 contributions in the rolling 12 months. Generated 2026-07-31 from public GitHub data.

_{The desktop view shows individual days; the mobile view groups the same public activity by month for legibility. GitHub's native activity timeline remains available below this README.}

• Source it: preserve the input and distinguish verified facts from open work.
• Bound it: make permissions, network calls, and write operations visible.
• Prove it: test the real path and publish artifacts others can inspect.

capture → hash → diff → review