Founder, Complex Developers. AI and Security Engineer.
Founder of Complex Developers. I build security-focused AI systems from the model up: GhostLM, an 81M-parameter language model trained from scratch in PyTorch, and ghostloop, a fail-closed agent runtime published on PyPI. Across 50+ repositories I ship production security tooling, full-stack platforms, and a React Native app live on the Google Play Store. Merged a contribution upstream into AutoGPT, with open contributions to PyTorch Ignite and the OWASP Cheat Sheet Series. Computer Science at Moi University, Nairobi.
- 01Built and trained an 81M parameter transformer from scratch, every layer hand-written with no machine learning framework abstractions.
- 02Published ghostloop on PyPI (v1.0.3) with 359 passing tests and automated CI/CD.
- 03Shipped a React Native app to the Google Play Store.
- 04Upstream contributor to PyTorch Ignite, AutoGPT, and the OWASP Cheat Sheet Series.
- 05Founder of Complex Developers, took the company platform from an empty repository to production.
Founder & Lead Developer
Complex Developers, Nairobi
- ▸Run the studio end to end, covering client work, architecture, engineering, and deployment.
- ▸Built the company platform on Next.js and Prisma with a Postgres-backed admin CRM, where flagged projects sync to the public site automatically through Server Components and incremental static regeneration.
- ▸Standardized the stack across projects: Vercel and Supabase for deploys, JWT-authenticated API routes, and a shared design token system that keeps the brand consistent from landing page to dashboard.
Independent Developer & Security Researcher
Self-Employed, Nairobi
- ▸Shipped 50+ open source projects across security, AI and machine learning, and full stack.
- ▸Built GhostLM, an 81M parameter decoder-only transformer, entirely from scratch in PyTorch with RoPE, SwiGLU, and RMSNorm, without using the transformers library. Trained it on a 422M token corpus I collected across 27 cybersecurity, code, and reasoning sources.
- ▸Shipped GhostBench alongside it, an evaluation suite using proper statistics like Wilson confidence intervals and McNemar paired tests, plus GhostAgent, a tool-using runtime, and an MCP server that works with Claude Desktop and Cursor.
- ▸Merged a contribution upstream into AutoGPT (#12805), fixing agent-name preservation in the visual builder's AgentExecutor node titles after reload.
- ▸Proposed a numerical-stability fix to PyTorch Ignite (#3741, open PR): replacing an unstable variance formula in PearsonCorrelation with Welford's algorithm, which returned wrong results on large-mean float32 data.
- ▸Built ghostloop, an agent runtime and fail-closed safety pipeline for robotics, published on PyPI (v1.0.3) with a live demo and full CI/CD, 359 passing tests, and extended into a web dashboard and a Tauri desktop app.
- ▸Shipped EZCare Native to the Google Play Store, a React Native and Expo wellness app with a Supabase backend, a tRPC data layer, and an AI coach built on the Anthropic SDK.
- ▸Shipped linkdrop, a Tauri and Rust desktop app that bridges an iPhone to Linux for photos, files, and screen mirroring, with CI-built .deb and .AppImage releases.
- ▸Built a cybersecurity tooling set including an MCP security server with sandboxing, a Kubernetes CIS auditor, a memory forensics tool, a SIGMA-rule SIEM, and a pre-commit secret scanner.
- ▸Wrote the AI Model Supply Chain Security guide, proposed to the OWASP Cheat Sheet Series and revised through maintainer review.
Bachelor of Science in Computer Science
Moi University
Coursework in data structures and algorithms, operating systems, computer networks, and discrete mathematics. Self-directed focus on offensive security, transformer architectures, and systems programming.
Python, TypeScript, JavaScript, Rust, C, Swift, SQL, Bash
Next.js, React, Tailwind CSS, Vite, Framer Motion, Three.js, TanStack Query, Zustand
React Native, Expo, EAS Build, Android (shipped to Google Play), iOS
Node.js, Bun, FastAPI, Express, tRPC, Prisma, PostgreSQL, Supabase, Stripe, JWT auth
PyTorch, from-scratch transformers, BPE tokenization, HuggingFace, vector search with LanceDB, MCP servers, Anthropic SDK
MuJoCo, PyBullet, ROS 2, Gymnasium, Safe RL, sim-to-real, VLA models
Penetration testing, CTF, Nmap, Wireshark, Burp Suite, Metasploit, Scapy
YARA, Volatility, Sigma rules, STIX and MISP, Kubernetes CIS auditing, secret scanning
Tauri (Rust), Electron
Docker, Kubernetes, Terraform, GitHub Actions, Vercel, Cloudflare, Turborepo
Vitest, pytest, ESLint, Sentry, PostHog
- ▸Independent cybersecurity research in CVE reasoning, exploit-chain analysis, and vulnerability triage.
- ▸Active CTF competitor in penetration testing, reverse engineering, and steganography.
- ▸From-scratch language model engineering, covering transformer internals, attention, tokenization, and training.
- ▸Open source contributor to PyTorch Ignite, AutoGPT, and OWASP CheatSheetSeries.
- ▸Self-directed study in deep learning, systems programming, and network security.