| FazBrowse GitHub Viewer | Trending | | Home |
| Tools: [Original HTTPS Page] |
Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.
You must be logged in to block users.
Contact GitHub support about this user’s behavior. Learn more about reporting abuse.
Report abuseI build small, verifiable tools for the parts of the AI stack that fail quietly — agent sandboxes, MCP gateways, model-fit predictors, and post-quantum crypto. Each of the flagship repos below ships with a real test suite, CI, and — where it makes a claim about speed or correctness — a committed benchmark you can re-run yourself.
That's the current chapter. The arc behind it runs from C data structures in 2023, through computer-vision research and a stretch of hackathons and Web3 builds, into GenAI platforms, and now into infrastructure and security. The whole path is below, not just the recent sprint.
The board above is regenerated daily from the live GitHub API — CI dots, uptime bars, versions and "last commit" ages are real. When a flagship's build is red, it says so.
| Repo | Stack | Release | What it does |
|---|---|---|---|
| The-Ideal-Harness | TypeScript | — | The control-plane OS around a stateless model. A deny-wins, fail-closed policy floor on PreToolUse/PostToolUse hooks — enforcement below the model, not a paragraph in a prompt — plus secret redaction, injection fencing, skill vetting, a hash-chained audit journal, code-graph memory and cache-safe tool-result compression. Six modules, 329 tests, zero runtime dependencies. Contributors welcome — see the good first issue label. |
| agent-rules-audit | JavaScript | — | Static linter for AI-agent rule files (Cursor / Claude / Copilot) — flags over-broad tool grants and injection-prone instructions. |
| mcp-sentinel | Rust | — | Offline risk scanner for MCP client configs — grades each server A–F on inline secrets, @latest pins, shell indirection, typosquats. |
| toolcage | Rust | v0.1.0 | Per-tool-call WASM sandbox for MCP servers — every tools/call runs in a fresh wasmtime instance with only the filesystem that tool's policy grants. |
| agent-flightbox | Go | v0.1.0 | Flight recorder for agent processes — captures the syscall / exec / network surface of a run to tamper-evident JSONL, with a session diff. |
| Repo | Stack | Release | What it does |
|---|---|---|---|
| mcp-gateway-lite | Go | v0.5.0 | Single-binary reverse proxy for MCP — allowlist filtering, rate limiting, tamper-evident audit log, tools_lock against rug-pulls, and now inline promptproof scanning of tool results. |
| modelgate | Go | v0.2.0 | Multi-provider LLM gateway — routing, automatic fallback, token/cost accounting, metadata-only audit trail. stdlib-only. |
| localmodel-fit | Go | v0.1.0 | Memory-bandwidth-aware local-LLM advisor — predicted decode tok/s, the best quant that fits, speculative-decoding hints. Published methodology, validated against real ollama runs. |
| trace2eval | JavaScript | — | Turns raw agent traces into scrubbed, deduplicated eval datasets — PII scrub before dedupe, deterministic, offline. |
| promptproof | Rust | v0.2.0 | Data-plane prompt-injection/exfiltration scanner for untrusted content flowing back into a model — the layer none of the other agent-security tools cover. Zero deps, #![forbid(unsafe_code)]. Embedded as middleware in both mcp-gateway-lite and modelgate above. |
| Repo | Stack | What it does |
|---|---|---|
| voraxx-mcp-server | Python | Stdlib-only MCP server with three security tools — CVE lookup via OSV.dev, host exposure via Shodan InternetDB, and orchestration of a locally installed Nuclei scanner. No exploit code bundled; 19 tests. |
| mcp-registry-finder | JavaScript | Zero-dependency MCP server for searching the official registry — find servers by keyword, inspect details, get install snippets. node:test suite with recorded fixtures. |
| acts-as-mcp | Ruby | Expose a Rails app as a policy-aware, read-only MCP server — explicit attribute exposure, per-call authorization, audit events. Zero runtime dependencies. |
| Repo | Stack | Release | What it does |
|---|---|---|---|
| ml-kem-rb | Ruby | v0.2.0 | Reference ML-KEM (FIPS 203) in pure Ruby, plus a real hybrid X25519 + ML-KEM-768 KEM implementing the TLS 1.3 draft wire format. |
| pqc-scan 🔒 private | Rust | — | Crypto inventory → CycloneDX CBOM → A–F post-quantum readiness grade, with live TLS 1.3 handshake checks. Launches Sept 2026. |
Small, single-purpose CLIs. Each one exists because a specific check was missing, not because a category needed filling.
| Repo | Stack | What it does |
|---|---|---|
| biasscope | Python | ML fairness report cards — demographic parity, equal opportunity, disparate impact, computed directly in pandas/numpy, graded A–F and explained in plain English. |
| a11y-agent | Python | Context-aware accessibility scanner — catches the semantic a11y smells (generic alt text, vague link text, colour-only meaning, heading skips) that axe-core and eslint-plugin-jsx-a11y miss. |
| shiftsense | Python | Incident postmortem auto-drafting — parses a raw timeline into phases, extracts action items, assembles a blameless-postmortem scaffold. |
| moodmesh | Python | Engineering-team burnout early warning from git and PR metadata — trend-based, ethics-first, manager-only by design. |
| FrameSage | Python | Tool-calling EDA agent for pandas — an offline heuristic planner drives 9 dataframe tools to profile CSVs into Markdown reports. 34 tests, LLM planner optional. |
| gemfile-lock-audit | Ruby | Offline A–F supply-chain risk scanner for Gemfile.lock — zero dependencies, zero network calls. |
| VeriNet | Python | SHA-256 checksum manifests for a directory tree, verified later to detect modified, missing or new files. |
| Repo | Stack | Release | What it does |
|---|---|---|---|
| idempotent-rack | Ruby | v0.3.0 | Idempotency-Key middleware for Rack/Rails — dedupes retried POST/PUT against a pluggable store (in-memory, file, Redis, or ActiveRecord). |
| prism-infranest | Python | — | AI backend-generation platform — natural-language prompt → clarifying questions → YAML DSL → production-ready Django, Go Fiber or Rails project with Docker, tests and docs. |
| compliance-manager | Go | — | Desktop PII/compliance scanner (Go + Wails) — extracts document text, matches rule definitions, scores risk, browses results as a file hierarchy. Optional Python ML validation and OCR. |
| DAG-Pipeline | JavaScript | — | Visual node-based pipeline builder (React Flow) with a FastAPI backend that validates the graph as cycle-free using Kahn's algorithm. |
The flagships above are the current chapter. This is how it got there. Each row is a real repo, and the honest caveats each one carries in its own README are carried through here too.
| Repo | What it is |
|---|---|
| FDS | Fundamentals of Data Structures in C — stack-via-two-queues, valid parentheses, Dutch National Flag partitioning. The earliest thing on this account. |
| Repo | What it is |
|---|---|
| Real-and-fake-face-distinction | Keras CNN classifying real vs AI-generated faces — the research behind the SCOPUS-indexed IEEE deepfake-detection paper (93.5% accuracy). |
| pbl | Deep-learning image encryption — DCGAN key generator + attention/residual CNN, with NPCR/UACI security analysis. |
| hackathon | A CLI that scaffolds a hackathon project skeleton in seconds. First tool I built because the friction annoyed me — the same instinct behind everything in the tooling section above. |
| shadcn-dashboard | Next.js 15 + shadcn/ui admin template. Mock data, no backend — a UI study, labelled as one. |
Computer vision, accessibility, Web3, and a lot of shipping.
| Repo | What it is |
|---|---|
| HandTalk | Real-time ASL sign recognition in video calls — React client, Node/WebRTC signalling, Flask ML backend with MediaPipe + a fine-tuned MobileNet. Team project. |
| NeuroOCR | Offline handwriting OCR — custom-trained TensorFlow.js CNN, fully client-side inference. No server, no uploads. |
| DreamCanvas | Webcam drawing canvas controlled by hand gestures — point to draw, four fingers to erase. Flask + OpenCV + MediaPipe. |
| Task-Tokenizer | Web3 gig platform on Ethereum — Identity, Job, Reputation and Escrow contracts via Hardhat, Next.js frontend. Wallet connect works; homepage listings are demo data. |
| GigX | The decentralized gig marketplace variant — 3rd place, BITS Pilani Web3.0 '25. |
| GlobalGive | Blockchain crowdfunding — Solidity contracts plus frontend, transparent low-fee fundraising. |
| ChainFusion | AI agents bridging Web2 apps to Web3 — LangChain/LangGraph routes with Hardhat tooling. |
| Quorix | Local-first agentic-UI reference app — intent routing over 7 pure-TypeScript tools, word-by-word streaming, no backend. |
| NomadAI | Telegram voice-bot travel companion — Whisper transcribes, Groq Llama-3 detects language and vibe, Maps finds spots, gTTS answers in voice. |
| Mentoro | Emotion-adaptive gamified learning buddy — Remix + Go + Postgres monorepo. Prototype; most endpoints are mock data, stated plainly in its README. |
| medical-insurance-cost-prediction | R pipeline — EDA, linear/Ridge/Lasso and random forest, plus a Shiny app. |
| GenAI-Platform | GenAI workspace: multi-PDF RAG chat, GraphRAG entity graphs, ATS resume feedback, text-to-SQL. This is the implementation behind the Scientific Reports paper below. Later iteration: genai-platform-v2 with a Kubernetes path. |
Everything in the flagship tables above, plus:
| Repo | What it is |
|---|---|
| firesat-ai | Hybrid CNN-LSTM + attention wildfire risk forecasting for Alaska — Sentinel-1/2, Landsat, MODIS, ERA5. The geospatial thread that connects to my current environmental-intelligence work. |
| fire_detection | Fire detection from satellite/aerial imagery — Keras CNN with Grad-CAM explainability, exposed via Streamlit, FastAPI and CLI. |
| Image-Captioning | CNN encoder + LSTM decoder on MS COCO (PyTorch) — beam search, Gradio demo, Docker, CI. |
| opencv-object-detection-suite | MobileNet-SSD webcam script, Flask + YOLOv3 web app, and a YOLOv3 CLI. |
| ScribeLens | Browser-based handwritten OCR with Tesseract.js — entirely client-side. |
| AnyBrush | Multi-modal accessible AI-art studio — eye tracking, voice commands, single-switch control, freehand drawing. |
| Wisely | Privacy-first desktop meeting assistant (Tauri: Rust + React) — local Whisper STT, screen OCR, LLM chat. GPL-3.0 fork with added interview-mode features; upstream credited. |
| liquidation-aggregator | Indian government/bank auction aggregator — scrapes liquidation notices, values lots, grades flip economics. |
| Automation-AI | Node-based workflow automation — FastAPI backend, natural-language-to-workflow generation, cron and webhook triggers. |
| Project | What it is |
|---|---|
| Sona-Sapphire | Cinematic agency site — Next.js 16, React 19, Tailwind 4, StringTune choreography. Local-SEO tuned with geo meta, JSON-LD LocalBusiness, sitemap; Resend inquiry form. |
| adv-samit-siddhanta archived | Single-page site for a Supreme Court advocate — zero-dependency vanilla HTML/CSS/JS, scroll reveals, parallax, BCI-compliant disclaimer. Client deliverable. |
| 3D-Portfolio-Website | My own portfolio — Next.js 14, React Three Fiber / Spline, Framer Motion. Live at bharat3645.vercel.app. |
A unified multimodal GenAI platform integrating GraphRAG multi-agent systems and custom language models for intelligent document processing and knowledge synthesis — Scientific Reports (Nature) 16:16508, April 2026. doi:10.1038/s41598-026-47145-x
Plus 3 SCOPUS-indexed IEEE papers (ICISCT '24 @ Kookmin University, ICPCT '25 @ Amity) and 2 book chapters in progress (federated learning; renewable-energy AI). The deepfake detector above fed one of the IEEE papers; GenAI-Platform is the implementation behind the Scientific Reports work.
# mcp-gateway-lite — reverse-proxy overhead (Apple M4, go1.26.5)
go test -run '^$' -bench . -benchtime=2s ./gateway/... # 29.3µs direct vs 69.9µs through gateway
# toolcage — per-call WASM sandbox overhead (ubuntu-latest CI, 200 echo calls)
python3 ci/bench.py WORK ./target/release/toolcage x.wasm 200 # 0.415ms median vs 0.089ms unsandboxed floor
# localmodel-fit — prefill 1/params scaling (Apple M4, real ollama)
go run ./bench -model qwen2.5:0.5b -hw m4 -params 494032768 # measured 0.5b/1.5b ratio 3.06–3.18 vs exact 3.125
# ml-kem-rb — hybrid X25519+ML-KEM-768, TLS draft wire format (FIPS 203)
ruby -rml_kem/hybrid -e 'p MLKem::Hybrid.client_init[0].bytesize' # => 1216 (server share 1120, shared secret 64 B)Two of my repos (ml-kem-rb, pqc-scan) exist because the crypto deadlines below are real and close. The clock counts down live against these US federal dates (NIST / NSA primary sources).
Go, Rust, TypeScript, Python and Ruby across the flagships — plus C, R, Java and Solidity further back in the arc. The language follows the problem: Rust where a sandbox boundary has to hold, Go for single-binary tooling, Ruby where the ecosystem gap was (a pure-Ruby ML-KEM did not exist), Python for anything touching data.
These aren't scattered side-projects. The Ideal Harness is the control plane the whole path runs through; modelgate gates the LLM calls; mcp-gateway-lite filters the tool calls; toolcage sandboxes each one; mcp-sentinel, agent-rules-audit, agent-flightbox and trace2eval watch the run — and ml-kem-rb / pqc-scan are the post-quantum floor the whole thing has to stand on.
Node size is real commit count. The MCP hub links the repos that actually speak the protocol; the bright edge is the CI cross-check where mcp-gateway-lite verifies mcp-sentinel's own lockfile output — a real test, not a diagram flourish.
── EOF ──────────────────────────────────────────────────────────── if a tool makes a claim, it ships with the test that proves it. ────────────────────────────────────────────────────────────────────
This whole page is a program. Twelve custom SVG instruments, built from live GitHub data by assets/generate.py, committed to this repo, and refreshed every day by a GitHub Action — plus the classic animated contribution snake, regenerated daily from real commit data by its own long-running GitHub Action and committed to this repo's output branch. No flaky Vercel-hosted widget services. No mocked numbers. Every figure is real and reproducible — down to the red build I haven't hidden.
◆ self-hosted ◆ live-sourced ◆ dark/light aware ◆ animated ◆ zero third-party image hosts
Agent harness / control-plane around a stateless LLM: deterministic policy floor on PreToolUse/PostToolUse hooks, secret redaction, injection fencing, tool-result compression, code-graph memory, or…
Offline scanner for AI agent instruction files (AGENTS.md, CLAUDE.md, .cursorrules, skills, MCP configs) — flags prompt-injection payloads, hidden Unicode, encoded blobs, exfiltration and permissio…
JavaScript 2
Reverse proxy for MCP servers — JSONL audit trail, per-tool allow/deny enforced on calls and listings, inline tool-schema drift detection (the rug-pull check, mcp-sentinel lockfile interop), rate l…
Go
Pure-Ruby ML-KEM (FIPS 203) — post-quantum KEM, KAT-verified, zero dependencies incl. the Keccak/SHAKE core. Reference implementation, honestly framed.
Ruby
Minimal LLM request gateway: OpenAI-compatible chat-completions proxy with automatic provider fallback, real cost accounting from token usage, and a metadata-only audit trail. Single Go binary, zer…
Go
Per-tool-call WASM sandbox for MCP servers - every tools/call runs in a fresh wasmtime instance with only the filesystem that tool's policy grants
Rust
| Back | FazBrowse Home | New Git URL |