Edy Cu Tjong edycutjong

Block or report edycutjong

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Close all issues, pull requests, and discussions opened by this user Content in all repositories owned by your account will be closed.

Add an optional note

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.

Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse

Overview Repositories 138 Projects Packages Stars 1

Overview
Repositories
Projects
Packages
Stars

edycutjong/README.md

EDY CU

Jakarta, Indonesia · Remote (async-first) edy.cu@live.com · github.com/edycutjong · linkedin.com/in/edy-cu-tjong · edycu.dev

SUMMARY

Full-stack engineer specializing in agent infrastructure and MCP (Model Context Protocol) — building the safety layer that lets AI agents act on real systems: transaction lifecycles, human-in-the-loop approval, spending caps, approval revocation, prompt-injection defense. TypeScript · Python · Go · Rust. 14 years shipping software.

SELECTED PROJECTS

BagOS — MCP server for Solana · TypeScript, Solana Web3.js, MCP SDK

Shipped v2.0.0 to npm with provenance; listed in the official MCP registry. Full write-path lifecycle: simulate → approve → sign → send → confirm, with per-transaction and per-session spending caps, devnet by default.
Caught and publicly remediated a fake-success defect in v1: deprecated the release, published the postmortem, and added CI gates (tarball audit, fabricated-success grep) that make the bug class unshippable.
212 tests with enforced 100% coverage; CodeQL and secret scanning clean; CI/CD with signed publishing and auto-deprecation.

aegis — multi-agent support engine with human-in-the-loop · Python, FastAPI, LangGraph

Agent investigates issues via SQL and documentation, proposes actions, and hard-stops for human approval before any destructive operation.

revoker — approval hygiene for automated wallets · EVM

Threat rules auto-revoke dangerous token approvals on agent, keeper, and relayer signers before drain contracts execute; demonstrated on-chain.

antigen — prompt-injection defense for metadata graphs · DataHub

Sweeps catalog entities for jailbreak and exfiltration payloads, including invisible-Unicode variants; defuses them in-graph with tamper-evident hashes and maps blast radius through lineage.

armsmith — ARM/Graviton benchmark toolkit · Python

Signed releases on PyPI via trusted publishing; versioned documentation.

SKILLS

Languages: TypeScript, Python, Go, Rust, SQL Systems: MCP servers, Solana (Web3.js / Anchor), EVM, Node.js, FastAPI, Next.js, PostgreSQL, Supabase Practices: CI/CD (GitHub Actions), signed/provenance publishing (npm, PyPI), CodeQL, enforced coverage gates, Docker

Pinned Loading

BagOS BagOS Public

🚦 MCP server for Bags on Solana. Every AI-initiated spend is token-gated, SOL-capped, and requires a single-use confirmation before anything is signed.

TypeScript 1
aegis aegis Public

🏢 Autonomous Enterprise Action Engine — Multi-agent AI with Human-in-the-Loop approval, dynamic model routing, semantic caching, and real-time observability. FastAPI + LangGraph + Next.js + Supabase.

Python
revoker revoker Public

🛡️ Revokes dangerous token approvals through KeeperHub in 13.47s median — Agents Onchain finalist, top 10 of 190

TypeScript 1
antigen antigen Public

🧬 A prompt-injection immune system for the DataHub metadata graph — detects, quarantines, and cures OWASP LLM01 payloads hidden in catalog metadata.

Python
armsmith armsmith Public

🛠️ The agent that forges your repo for Arm — profiles any AI repo on aarch64, diagnoses why it's slow, and opens a fix PR where every fix must clear a reproduce gate or get dropped.

Python

edycutjong (Edy Cu Tjong) · GitHub