I build the whole thing — the Go or TypeScript service, the UI in front of it, and the box it runs on. Lately most of it has a model running locally rather than behind someone else's API, and something checking the output before anyone is asked to trust it.

nebula-guard — SSH honeypot that streams Cowrie logs through a Go agent into a local Gemma model, writes the forensics to Postgres, and pushes a Thai-language read of the intrusion to Telegram. Next.js command center on top, GPU inference on my own machine.
_{Go · Next.js · PostgreSQL · Ollama · Docker}

content-blueprint — Windows desktop app for content teams. Calls the Claude Code or Codex CLI you are already signed into, re-validates every structured result in Go, and ships releases with published SHA-256 sums. Nothing posts or publishes on your behalf.
_{Go · Wails · MCP · GitHub Actions}

bun-rag-starter — Graph RAG over your own documents: Redis HNSW vectors and a Neo4j knowledge graph queried together, local embeddings, answers cached and fenced so the model stays inside the source material.
_{Bun · Elysia · Neo4j · Redis · Svelte}

THESIS_FASTAPI_YOLO — Thesis. An IoT parts store with role-gated staff workflows, plus a vision service that checks each package against its order before it ships and notifies the floor when the two disagree.
_{Python · FastAPI · YOLO}

btc-rainbow-worker — Cron'd Worker that computes the Bitcoin power-law band from the formula instead of scraping someone's chart, with three price sources behind a fallback chain.
_{TypeScript · Cloudflare Workers · Bun}

zig-typist — Terminal typing trainer for Thai and English layouts. Sessions append to JSON Lines, so the history stays yours and stays greppable.
_Zig

The work I spend the longest on mostly lives in private repos. Short version:

icefactory-app — Multi-tenant plant management for an ice factory, commissioned and delivered in stages. Every query scopes to the tenant and branch on the session and never to anything the request sends, and every write lands in an append-only audit log with personal fields redacted. The tests fail if any of those rules is broken.
_{Go · Next.js · PostgreSQL}

guess-my-song — Guess-the-song game where every clip comes from the player's own Spotify library rather than a recommendation engine. Hono on Cloudflare Workers, one Durable Object per session, both apps behind one hostname so the cookie stays first-party and there is no CORS anywhere. A policy test fails the build if any code reaches for the endpoints the design rules out.
_{TypeScript · Hono · Durable Objects · Astro}

pea-calculator-backup — Electricity-meter tracker. The interesting half is the backup path: the database is encrypted locally before anything leaves the machine, the key never enters Git or the image, and the scheduled job runs the backups it missed rather than skipping them.
_{Node.js · Docker}

_{ITI, KMUTNB Prachinburi · off-hours: power-law charts, Kirby on the GBA, and a dog named Panda.}