HOFFMAN

Raft consensus from scratch: linearizable replicated KV, snapshots, chaos-tested 3-node cluster

Kubernetes operator: Tenant CRD → namespaces, quotas, NetworkPolicies, RBAC, drift correction

HNSW vector index from scratch: filtered search, CLI + axum HTTP server, recall gates

Identity-aware proxy: OIDC/JWT, deny-by-default policy, mTLS 1.3 upstreams, audit log

Token bucket + sliding window on atomic Redis Lua, HTTP middleware, Prometheus

NATS JetStream, transactional outbox, sagas with compensation, DLQ, OpenTelemetry

eBPF per-flow network accounting, top-talkers CLI, Prometheus exporter, kernel tests in CI

CPU-only RAG: hybrid BM25 + dense retrieval, cited answers, eval gated in CI

Private ChatGPT-style stack on a CPU VPS: Ollama, hardened FastAPI gateway, auto-TLS

Volumetric tactical HUD on Three.js WebGPU + TSL with WebGL2 fallback

Realtime collaborative editor + whiteboard on a from-scratch CRDT, offline merge

Playwright E2E, a11y, visual regression, Lighthouse CI, k6 load, OWASP ZAP

Reusable Terraform modules with secure defaults, tflint and native terraform test

Hardened Helm chart promoted dev → staging → prod by Argo CD, proven on kind in CI