[PROJECT]codeciech.com — Obsidian-to-Web Pipeline|[BLOG]Securing AI Models on Edge Devices|[PROJECT]Tanda — edge inference on Raspberry Pi 5|[BLOG]Certificate-Based Authentication for MQTT|[PROJECT]Thistle — PKI for MQTT|[BLOG]Exploring the Thistle Device Hub API with Swagger UI|[PROJECT]AI Model Provenance|[PROJECT]Cantus Vault|
codeciech logocodeciech.com
// projects

Things I've built

Each case study covers the problem, the approach, the trade-offs, and what actually shipped. No vague impact metrics.

case_01This site · shipping · codeciech.com
This site · shipping · codeciech.com

codeciech.com — Obsidian-to-Web Pipeline

A Pi under my desk, an AI agent named Hermes, and Lovable on top

Raspberry Pi 5GoHermes (AI agent)Obsidian vaultSupabase PostgresTanStack StartLovable
read case study →
case_02Thistle Technologies · production
Thistle Technologies · production

Certificate-Based Auth for MQTT

PKI-issued device identity for secure IoT communication

PKIX.509mTLSMQTTRoot + Subordinate CAs
read case study →
case_03Side project · shipping · salsa-collective.com
Side project · shipping · salsa-collective.com

tanda — Salsa Collective Lead Intake

AI-powered Gmail inbox that never loses a lead

Go 1.23Supabase PostgresLM Studio (local LLM)Gmail OAuth2Calendar-aware AILovable admin UI
read case study →
case_04Thistle Technologies · Thistle OTA
Thistle Technologies · Thistle OTA

AI Model Provenance for Edge Devices

Sign at release, verify at runtime — cryptographic provenance for on-device AI

Google Cloud KMSSHA-256OTA update pipelineOptional per-file encryption
read case study →
case_05Side project · shipping
Side project · shipping

Cantus Vault

Sheet music management for a parish choir, built on Google Workspace

Google Apps ScriptTypeScriptGoogle DriveGoogle Forms
read case study →
case_06Side project · shipping · salsa-collective.com
Side project · shipping · salsa-collective.com

venmo-ledger — Email-to-Ledger for Venmo

Turn Venmo email receipts into a real transactions database — no API, no Plaid

Go 1.23Gmail OAuth2Postgres / SupabaseDockerLovable admin UI
read case study →
case_07Home infra · shipping · codeciech.com
Home infra · shipping · codeciech.com

Home-lab behind a Cloudflare Tunnel

Outbound-only exposure for services on a Pi behind CGNAT — with Access-gated private notes

cloudflaredCloudflare Accesssystemd (user)Raspberry PiCGNAT-proof
read case study →