code-flow-studio
Connects a polyglot editor, isolated compiler workers, bounded fuzzing, revision evidence, and private local accounts.
Project index · 46 repositories
Start with broad end-to-end systems, then explore specialized engineering and defensive labs. Editorial order reflects integration depth, evidence, and role coverage—not stars or production claims. Six featured projects and five reference cases explain the design decisions in more depth.
Narrow the catalog
Connects a polyglot editor, isolated compiler workers, bounded fuzzing, revision evidence, and private local accounts.
Combines HTML-first document ingestion, dimension-safe units, provenance, role previews, and encrypted local workspaces.
Trains a real caption-conditioned image model with held-out evaluation, rights-aware datasets, and encrypted local accounts.
Combines a sparse-set ECS, deterministic replays, A*, collision broadphase, fuzzing, and SDL3.
Verifies signed build identity, SBOMs, tamper resistance, staged promotion, and independently authenticated rollback.
Links job-relevant skills to source evidence, preserves education uncertainty, and offers factual resume coaching without automated hiring.
Builds a safe DAG control plane with leases, observability, Kubernetes, and Terraform.
Makes retries, rate limits, audit trails, and dead-letter recovery inspectable end to end.
Demonstrates promotion gates, drift detection, canary routing, monitoring, and rollback.
Turns synthetic player events into tested funnels, cohorts, timelines, and anomaly reviews.
Pairs a deterministic C++ process twin with typed edge APIs, MQTT telemetry, faults, and an HMI.
Packages native-first React components with Storybook, accessibility evidence, and bundle budgets.
Compares reproducible ONNX inference across Python, C++, and Rust with quantization analysis.
Models multi-tenant support workflows with an outbox, signed webhooks, and auditable state.
Demonstrates transactional SQLite sync, conflict handling, and a compatible ASP.NET Core API.
Connects assembly, emulation, a five-stage pipeline, cache behavior, and an accessible trace UI.
Simulates signed A/B updates, bounded trial boots, rollback, and power-loss recovery.
Analyzes bounded Modbus captures against asset baselines and scoped maintenance windows without contacting industrial devices.
Exercises defensive binary parsing with packet traces, fault injection, fuzzing, and sanitizers.
Evaluates synthetic endpoint and cloud events with explainable rules, correlation windows, and false-positive evidence.
Traces real service calls through telemetry and exact SLO burn-rate checks with finite fault and recovery scenarios.
Tests declarative platform reconciliation, promotion policies, drift handling, and recovery in an isolated cluster lab.
Combines Falco replay checks with live isolated container probes and privacy-preserving runtime evidence.
Checks admission boundaries and real Linux IPv4 TCP segmentation with synthetic identities and explicit trust limits.
Exercises four native services with authorization, session isolation, negative HTTP cases, and concurrency regressions.
Validates Ed25519 tokens and least-privilege policies with typed reviews and provider-free IAM fixtures.
Evaluates tenant, approval, schema, canary, and integrity boundaries using reproducible offline agent fixtures.
Checks infrastructure policy against explicit allowed and denied fixtures before deployment.
Restores encrypted backups and isolated PostgreSQL data while measuring RPO, RTO, and failure budgets.
Builds independently verified signed offline bundles with staged activation and a hash-locked wheelhouse.
Organizes synthetic incident evidence with reproducible integrity checks and traceable investigation records.
Tests real OpenBao and PostgreSQL credential handoff, expiry, revocation, and bounded outage recovery.
Prioritizes supplied findings using exposure, applicability, confidence, and dated remediation evidence—not live scanning.
Reviews read-only SID and group metadata with nested-membership, cycle, and unknown-identity handling.
Analyzes supplied synthetic traffic evidence with bounded parsing and documented detection limitations.
Pairs native memory-safety checks, sanitizer evidence, and defensive regression fixtures.
Explores deterministic A*, utility decisions, replay verification, and Unity integration.
Makes MQTT ordering, retained state, ACL behavior, fault injection, and bounded buffering measurable.
Processes large local incident logs with Web Workers, IndexedDB, visualization, and PWA recovery.
Provides deterministic document diagnostics, expiring suppressions, SARIF, and accessible reports.
Builds version-aware product search with relevance evaluation, citations, provenance, and static output.
Migrates synthetic PDFs into accessible HTML with provenance and deterministic quality gates.
Adds credential-safe, bounded metadata lookups with cancellation and structured lifecycle errors.
Tests host-hardening evidence and explicit policy exceptions without silently changing the workstation.
Links six OSCAL model types to hashed artifacts, observations, milestones, and fictional authorization history.
Provides the ranked, searchable navigation hub with schema-checked case studies and static delivery budgets.
No projects match every selected condition. Reset a facet or try a broader keyword.