Army veteran, cybersecurity student, and the type to fork an archived project rather than file an issue and wait.

vrsa.app - an AI workstation for songwriters, covering lyric writing, production, and generation. Bootstrapped, solo-built, zero advertising, and it has daily active users and paying subscribers.

Three deployments and three codebases that behave like one product:

The decisions I'd actually defend in review:

• One session, three apps. Auth is a single Supabase cookie scoped to .vrsa.app, so signing into any surface signs you into all of them. RLS does the authorization; the apps don't hand tokens to each other.
• Generation is spawn-and-poll, not request-response. Music generation on an H100 outlives any reasonable HTTP timeout, so jobs are spawned on Modal and polled to a 600s ceiling. Weights sit on a persistent volume instead of cold loading nine model variants per request.
• The LLM layer is a router, not a vendor. GPT, Claude, Gemini, DeepSeek, Grok, Kimi K2, MiniMax, and Mistral across Azure, OpenAI, Bedrock, OpenRouter, and Google.
• Audio analysis stays in the pipeline, not a third-party API. BPM and key/scale detection run through a custom audio engine on Essentia.js compiled to WASM.
• Suno Bridge ships as browser extensions. Chrome and Firefox builds capture auth and route lyrics straight into Suno with a version picker.

flowchart TD
    U["Web · PWA · Android"] --> AUTH

    AUTH[("Supabase - one cookie scoped to .vrsa.app<br/>session · RLS · storage · edge functions")]

    AUTH --> APP{Surface}

    APP -->|"lyrics · canvas · art"| A["<b>vrsa.app</b>"]
    APP -->|"multitrack DAW"| B["<b>studio.vrsa.app</b>"]
    APP -->|"music generation"| C["<b>generate.vrsa.app</b>"]

    A --> LLM["LLM router<br/>GPT · Claude · Gemini · DeepSeek<br/>Grok · Kimi K2 · MiniMax · Mistral"]
    A --> IMG["Flux 1.1 Pro · Flux 2 · Sora<br/>via Azure OpenAI"]
    A --> EXT["Suno Bridge<br/>Chrome + Firefox extensions"]

    B --> TONE["Tone.js engine<br/>piano roll · sequencer · MIDI I/O"]

    C --> SPAWN["Modal - spawn job"]
    SPAWN --> POLL["poll until ready<br/>600s ceiling"]
    POLL --> GPU["H100 · persistent weight volume<br/>6 DiT + 3 LM variants"]
    GPU --> OUT["mp3 · flac · wav · opus · aac"]

    LLM & IMG & TONE & OUT --> STORE[("Supabase Storage")]
    STORE --> U

    style AUTH fill:transparent,stroke:#3ECF8E,stroke-width:2px,color:#3ECF8E
    style GPU fill:transparent,stroke:#F97316,stroke-width:2px,color:#F97316
    style LLM fill:transparent,stroke:#EC4899,stroke-width:2px,color:#EC4899
    style IMG fill:transparent,stroke:#EAB308,stroke-width:2px,color:#EAB308
    style STORE fill:transparent,stroke:#3ECF8E,stroke-width:2px,color:#3ECF8E

StreamRecorder IDOR Disclosure Two API endpoints on streamrecorder.io returned private recording direct stream/download URLs to any authenticated user. Both accepted user supplied IDs without checking whether the caller owned the object. Written up as CWE-639 with a risk breakdown, reproducible proof of concept, and a disclosure trail.

Pentesting Explanations A 5,906-row supervised fine-tuning dataset for adversarial reasoning. Most security datasets teach recognition - give the model a technique name, get back its description, which produces models that don't context through or reason the moment they meet an unfamiliar codebase. Every row here carries a think trace written from the operator's seat, option by option. Apache 2.0, shipped in SFT / GRPO / PRM formats, sharded by HackTricks and MITRE ATT&CK.

eDEX-UI (security patched) The original sci-fi terminal emulator was archived with an unresolved vulnerability. I forked it, patched the flaw, and did the dependency archaeology: Electron 12 to 37 across 25 major versions, the scoped @xterm packages, node-pty 0.10 to 1.0, ws 7 to 8, plus a clean release and a security policy.

tunesort - Rust · GTK4 · GStreamer A keyboard-driven triage tool for people with more music than patience. Native GTK4, no Electron, one small binary. Waveform peaks are pulled out through GStreamer and drawn with Cairo so you can scrub by dragging the wave; MIDI files play through GStreamer's synth pipeline and get a note-density graph in place of a waveform. Deletes go to the freedesktop trash and get pulled back out on undo - multi-level, for moves as well as deletes - because I do this half-asleep and don't trust myself with unlink. CI, release automation, and .deb packaging with a desktop entry.

hawktui - Python · Textual · yt-dlp A TUI that sits in the background watching your clipboard and hands any URL you copy straight to yt-dlp. Quality and format selection, audio-only mode, live progress, persisted config. Tested and shipped through a release pipeline. Its README is written in a rather different register than this one.

Website to Markdown Exporter - Userscript Exports the fully rendered text of any page to clean Markdown. It walks the live DOM rather than the source, so JavaScript-rendered content actually makes it out, and it resolves every link and image to an absolute URL so the file still works away from its origin. On GreasyFork for Violentmonkey and Tampermonkey.

Smoked - Firefox userChrome.css A dark, glassy Firefox theme with a one line toolbar and a zen mode that collapses the entire browser UI to thin strip, revealing on hover or focus, with tab positions still readable as colored slivers. Frosted glass panels via backdrop-filter, themed about: pages.

CorgiDB - Contribution Added a helper that automates SQL datatype selection for pandas DataFrames, cutting the manual pass out of schema generation and keeping column storage sane.

Linux ASM Pairs Disassembled Linux kernel functions paired with structured natural-language explanations, built from the Linux Commits Dataset (Zenodo 10654193).

Genius Lyrics Dataset 3.17M cleaned, deduplicated English song lyrics with title, artist, genre tag, and year. MIT licensed, built for training and analysis at scale.

AI Audio Tools A curated index of 100+ AI audio tools across 16 categories - music creation, voice cloning, stem separation, TTS, transcription, sound detection.

Notebook	What it does	Open
HeartLib	HeartMuLa music generation tuned for NVIDIA GPUs, A100 in particular
Ollama Stack	Full Ollama stack with a Gradio UI - a local LLM in your browser, zero local setup
Wan 2.2 Video	Image-to-video generation, stripped down to just work

Certifications