profile / operating range
Security judgment. Product instinct. Builder speed.
The through-line is practical: understand the system deeply enough to expose
what is fragile, then make something stronger.
I'm a Computer Science and Political Science student at the University of
Notre Dame and a published security researcher. My work spans vulnerability
disclosure, network security, developer tools, applied AI, and systems that
meet the physical world.
Right now I am a software engineering intern at Lila Sciences, building
agentic security platforms under the chief software and systems officer. I
also co-founded Phoenix Fire Labs, a wildfire technology company in the NVIDIA
Inception program whose Prometheus system pairs computer vision, drones, and
RF sensing.
Outside software, I volunteer on Skid Row, play club volleyball, and make 3D
animated films. Those are not side notes: they are where technical work
becomes human, visual, and accountable.
2 published vulnerability disclosures
44K+ open-source package downloads
9 licenses and certifications
// break systems responsibly
Access-control testing, network investigation, protocol analysis, and
disclosure work grounded in reproducible evidence.
// ship tools people keep
Open-source and product engineering across Python, TypeScript, Next.js, MCP,
SQLite, and applied AI.
// work across layers
From BLE packets and macOS databases to cloud infrastructure, computer vision,
and human-facing product decisions.
// working set
Python / TypeScript / React / Next.js / Go / Rust / MCP / Linux / Docker /
Kubernetes / Terraform / SQLite / Network security / Vulnerability research /
Nmap / PCAP analysis / Computer vision / SDR / RF
case file · CL / 2026 · los angeles / notre dame
work / selected engagements
Learning where the stakes are real.
Security, scientific infrastructure, robotics, health data, and applied AI,
work shaped by systems that have to function outside a demo.
jun 2026 – now Lila Sciences · Software Engineer Intern [current]
Builds agentic security platforms under the chief software
and systems officer, hardening how internal AI agents reach
company systems while developing the internal tools,
knowledge platforms, and dependency graphs engineering runs
on.
Engineering / AI / Agent Security
nov 2025 – now Phoenix Fire Labs · Co-Founder [current]
Co-founded a wildfire technology company serving fire
departments, running customer discovery with fire chiefs and
incident commanders. Prometheus, its autonomous monitoring
system, pairs computer vision, drones, and back-tested RF and
DSP hardware; the company holds a grant and membership in the
NVIDIA Inception program.
Python / Computer Vision / Drones / RF
jul – sep 2025 Tompkins Robotics · Information Security Intern
Ran scoped Nmap and packet-capture investigations, diagnosed
production connectivity across VPNs and VLANs, and
contributed to Kubernetes and Terraform workflows.
Network Security / Kubernetes / Terraform
jun – sep 2024 Bluestone Health · Project Intern
Standardized healthcare eligibility data, delivered a
CRM-integrated back-end platform, and designed the
operator-facing experience.
Data Integration / Healthcare / Full Stack
jul – dec 2023 Expak Logistics · AI Software Developer
Built an early retrieval-augmented assistant over company
data, letting teams query a large internal database in plain
English while agents retrieved and reasoned over Freshdesk
and Salesforce records.
AI / RAG / API Integration / Python
builds / public artifacts
Proof over pitch.
Tools and products are strongest when someone else can install them, inspect
them, or rely on them.
A secure MCP server that gives AI assistants controlled access to the macOS
Messages database—search, analyze, and send with intelligent iMessage and
SMS/RCS fallback.
44K+ package downloads · Python / SQLite / macOS / MCP
Computer vision and drone integration for continuous wildfire detection,
tracking, and faster situational awareness.
Phoenix Fire Labs · Co-Founder · Python / Computer Vision / Drones / AI
scc ↗ system Context Compiler / agent infrastructure
Compiles code, config, infrastructure, runtime, and intent into an
evidence-backed machine model, then emits task-specific context packs for AI
coding agents.
Rust · Tree-sitter · MCP · Rust / Tree-sitter / MCP / Context Engineering
A Git-driven internal developer platform for Vercel and Cloudflare with YAML
desired state, PR plans and previews, drift reconciliation, health gates,
rollback, and exact-commit promotion.
TypeScript · Vercel + Cloudflare · TypeScript / Vercel / Cloudflare / GitOps
An autonomous security-research harness: a model-adaptive agent supervisor
with SQLite graph state, provenance, bounded actions, and pluggable
environment adapters.
Python · bounded, policy-gated execution · Python / Security Research /
Agents
A self-hosted GitHub coding agent with explicit label and mention triggers
and capability-bound tools.
Python · MIT · Python / GitHub App / Coding Agent
RepoSeal ↗ supply-chain security
A supply-chain firewall for AI coding agents.
Rust · security tooling · Rust / Security / Supply Chain
A security firewall for AI agents.
Rust · security tooling · Rust / Security / Agents
A self-evolving coding-agent harness in which an immutable Rust guardian
judges an evolvable TypeScript/Python organism, with Pareto promotion.
Rust + TypeScript · Apache-2.0 · Rust / TypeScript / Agents / Pareto
A live TUI for watching SSH and terminal sessions: real usernames,
tmux/screen session names, and every process they spawn, in real time.
Rust · Linux · Rust / Linux / SSH / TUI
Scans working trees and Git history using patterns plus entropy, with
redaction, baselines, SARIF output, a pre-commit hook, and a GitHub Action.
Python · MIT · Python / Security / SARIF
A defense-in-depth bug-finding orchestrator for Python repositories.
Python · static analysis · Python / Static Analysis
Compiles historical bugs into permanent, deterministic detectors.
Python · MIT · Python / Static Analysis / Semgrep
Replays synthetic macOS and Linux event traces against tested Sigma rules,
explains matches, and measures false positives.
Detection-as-code · Detection Engineering / Sigma / Security
Cost-aware KV cache lease optimization and a nonblocking long-task runtime
for Hermes Agent.
Python · Apache-2.0 · Python / LLM / Cost Optimization
An independent agent-skill collection with custom-created skills.
Python · MIT · Python / Agents / Skills
An automated lighting designer for DJs: Rekordbox and Serato in, Govee RGBIC
out, with local-first show control.
TypeScript · Electron · TypeScript / Electron / DMX / Stage Lighting
GlowGo, a mobile spray-tan marketplace to find, book, and review vetted
mobile artists, built on Next.js, Convex, and Flutter.
TypeScript · Next.js + Convex · TypeScript / Next.js / Flutter / Marketplace
A strict, source-transparent solar and UV forecast plus calibration stack:
absolute melanogenic intensity compared with local outdoor opportunity,
published on a schedule.
Python · Open-Meteo · Python / Weather / UV / Open-Meteo
A Prompt XML helper for structuring prompts.
JavaScript · MIT · JavaScript / Prompt Engineering
A personal Homebrew tap for shipping the tooling above.
Ruby · Homebrew · Ruby / Homebrew
A disposable Launchpad live-acceptance sandbox.
HTML · disposable · HTML / Sandbox
A Go CLI and interactive TUI that turns codebases into syntax-highlighted
context for LLMs, documentation, and code review.
$ brew tap carterlasalle/treecat && brew install treecat
Homebrew + native packages · automated releases · Go / TUI / Homebrew /
GoReleaser
A dependency-free packet-capture explorer that defensively decodes PCAP and
PCAPNG files into terminal answers and deterministic structured output.
Dependency-free runtime · cross-platform CI · Python / Networking / PCAP /
TLS / DNS
A Rust screen-sharing system that transmits changed regions through direct
QUIC, relay-backed NAT traversal, native viewers, and zero-install browser
viewing.
Direct QUIC + relay NAT traversal · Rust / QUIC / LZ4 / MJPEG / Networking
A steganography tool that hides encrypted payloads inside emoji variation
selectors, exploring a covert channel in Unicode.
Encrypted Unicode covert channel · Node.js / React / Cryptography / Unicode
An AI-assisted men's health training platform built around structured
exercises, progression, and confidence.
staminatimer.com · production · AI / Health Tech / Product
Tracks Claude Code rate-limit resets and sends timely SMS reminders before
access returns.
Live service · Twilio notifications · Next.js / Twilio / Developer Tool
Digitizes student IDs for Apple Wallet and Google Pay using Gemini Vision
and mobile pass tooling.
Senior capstone · deployed prototype · Python / Gemini Vision / PassKit
research / responsible disclosure
The finding is only useful if the evidence holds.
Two published access-control vulnerabilities in Splashin, documented with
reproducible impact and disclosed responsibly.
CVE-2025-45156 medium severity · cvss 5.3
Update interval bypass exposed continuous location data
The backend did not enforce the advertised 600-second update restriction.
Direct API calls could retrieve current location data at arbitrary
intervals.
endpoint get_user_locations_by_user_ids_minimal
impact Unauthorized real-time tracking
status Published / disclosed
CVE-2025-45157 medium severity · cvss 6.5
Missing subscription validation bypassed premium controls
A premium-only location request lacked server-side authorization, allowing
free users to force immediate target updates through push notifications.
endpoint location-request
impact Complete access-control bypass
status Published / disclosed
// writing / field notes
Jul 14, 2025 · 4 min read · CVE / iOS Security / API Security
training / context
Computer science, security, and the worlds around them.
Formal study at Notre Dame, industry security training, and a visual practice
shaped by four years of animation.
2025 – 2029 University of Notre Dame · BA, Computer Science
Double majoring in computer science and political science.
Coursework and campus work spanning cybersecurity, artificial
intelligence, political systems, and practical engineering.
Active in Cyber Club, UAV Club, Wall Street Club, and club
volleyball.
Notre Dame, Indiana
// verified security training — cisco certifications
· Cisco Ethical Hacker
· Network Defense
· Endpoint Security
· Cyber Threat Management
· Introduction to Cybersecurity
// additional credentials — licenses & certifications
· Introduction to Generative AI, Google Cloud
· Adult First Aid/CPR/AED, American Red Cross
· CyberPatriot Tech Caregiver, AFA CyberPatriot
· PADI Certified Scuba Diver
// summer intensives — security, aerospace & cyber
· Intelligence and National Security (NSLC), Georgetown University
· Aerospace Academy, Rice University
· Cybersecurity, University of Maryland, Baltimore
· Cybersecurity (NSLC), American University
// visual work / recognition — animation & honors
· Best 3D Animated Film, Our Small World
· Scholastic Art & Writing Honorable Mention
· While America Sleeps, four showcase nominations
· Johns Hopkins CTY, High Honors
// films / built frame by frame
A 3D animated short about surveillance and security in modern America.
Nominated for Best Animated Film, Best 3D, Best Production Design, and Best
Sound Design.
Winner of Best 3D Animated Film and a Scholastic Art & Writing Honorable
Mention. A short about human connection and perspective.