Skip to content
View joemunene-by's full-sized avatar
  • Nairobi
  • 01:30 (UTC +03:00)

Block or report joemunene-by

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
joemunene-by/README.md

I build security tools, full-stack platforms, and AI systems from first principles.
Not wrappers. Not tutorials. Production code that solves real problems.

Currently shipping GhostLM — an 81M-parameter cybersecurity language model trained from scratch — and the ghostloop family: an embodied-AI agent runtime with a fail-closed safety pipeline (pip install ghostloop), its Next.js control plane, and a Tauri desktop app. Everything in one place at the live HuggingFace demo.


Portfolio Complex Developers Email GitHub

ghostloop on PyPI Live demo GhostLM on HuggingFace


> whoami

I'm a Computer Science student at Moi University (Nairobi, Kenya) and the founder of Complex Developers, a studio that ships web platforms, custom tooling, and AI adjacent products. The company site + CRM runs on Next.js 15, Prisma, and Postgres.

My work sits at the intersection of offensive security, full-stack engineering, applied AI, and systems programming. 34+ open source projects, 320+ commits, 165,000+ lines of code, and counting. The shortest way to prove what you can engineer is to show working code, so that's what this profile is.


> git log --grep="upstream"

Merged. Fixed agent name preservation in AgentExecutor node titles after page reload in the visual builder frontend. Small fix, surfaces in the user flow every time you reopen a saved graph, so the regression was high-visibility once introduced.

Open, under review. Replaces the naive E[X²] − E[X]² variance formula in PearsonCorrelation with Welford's online algorithm plus a parallel distributed merge. Fixes catastrophic cancellation in float32 (the metric was returning 0.89 instead of 0.99 for mean=1e6 data). Numerically stable across single-process and DDP.


> ps aux | grep active

Currently shipping: GhostLM

An open source cybersecurity language model built from scratch in PyTorch. 81M parameter decoder-only transformer (RoPE, SwiGLU, RMSNorm) trained on a 422M token multi-domain corpus across 27 sources: cybersec writeups, NVD CVEs, MITRE / CWE / OWASP, NIST SP 800, FineWeb-Edu, open-web-math, and a 105 repo open source code pull spanning 15 languages.

Ships GhostAgent (a tool-using runtime), a multi-vendor HTTP server speaking OpenAI / Anthropic / Gemini / Ollama wire formats, an MCP server, and GhostBench (a packaged eval suite with Wilson 95% CIs and McNemar paired comparisons across 14 differentiation bets). 312 tests green.

GhostLM HuggingFace

What I ship

AI agent safety stack: secure-mcp, ghostguard (4-tier policy proxy with audit dashboard), CyberBench

Defensive security toolkit: ghostaudit (23 CIS Kubernetes checks), ghostforensics (memory forensics with YARA + Volatility + STIX 2.1 export), ghostsiem (Sigma-rule SIEM), securecommit (pre-commit secret scanner)

Offensive tooling: concurrent TCP port scanner, packet-level traffic analyzer, vulnerability scanner, hash-cracking framework, MAC rotator, metadata scrubber

Full-stack platforms: Complex Developers CRM (Next.js 15 + Prisma + Postgres), ChartSentinel (trading SaaS with Stripe + PostHog + Sentry), High-End CRM, ai-coding-assistant

Latest drops

ghostloop v1.0.3 — the agent loop, embodied. pip install ghostloop, 14 releases, live HuggingFace demo, full CI/CD with PyPI Trusted Publishing. Six simulation backends (MuJoCo / PyBullet / Gymnasium / ROS 2), 12 fail-closed policy gates, LLM + VLA policy adapters, and a bench harness with Wilson CI, McNemar, adversarial fuzzing (CMA-ES), STL temporal properties, counterfactual replay, and causal failure attribution. Production fleet dashboard with auth, rate limiting, alarms, and Prometheus. 359 tests green.

ghostloop-ui — Next.js 15 + React 19 + Tailwind 4 control plane, live at ghostloop-ui.vercel.app. Fleet view, alarm tray, episode timeline, per-counter Prometheus metrics, and a profile-aware gamepad mapper (drone / mobile base / quadruped / arm / humanoid) built for non-coders. Demo-mode fallback keeps the deploy interactive with no backend configured.

ghostloop-desktop v0.2 — Tauri 2 + Rust shell wrapping ghostloop-ui as a single-file native app for macOS / Windows / Linux. Voice control, gamepad rumble on safety events (geofence block, force-cap trip, e-stop), native OS notifications, 120 Hz gamepad polling via gilrs, system-tray integration, and a global e-stop hotkey. Per-PR CI matrix green across all three platforms.

secure-mcp — MCP server exposing security tools to AI agents with policy gates, subprocess sandboxing, and audit trails. Fail-closed by default.

CyberBench — Open, reproducible benchmark for evaluating LLMs on cybersecurity reasoning. YAML tasks, pluggable backends, ranked leaderboard.

linkdrop v0.7.1 — Cross-platform Tauri + Rust desktop app bridging iPhone to Linux for photos, files, notifications, screen mirroring. Daemon-backed pymobiledevice3 bridge, CI-built .deb / .AppImage.

ghostloop ghostloop-ui ghostloop-desktop secure-mcp CyberBench linkdrop


> man joe

Technical writing lives in joemunene-by/writing.

  • AI Model Supply Chain Security — architectural guidance on serialization risks in model artifacts (pickle / .pt code execution, safetensors and ONNX alternatives), provenance verification, artifact scanning, and Model Bills of Materials. Originally proposed to the OWASP Cheat Sheet Series (PR #2111) and revised through maintainer review.

> cat /etc/skills

Languages
Python TypeScript JavaScript Rust C Swift SQL Bash

Frontend, Mobile & Desktop
Next.js React Tailwind Vite Three.js Framer Motion React Native Expo Tauri Electron

Backend & Data
Node.js Bun FastAPI Express tRPC Prisma PostgreSQL SQLite Supabase Zod JWT Stripe

AI / ML
PyTorch HuggingFace Transformers NumPy MLX LanceDB MCP FastMCP Anthropic SDK Groq

Robotics, RL & Simulation
MuJoCo PyBullet ROS 2 Gymnasium Safe RL PPO VLA Models Sim-to-Real

Security
Linux Nmap Wireshark Burp Suite Metasploit Hashcat Scapy YARA Volatility Sigma STIX MISP CIS Benchmarks CTF

DevOps, Observability & Quality
Docker Kubernetes Terraform GitHub Actions Turbo Vercel Cloudflare OpenTelemetry Prometheus Sentry PostHog Vitest pytest


> git log --oneline


> cat README.md | tail -n 4

I'm always open to collaborating on security research, open source tooling, or interesting engineering problems.
If you're building something that matters, I'd like to hear about it.


Nairobi, Kenya · Founder, Complex Developers · Available for contract work — backend builds, security reviews, API hardening · joemunene984@gmail.com


Profile Views

Pinned Loading

  1. Network-Traffic-Analyzer Network-Traffic-Analyzer Public

    Network Traffic Analyzer - A production-grade, enterprise-ready network security monitoring tool designed for Security Operations Centers (SOCs), penetration testers, and security researchers. This…

    Python 1

  2. GhostLM GhostLM Public

    Open-source language model built from scratch in PyTorch. Purpose-built for cybersecurity, with code + general language + math reasoning folded into the v1.0 corpus (516K records, ~363M tokens, six…

    Python 2 1

  3. advanced-port-scanner advanced-port-scanner Public

    Detect and analyze network vulnerabilities with this advanced port scanner — multiple scan types and high-performance capabilities for secure assessments.

    Python 1

  4. ai-coding-assistant ai-coding-assistant Public

    An AI assistant which can create full stack website and also full stack applications

    TypeScript 1

  5. sentinelpulse sentinelpulse Public

    Real-time Threat Intelligence Dashboard

    JavaScript

  6. Vulnerabilities-Scanner Vulnerabilities-Scanner Public

    Vulnerabilities Scanner is a lightweight, extensible static scanner for source trees that finds common secrets and insecure patterns.

    Python