RECORD 0x0000 · GENESIS prev: 000000000000 this: 01be7b13daef

Daniel
Nakitare

Backend systems where the consequences are real. Seven years on the integration boundary: healthcare, legal tech, and systems that have to keep working when the ones they depend on don't.

Thesis Don't trust the AI. Trust the small, inspectable audit substrate it has to write to. The tools I build, Imara and Castellan, both produce a SHA-256 hash-chained, tamper-evident log. This page is built the same way.
RECORD 0x0001 prev: 01be7b13daef this: d30dfbcfdfe7
about

From a fireteam to a build pipeline.

Before software, I was an 11B Infantryman in the 101st Airborne Division. Combat Infantry Badge, Purple Heart, Afghanistan, 2011 to 2014. That work ran on clear ownership, real consequences, and no half-measures. So do the systems I ship now.

Seven years shipping production backends across healthcare SaaS, legal tech, and enterprise platforms. At Carefeed I own the EHR integration architecture end to end: data exchange across nine-plus platforms (Epic, PointClickCare, MatrixCare), the webhook and PDF/OCR pipelines that hundreds of facilities depend on, and the auth layer behind a multi-tenant SaaS. When I inherited a four-year backlog of 27,000-plus failed uploads, I fixed the root cause and shipped the cleanup tooling that brought integrity back above 99 percent. This is the work: systems where a wrong record is a regulatory finding, not a failed unit test.

Alongside the day job, my side work concentrates on the infrastructure around an LLM, not the model itself: runtime governance for agents (Imara, on npm), MCP gateways (Mavryn), and capability-broker architecture for local agents in regulated industries (Castellan).

MBA from Temple. BA from Pomona. Since age 18 I've been part owner of a working farm in Kitale, Kenya: strategy mine, day-to-day management's. The kind of standing P&L responsibility that makes most engineering tradeoffs feel routine.

RECORD 0x0002 prev: d30dfbcfdfe7 this: beb0230106cd
work history

Where the bills got paid.

Jun 2025 – present Carefeed
Senior Software Engineer

Own all EHR integrations across nine-plus platforms (Epic, PointClickCare, MatrixCare). Built the secure data-exchange integrations and webhook handlers for patient and facility data sync, the enterprise PDF/OCR pipeline that automates invoice handling for hundreds of healthcare facilities, and modernized SFTP integration across 20+ payroll systems.

Authored the team's foundational standards for LLM-assisted coding tools, with every rule verified against the actual codebase.

Resolved a four-year backlog of 27,000+ failed EHR uploads by fixing the underlying data-integrity bug and shipping cleanup tooling. Recovered data integrity to 99%+ reliability.
Aug 2024 – Jun 2025 nQ Zebraworks
Senior Engineer

Returned to nQ at Senior level to own DataQ's API infrastructure end-to-end, a data-integration platform for law firms handling sensitive conflict-of-interest data. Built the REST API layer and implemented OAuth2 and role-based access control to meet legal-sector compliance requirements.

Jun 2023 – Apr 2024 Sensible Care
Full Stack Engineer

Full-stack engineer on a healthcare SaaS platform serving behavioral-health providers (Laravel/Vue.js). Automated medical referral processing with Tesseract OCR, eliminating manual data entry across clinical workflows. Integrated payment-processor and insurance-validation APIs, and migrated the billing system from a legacy codebase into a modern Laravel monolith.

Jul 2021 – May 2023 nQ Zebraworks
Software Engineer

Architected the backend of a business-intelligence dashboard on a cloud-based legal practice-management platform. Cut data-aggregation processing times by 75% with Redis caching, MySQL query optimization, and Laravel deferred job queues.

Oct 2020 – Jul 2021 Buckeye Interactive
Software Engineer

Built MVPs for multiple clients simultaneously at a small engineering agency. Led projects as primary developer, managed AWS EC2/Docker/Nginx infrastructure for all client work, and shipped production applications for Columbus Metropolitan Library, OpportunityPort, and AFCPE.

Mar 2019 – Oct 2020 boomtime
Software Engineer

Built secure internal and external APIs with authentication and RBAC for a digital agency's proprietary platforms. Introduced the team's first unit-test suite and designed custom integrations automating data export to clients' third-party services.

2011 – 2014 U.S. Army · 101st Airborne
11B Infantryman

Combat Infantry Badge, Purple Heart, Afghanistan deployment. Conducted combat operations under fire, making rapid high-consequence decisions in ambiguous environments. Trained 200+ personnel on tactical operations, and managed $2M+ in military equipment under combat conditions.

RECORD 0x0003 prev: beb0230106cd this: 625051e41770
building

Selected work, signed and dated.

Aether architecture schematic Schematic of Aether, an AI agent runtime. A multi-tenant REST API with JWT and RBAC feeds an in-process scheduler with bin-packing, spread, and best-fit placement. The scheduler fans agent jobs out to a pool of Firecracker microVMs inside a hardware isolation boundary, and persists state to PostgreSQL with OpenTelemetry observability. A single-region control plane, about thirty-five thousand lines of Go. MULTI-TENANT REST API JWT · RBAC IN-PROCESS SCHEDULER BIN-PACK · SPREAD · BEST-FIT FIRECRACKER microVM HARDWARE-LEVEL ISOLATION HARDWARE ISOLATION BOUNDARY microVM · 01 AGENT microVM · 02 AGENT microVM · 03 AGENT REST API AUTH SCHEDULER PLACEMENT IN-PROCESS QUEUE PostgreSQL PERSIST · OTel PostgreSQL · OpenTelemetry AETHER · SINGLE-REGION CONTROL PLANE · Go
FIG. 01 – Aether agent runtime · microVM isolation

Aether

AI agent runtime with hardware-level isolation via Firecracker microVMs. Single-region control plane: multi-tenant REST API, in-process scheduler with bin-packing, spread, and best-fit placement, JWT/RBAC, PostgreSQL persistence, OpenTelemetry observability, Kubernetes/Terraform deployment. Beta.

Go · Firecracker · Kubernetes · PostgreSQL signed
Mavryn architecture schematic Schematic of Mavryn, an MCP gateway. Several upstream MCP servers on the right converge through fan-in flow lines into one Mavryn gateway, which stacks tool namespacing, allow/deny policy, health checks and audit logging, then exposes a single endpoint on the left to a client or agent. ONE ENDPOINT CLIENT AGENT MAVRYN MCP GATEWAY NAMESPACING POLICY · ALLOW/DENY HEALTH CHECK AUDIT LOG N UPSTREAMS MCP SERVER A tools MCP SERVER B tools MCP SERVER C tools MAVRYN · MCP GATEWAY
FIG. 02 – Mavryn MCP gateway · fan-in proxy

Mavryn

MCP gateway that proxies multiple upstream MCP servers through one endpoint. Tool namespacing, semantic search across tools, allow/deny policies, health checks, audit logging. Published on npm.

TypeScript · MCP · Gateway signed
Imara architecture schematic Schematic of Imara, a runtime governance proxy for MCP. An agent tool call passes into the Imara interceptor and policy gate, which branches into four outcomes: allow flows through to a tool or MCP server, deny is blocked, plus rate-limit and escalate. Every call is appended to a tamper-evident SHA-256 hash-chained audit log of three records anchored at a genesis block. AGENT MCP CLIENT TOOL CALL IMARA INTERCEPTOR POLICY GATE ALLOW TOOL / MCP SERVER DENY RATE-LIMIT ESCALATE APPEND · HASH-CHAIN REC 00 · GENESIS prev · 000000 this · 00c4a1 REC 01 prev · 00c4a1 this · 7b3e9d REC 02 prev · 7b3e9d this · e2d9f4 TAMPER-EVIDENT · SHA-256 · TRUNCATION-DETECTING IMARA · RUNTIME GOVERNANCE PROXY
FIG. 03 – Imara governance proxy · tamper-evident audit

Imara

Runtime governance proxy for MCP. Intercepts every tool call, enforces YAML policy (allow, deny, rate-limit, escalate), and writes a tamper-evident, SHA-256 hash-chained audit log: genesis-anchored, with truncation detection. Published on npm.

TypeScript · MCP · npm signed
Castellan architecture schematic Schematic of Castellan, a capability-broker architecture for delegated authority in local AI agent systems. A local agent requests a capability from a small, inspectable broker that either grants it through to tools and actuators such as a work-order system, or refuses as a first-class outcome. The broker writes to a hash-chained audit substrate. A dashed trust surface encloses the broker and audit: the buyer trusts the broker, not the AI. TRUSTS BROKER · NOT THE AI LOCAL AGENT ai system REQUESTS CAPABILITY TRUST SURFACE · INSPECTABLE CAPABILITY BROKER small · inspectable GRANT WORK-ORDER SYSTEM tools · actuators REFUSE REFUSE blocked · logged REFUSAL = FIRST-CLASS OUTCOME WRITES HASH-CHAINED AUDIT SUBSTRATE 00 01 02 CASTELLAN · CAPABILITY BROKER
FIG. 04 – Castellan capability broker · refusal first-class

Castellan

Capability-broker architecture for delegated authority in local AI agents, applied to industrial maintenance work-order triage. The agent never holds authority. It asks a small, inspectable broker, which grants the capability or treats refusal as a first-class outcome, and records every decision to a hash-chained audit substrate.

Architecture · Local LLMs · Spec-first signed
Muhuri delegation credential schematic Schematic of Muhuri, a splice-proof, offline-attenuating delegation credential for AI-agent chains. A human principal signs a delegation to an orchestrator, which narrows scope and signs to a worker; each hop can only add caveats, so authority only shrinks. The worker presents the whole chain plus a holder-of-key proof to an offline verifier that checks the root anchor, every signature, and the request scope, then authorizes or blocks. The chain is one compact artifact whose links are cryptographically bound so it cannot be spliced. ROOTED IN A HUMAN · VERIFIED OFFLINE ATTENUATION · SCOPE ONLY NARROWS HUMAN root key ORCHESTRATOR + caveats WORKER holder-of-key + PoP OFFLINE VERIFY anchor · sig · scope ALLOW AUTHORIZED DENY BLOCKED = ONE COMPACT CREDENTIAL DELEGATION CHAIN SPLICE-BOUND · 258 B/HOP L0 L1 L2 MUHURI · DELEGATION CREDENTIAL
FIG. 05 – Muhuri delegation credential · splice-proof, offline

Muhuri

A single compact credential that carries an entire AI-agent delegation chain, human to tool, and proves offline who authorized whom to do exactly what. Each hop can only narrow scope; the links are cryptographically bound so the chain cannot be spliced, and a stolen credential is inert without a holder-of-key proof. Ed25519 and canonical CBOR; verified with no server round-trip.

Ed25519 · CBOR · Offline-verify signed
Laravel Outbox architecture schematic Schematic of the transactional outbox pattern. A business write and its outbox row commit in one SQL transaction, so a committed write and its event can never disagree. After commit, a worker claims rows with SKIP LOCKED and dispatches them to the real event bus and queue. Failures retry with exponential backoff and land in a dead-letter table where they can be inspected and replayed. Delivery is at-least-once, so consumers stay idempotent. NOTHING FIRES INSIDE THE TRANSACTION ONE SQL TRANSACTION · ATOMIC BUSINESS WRITE orders · invoices OUTBOX ROW outbox_messages EVENTS + JOBS · HMAC-SIGNED COMMIT WORKER SKIP LOCKED claim DELIVER EVENT BUS · QUEUE the real dispatch FAIL RETRY exp backoff + jitter EXHAUSTED DEAD-LETTER inspect · reset · replay AT-LEAST-ONCE · CONSUMERS IDEMPOTENT correlation_id AS THE DEDUP KEY LARAVEL OUTBOX · COMMIT = PUBLISH, GUARANTEED
FIG. 06 – Transactional outbox · commit = publish, guaranteed

Laravel Outbox

Domain events and queued jobs persisted in the same SQL transaction as the business write, so a committed write and its event can never disagree. A worker replays them with SKIP LOCKED claiming, exponential backoff, and a dead-letter table; payloads are HMAC-signed and delivery is at-least-once. The reliability pattern every distributed Laravel app eventually needs, packaged. On Packagist, in beta.

PHP · Laravel · MySQL/Postgres signed
dira Live demo · Video
Edge-hosted digital twin runtime. A deterministic Rust simulation core, a Three.js operator console that holds its picture through a dropped network link, and byte-exact auditable replay. Cross-compiled for ARM and x86 Linux, with a static in-browser demo and a narrated walkthrough.
Rust · TypeScript · Three.js
PhotoPare Shipped · App Store
Privacy-first iOS app for cleaning up photo libraries. Finds duplicates with SHA-256 plus a 256-bit perceptual hash, blurry shots by Laplacian variance, and forgotten screenshots, one hundred percent on-device. No accounts, no uploads, no tracking SDKs. Free to scan, one-time $4.99 unlock for deletion.
Rust/Tauri · Svelte · Swift/PhotoKit · StoreKit 2
Prior Auth Assistant
Reference architecture for a HIPAA-shaped healthcare AI app. PostgreSQL row-level security, Fernet field-level PHI encryption, HMAC-chained audit log, prompt-injection hardening. Live demo.
Python · FastAPI · React
Obolus
Expense tracker for freelancers, rebuilt end-to-end in TypeScript. Express and Prisma API, Vue 3 front end, SQLite, with a test suite and CI.
TypeScript · Express · Vue
More on GitHub
Web scrapers, data pipelines, smart contracts, a maze game, and other open-source work.
github.com/Dnakitare →
RECORD 0x0004 prev: 625051e41770 this: 976325e38261
writing

Thinking out loud, in public.

July 2026 · Postmortem

I broke my own audit log

I changed Imara's serialization format in 0.2.0 and every log written by 0.1.x stopped verifying. Nothing was tampered with. I broke it myself, in the one place a tamper-evidence tool can't afford to break. This is the writeup of what I got wrong and how the migration should have worked. Imara's README links it too, right where the audit chain is pitched.

Read the postmortem
May 2026 · Specs & decision records

Castellan: delegated authority for local AI agents

Six specifications and thirteen architectural decision records for a proof-of-concept on delegated authority in local AI agent systems, applied to industrial maintenance work-order triage. Written from the auditor's perspective. The thesis: an industrial buyer shouldn't have to trust the AI. They should have to trust the authority broker and the audit substrate, which are small, inspectable, and behave like things they already know how to evaluate.

Read on GitHub
RECORD 0x0005 prev: 976325e38261 this: fb333be2dcd8
education

Where the credentials came from.

Temple University
MBA · Innovation Management & Strategy
2017 · Fox School of Business
Pomona College
BA · Politics & Economics
2010
RECORD 0x0006 prev: fb333be2dcd8 this: b68a0ed8f3dc
contact

Let's talk.

Open to senior backend engineering roles, with staff-level scope at the right fit. The work I do best: owning a system end to end in production, where a wrong record costs somebody something. Particular interest in healthcare SaaS, AI infrastructure, and compliance-regulated systems. Also happy to talk backend architecture, API design, or whatever you're building.
Open to senior & staff conversations · remote (US) · based in New Mexico
emaildnakitare@gmail.com resumePDF, two pages githubDnakitare linkedinin/dnakitare
Konami unlock acknowledged. enter the maze
Descent authorized. 深層降下 begin the dive
Aperture open. fall into it