RECORD 0x0000 · GENESIS prev: 000000000000 this: a3f1c09e72d4

Daniel
Nakitare

Backend systems where the consequences are real. Healthcare, legal tech, and the trust substrate for AI agents.

Thesis Don't trust the AI. Trust the small, inspectable audit substrate it has to write to. The tools I build, Imara and Castellan, both produce a SHA-256 hash-chained, tamper-evident log. This page is built the same way.
RECORD 0x0001 prev: a3f1c09e72d4 this: 7b20e5f4a1c8
about

From a fireteam to a build pipeline.

Before software, I was an 11B Infantryman in the 101st Airborne Division. Combat Infantry Badge, Purple Heart, Afghanistan, 2011 to 2014. The discipline that kept us alive, clear ownership, real consequences, no half-measures, is the same discipline I bring to the systems I ship now.

Seven years building production backend and full-stack systems across healthcare SaaS, legal tech, and enterprise platforms. I own EHR integrations across nine-plus platforms at Carefeed, architect data pipelines that hundreds of facilities depend on, and design APIs for the kind of environments where a failure case becomes a regulatory finding.

Lately, the AI-infrastructure work: runtime governance for agents (Imara, on npm), MCP gateways (Mavryn), and capability-broker architecture for local agents in regulated industries (Castellan).

MBA from Temple. BA from Pomona. Spent a decade running a business in East Africa before tech, the kind of P&L responsibility that makes most engineering tradeoffs feel routine.

RECORD 0x0002 prev: 7b20e5f4a1c8 this: c4d8019fa6e3
work history

Where the bills got paid.

Jun 2025 – present Carefeed
Senior Software Engineer

Own all EHR integrations across nine-plus platforms (Epic, PointClickCare, MatrixCare). Architected secure data-exchange protocols and webhook handlers for patient and facility data sync, the enterprise PDF/OCR pipeline that automates invoice handling for hundreds of healthcare facilities, and modernized SFTP integration across 20+ payroll systems.

Authored the team's foundational standards for LLM-assisted coding tools, with every rule verified against the actual codebase.

Resolved a four-year backlog of 27,000+ failed EHR uploads by fixing the underlying data-integrity bug and shipping cleanup tooling. Recovered data integrity to 99%+ reliability.
Aug 2024 – Jun 2025 nQ Zebraworks
Senior Engineer

Returned to nQ at Senior level to own DataQ's API infrastructure end-to-end, a data-integration platform for law firms handling sensitive conflict-of-interest data. Built high-performance RESTful APIs improving data-processing efficiency by 30%, and implemented OAuth2 and role-based access control to meet legal-sector compliance requirements.

Jun 2023 – Apr 2024 Sensible Care
Full Stack Engineer

Full-stack engineer on a healthcare SaaS platform serving behavioral-health providers (Laravel/Vue.js). Automated medical referral processing with Tesseract OCR, eliminating manual data entry across clinical workflows. Integrated payment-processor and insurance-validation APIs, and migrated the billing system from a legacy codebase into a modern Laravel monolith.

Jul 2021 – May 2023 nQ Zebraworks
Software Engineer

Architected the backend of a business-intelligence dashboard on a cloud-based legal practice-management platform. Cut infrastructure costs by 50% through MySQL query optimization, and slashed data-aggregation processing times by 75% with Redis caching and Laravel deferred job queues.

Oct 2020 – Jul 2021 Buckeye Interactive
Software Engineer

Built MVPs for multiple clients simultaneously at a small engineering agency. Led projects as primary developer, managed AWS EC2/Docker/Nginx infrastructure for all client work, and shipped production applications for Columbus Metropolitan Library, OpportunityPort, and AFCPE.

Mar 2019 – Oct 2020 boomtime
Software Engineer

Built secure internal and external APIs with authentication and RBAC for a digital agency's proprietary platforms. Established comprehensive unit-test coverage, reducing bug reports by 90%, and designed custom integrations automating data export to clients' third-party services.

2011 – 2014 U.S. Army · 101st Airborne
11B Infantryman

Combat Infantry Badge, Purple Heart, Afghanistan deployment. Conducted combat operations under fire, making rapid high-consequence decisions in ambiguous environments. Trained 200+ personnel on tactical operations, and managed $2M+ in military equipment under combat conditions.

RECORD 0x0003 prev: c4d8019fa6e3 this: e91a7c33b05f
building

Selected work, signed and dated.

Aether architecture schematic Schematic of Aether, an AI agent runtime. A multi-tenant REST API with JWT and RBAC feeds a distributed scheduler built on Kafka and etcd. The scheduler fans agent jobs out to a pool of Firecracker microVMs inside a hardware isolation boundary, and persists state to PostgreSQL with OpenTelemetry observability. Forty-eight thousand lines of Go. MULTI-TENANT REST API JWT · RBAC DISTRIBUTED SCHEDULER KAFKA + etcd FIRECRACKER microVM HARDWARE-LEVEL ISOLATION HARDWARE ISOLATION BOUNDARY microVM · 01 AGENT microVM · 02 AGENT microVM · 03 AGENT REST API AUTH SCHEDULER KAFKA · QUEUE etcd · STATE PostgreSQL PERSIST · OTel PostgreSQL · OpenTelemetry AETHER · 48,000 LINES OF Go
FIG. 01 – Aether agent runtime · microVM isolation

Aether

AI agent runtime with hardware-level isolation via Firecracker microVMs. Multi-tenant REST API, distributed scheduler with Kafka and etcd, JWT/RBAC, PostgreSQL persistence, OpenTelemetry observability, Kubernetes/Terraform deployment. Forty-eight thousand lines of Go.

Go · Firecracker · Kubernetes · Kafka signed
Mavryn architecture schematic Schematic of Mavryn, an MCP gateway. Several upstream MCP servers on the right converge through fan-in flow lines into one Mavryn gateway, which stacks tool namespacing, allow/deny policy, health checks and audit logging, then exposes a single endpoint on the left to a client or agent. ONE ENDPOINT CLIENT AGENT MAVRYN MCP GATEWAY NAMESPACING POLICY · ALLOW/DENY HEALTH CHECK AUDIT LOG N UPSTREAMS MCP SERVER A tools MCP SERVER B tools MCP SERVER C tools MAVRYN · MCP GATEWAY
FIG. 02 – Mavryn MCP gateway · fan-in proxy

Mavryn

MCP gateway that proxies multiple upstream MCP servers through one endpoint. Tool namespacing, intelligent search, allow/deny policies, health checks, audit logging. Published on npm.

TypeScript · MCP · Gateway signed
Imara architecture schematic Schematic of Imara, a runtime governance proxy for MCP. An agent tool call passes into the Imara interceptor and policy gate, which branches into four outcomes: allow flows through to a tool or MCP server, deny is blocked, plus rate-limit and escalate. Every call is appended to a tamper-evident SHA-256 hash-chained audit log of three records anchored at a genesis block. AGENT MCP CLIENT TOOL CALL IMARA INTERCEPTOR POLICY GATE ALLOW TOOL / MCP SERVER DENY RATE-LIMIT ESCALATE APPEND · HASH-CHAIN REC 00 · GENESIS prev · 000000 this · 00c4a1 REC 01 prev · 00c4a1 this · 7b3e9d REC 02 prev · 7b3e9d this · e2d9f4 TAMPER-EVIDENT · SHA-256 · TRUNCATION-DETECTING IMARA · RUNTIME GOVERNANCE PROXY
FIG. 03 – Imara governance proxy · tamper-evident audit

Imara

Runtime governance proxy for MCP. Intercepts every tool call, enforces YAML policy (allow, deny, rate-limit, escalate), and writes a tamper-evident, SHA-256 hash-chained audit log: genesis-anchored, with truncation detection. Published on npm.

TypeScript · MCP · npm signed
Castellan architecture schematic Schematic of Castellan, a capability-broker architecture for delegated authority in local AI agent systems. A local agent requests a capability from a small, inspectable broker that either grants it through to tools and actuators such as a work-order system, or refuses as a first-class outcome. The broker writes to a hash-chained audit substrate. A dashed trust surface encloses the broker and audit: the buyer trusts the broker, not the AI. TRUSTS BROKER · NOT THE AI LOCAL AGENT ai system REQUESTS CAPABILITY TRUST SURFACE · INSPECTABLE CAPABILITY BROKER small · inspectable GRANT WORK-ORDER SYSTEM tools · actuators REFUSE REFUSE blocked · logged REFUSAL = FIRST-CLASS OUTCOME WRITES HASH-CHAINED AUDIT SUBSTRATE 00 01 02 CASTELLAN · CAPABILITY BROKER
FIG. 04 – Castellan capability broker · refusal first-class

Castellan

Capability-broker architecture for delegated authority in local AI agents, applied to industrial maintenance work-order triage. The agent never holds authority. It asks a small, inspectable broker, which grants the capability or treats refusal as a first-class outcome, and records every decision to a hash-chained audit substrate.

Architecture · Local LLMs · Spec-first signed
Muhuri delegation credential schematic Schematic of Muhuri, a splice-proof, offline-attenuating delegation credential for AI-agent chains. A human principal signs a delegation to an orchestrator, which narrows scope and signs to a worker; each hop can only add caveats, so authority only shrinks. The worker presents the whole chain plus a holder-of-key proof to an offline verifier that checks the root anchor, every signature, and the request scope, then authorizes or blocks. The chain is one compact artifact whose links are cryptographically bound so it cannot be spliced. ROOTED IN A HUMAN · VERIFIED OFFLINE ATTENUATION · SCOPE ONLY NARROWS HUMAN root key ORCHESTRATOR + caveats WORKER holder-of-key + PoP OFFLINE VERIFY anchor · sig · scope ALLOW AUTHORIZED DENY BLOCKED = ONE COMPACT CREDENTIAL DELEGATION CHAIN SPLICE-BOUND · 258 B/HOP L0 L1 L2 MUHURI · DELEGATION CREDENTIAL
FIG. 05 – Muhuri delegation credential · splice-proof, offline

Muhuri

A single compact credential that carries an entire AI-agent delegation chain, human to tool, and proves offline who authorized whom to do exactly what. Each hop can only narrow scope; the links are cryptographically bound so the chain cannot be spliced, and a stolen credential is inert without a holder-of-key proof. Ed25519 and canonical CBOR; verified with no server round-trip.

Ed25519 · CBOR · Offline-verify signed
PhotoPare Shipped · App Store
Privacy-first iOS app for cleaning up photo libraries. Finds duplicates, blurry shots, and forgotten screenshots using Apple's Vision framework, one hundred percent on-device. No accounts, no uploads, no tracking SDKs. Free to scan, one-time $4.99 unlock for deletion.
Swift · SwiftUI · Vision
Prior Auth Assistant
Reference architecture for a HIPAA-shaped healthcare AI app. PostgreSQL row-level security, Fernet field-level PHI encryption, HMAC-chained audit log, prompt-injection hardening. Live demo.
Python · FastAPI · React
Obolus
Expense tracker for freelancers, rebuilt end-to-end in TypeScript. Express and Prisma API, Vue 3 front end, SQLite, with a test suite and CI.
TypeScript · Express · Vue
Laravel Outbox
Transactional Outbox pattern for Laravel. Persists events and queued jobs atomically with business writes, then replays them through a concurrent-safe worker with backoff and dead-letter.
PHP · Laravel · Reliability
More on GitHub
Web scrapers, data pipelines, smart contracts, a maze game, and other open-source work.
github.com/Dnakitare →
RECORD 0x0004 prev: e91a7c33b05f this: 2d6f8b14ce70
writing

Thinking out loud, in public.

May 2026 · Specs & decision records

Castellan: delegated authority for local AI agents

Six specifications and thirteen architectural decision records for a proof-of-concept on delegated authority in local AI agent systems, applied to industrial maintenance work-order triage. Written from the auditor's perspective. The thesis: an industrial buyer shouldn't have to trust the AI. They should have to trust the authority broker and the audit substrate, which are small, inspectable, and behave like things they already know how to evaluate.

Read on GitHub
RECORD 0x0005 prev: 2d6f8b14ce70 this: 9a05ef2c8d41
education

Where the credentials came from.

Temple University
MBA · Innovation Management & Strategy
2017 · Fox School of Business
Pomona College
BA · Politics & Economics
2010
RECORD 0x0006 prev: 9a05ef2c8d41 this: f70b3e9d6a25
contact

Let's talk.

Open to senior backend engineering roles, with staff-level scope at the right fit. Particular interest in healthcare SaaS, AI infrastructure, and compliance-regulated systems. Also happy to talk backend architecture, API design, or whatever you're building.
Open to senior & staff conversations
emaildnakitare@gmail.com githubDnakitare linkedinin/dnakitare
Konami unlock acknowledged. enter the maze