🚀 Systems & Infrastructure Projects
Production architectures, bare-metal telemetry systems, mobile platforms, homelab clusters, and distributed container environments engineered for zero-trust resilience and complete operational sovereignty.
⭐ Featured Architectural Flagships
Quick-Scan Portfolio Highlights
High-impact production systems showcasing cross-disciplinary engineering across mobile operating environments, hardware security tokens, and multi-node fleet telemetry:
-
RPDev Mobile Ecosystem: Sovereign Android 16 Desktop
High-performance, privacy-first mobile operating environment. Decouples the 120Hz launcher desktop from contextual intelligence via Android’s high-speed AIDL IPC bridge (WINDOW_OVERLAY). Features zero telemetry, hardware Keystore AES256_GCM encryption, on-device SQLite caching, nested folders with cycle-safe graph traversal, and 9 extensible Hub modules.
Portals: Launcher • Feed • Repository • Wiki • CDN -
Infra Audit Engine: Continuous Multi-Node Drift Orchestrator
Automated multi-node hardware and config drift orchestrator compilingCURRENT_ENV.ymlacross OpenWrt routers, GPU compute nodes, and distributed Docker clusters. -
Hardware-Hardened Secret Management (FIDO2 + Age + Chezmoi)
Physical FIDO2 key derivation (age-plugin-fido2prf) binding symmetric encryption to hardware tokens with dual-recipient master recovery and zero plaintext exposure. -
kexecboot.xyz: Wireless Network Bootloader
Pre-OS WPA2/WPA3 Wi-Fi authentication, automatednetboot.xyzparsing, and direct in-memory Linux kernel kexec pivot. -
Unified Fleet Observability: Grafana Alloy & eBPF Telemetry
Consolidating multi-node container metrics, cgroup v2 PSI memory traces, and OpenTelemetry collector pipelines across edge and bare-metal nodes.
📱 Android Ecosystem & Mobile Systems
AOSP-based operating environment engineered for deterministic 120Hz rendering, zero telemetry, and contextual intelligence.
| Project | Description | Live Portals & Docs |
|---|---|---|
| **[[Projects/Android/index | RPDev Mobile Ecosystem]]** | Master architectural overview of the decoupled Android 16 home desktop environment. |
| **[[Projects/Android/RPDev_Launcher | RPDev Launcher]]** | Modern AOSP launcher with <35MB idle footprint, DataStore reactive flows, and cycle-safe nested folders. |
| **[[Projects/Android/RPDev_Feed | RPDev Feed]]** | Sovereign -1 screen companion replacing commercial tracking feeds with on-device RSS parsing and Keystore crypto. |
| **[[Projects/Android/RPDev_Feed_Modules | Hub Modules Ecosystem]]** | 9 pluggable card plugins distributed via Edge CDN for weather, telemetry, calendar, GitHub, Home Assistant, and Docker. |
| **[[Projects/Android/Samsung_DeX_Linux_Bridge | Samsung DeX Linux Bridge]]** | Low-latency edge bridge connecting mobile hardware to Linux workstations. |
🔒 Hardware Security, Cryptography & Bootloaders
Physical security token derivation, age encryption, pre-OS wireless network bootloaders, embedded cameras, and zero-trust bare-metal recovery.
| Project | Description | Security Primitives |
|---|---|---|
| **[[Projects/Hardware-Security/Hardware_Security_Key | Hardware-Hardened Secret Management (FIDO2 + Age)]]** | Physical FIDO2 key derivation binding symmetric encryption to hardware tokens with dual-recipient recovery. |
| **[[Projects/Hardware-Security/FIDO2_Security_Toolkit | FIDO2 Security Toolkit & Linux PAM MFA]]** | Hardware assertion toolkit implementing physical touch verification for sudo authorization and SSH residency. |
| **[[Projects/Hardware-Security/Kexecboot_Wireless_Bootloader | kexecboot.xyz: Wireless Network Bootloader]]** | Pre-OS WPA2/WPA3 Wi-Fi authentication, netboot.xyz parsing, and direct in-memory kernel kexec pivot. |
| **[[Projects/Hardware-Security/Embedded_Linux_Camera_Firmware | Embedded Linux Camera Firmware & Edge AI Vision]]** | Custom Ingenic SoC Linux kernel, RTSP pipelines, and Qdrant vector scene intelligence. |
| **[[Projects/Hardware-Security/Ventoy_Tech_Super_Tool | Ventoy Tech Super Tool: Multi-Boot USB Configuration]]** | Multi-boot zero-trust USB environment for live digital forensics, incident triage, and bare-metal provisioning. |
🌐 Embedded Networking, Edge Routing & IoT
Custom OpenWrt kernel compilation, high-speed NFS storage shares, SDR radio frequency demodulation, and zero-NAT L2 container fabrics.
| Project | Description | Network Protocols |
|---|---|---|
| **[[Projects/Networking-and-IoT/OpenWrt_Kernel_NFS_Manager | OpenWrt Kernel NFS Server Manager]]** | LuCI web interface and UCI bridge for wire-speed Linux kernel nfsd daemons on OpenWrt routers. |
| **[[Projects/Networking-and-IoT/OpenWrt_ASU_Image_Builder | OpenWrt ASU Custom Image Builder]]** | Automated on-demand firmware compilation via FastAPI, RQ workers, and isolated ImageBuilders. |
| **[[Projects/Networking-and-IoT/OpenWRT_Blackhole_Webserver | OpenWRT Blackhole Webserver & Honeypot]]** | Ultra-lightweight edge service serving zero-byte HTTP 200 responses to hostile scans. |
| **[[Projects/Networking-and-IoT/OpenThread_Border_Router | OpenThread Border Router Telemetry Poller]]** | 802.15.4 Thread mesh network polling daemon streaming metrics to MQTT and Grafana. |
| **[[Projects/Networking-and-IoT/ADSB_Aviation_SDR_Telemetry_Pipeline | Dual-Band ADS-B & UAT Aviation SDR Pipeline]]** | Demodulating 1090MHz Mode S and 978MHz UAT flight telemetry with RTL-SDR and WebGL radar. |
| **[[Projects/Networking-and-IoT/SDR_and_RF_Exploration | SDR & RF Telemetry Exploration]]** | Software-Defined Radio research capturing municipal, weather satellite, and ISM band radio frequencies. |
| **[[Projects/Networking-and-IoT/Layer2_Containerization | Layer 2 Virtualization & Non-NAT IPAM]]** | Macvlan/IPvlan Docker network fabric eliminating NAT port mapping bottlenecks. |
🧪 Homelab & Infrastructure Cluster
Bare-metal server fleet orchestration, self-hosted deployment engines, automated document corpus crawling, and NVMe tiering.
| Project | Description | Scope |
|---|---|---|
| **[[Projects/Homelab/DocIngest | DocIngest Documentation & Knowledge Suite]]** | High-performance documentation crawler, markdown converter, and MCP server. |
| **[[Projects/Homelab/Coolify | Coolify Self-Hosted PaaS Engine]]** | Production PaaS deployment, Traefik ingress, and isolated container orchestration. |
| **[[Projects/Homelab/Coolify_Project_Plan | Coolify Implementation & Staging Plan]]** | Resource baselines, benchmark comparisons, and migration checklists. |
| **[[Projects/Homelab/Current_Environment | Current Fleet Topology (CURRENT_ENV.yml)]]** | Hardware specifications, IPAM tables, and interface topologies across active nodes. |
| **[[Projects/Homelab/Hardware_Storage_Tiering | Spatial Storage Tiering]]** | Tiered storage architecture routing high-IO workloads to NVMe and backups to bulk storage. |
📊 Distributed Infrastructure, Telemetry & CI/CD
Automated configuration drift detection, Grafana Alloy eBPF fleet telemetry, self-hosted runner fleets, and multi-arch OCI build engines.
| Project | Description | Tooling & Pipeline |
|---|---|---|
| **[[Projects/Infrastructure-and-CICD/Infra_Audit_Engine | Infra Audit Engine: Continuous Drift Orchestrator]]** | Automated Python orchestrator querying bare-metal hosts and OpenWrt to compile CURRENT_ENV.yml. |
| **[[Projects/Infrastructure-and-CICD/Unified_Fleet_Observability_Alloy | Unified Fleet Observability: Grafana Alloy & eBPF]]** | Multi-node container metrics, cgroup v2 PSI memory traces, and OpenTelemetry collector pipelines. |
| **[[Projects/Infrastructure-and-CICD/Self_Hosted_CICD_Build_Fleet | Self-Hosted CI/CD Build Fleet]]** | Scalable GitHub Actions runner fleet with pre-baked dependencies and isolated runner containers. |
| **[[Projects/Infrastructure-and-CICD/Builder_Manager_OCI_Pipeline | Builder Manager: Multi-Arch OCI & Cache Engine]]** | Automated Docker build engine for linux/amd64 and linux/arm64 with distributed cache warmups. |
🛡️ Defensive Security, SIEM & Threat Deception
Collaborative threat intelligence, Wazuh and CrowdSec SIEM, perimeter tarpits and honeypots, and privacy browser extensions.
| Project | Description | Security Controls |
|---|---|---|
| **[[Projects/Defensive-Security/Wazuh_CrowdSec_SIEM | Wazuh + CrowdSec Collaborative SIEM]]** | Unified SIEM combining Wazuh file integrity monitoring with CrowdSec community IP blocklists. |
| **[[Projects/Defensive-Security/Perimeter_Deception_and_Tarpits | Perimeter Deception, Honeypots & SSH Tarpits]]** | Endlessh-Go tarpits and Cowrie honeypots trapping automated botnets and extracting IOCs. |
| **[[Projects/Defensive-Security/DNS_Forge_Firefox_Addon | DNS Forge: NextDNS Firefox Add-on]]** | Manifest V3 browser privacy extension with real-time SSE stream log parsing and blocklist correlation. |
📋 Governance & Policies: Enterprise Standards
Legal Notice & Non-Liability Disclaimer
Reference Models & Educational Examples Only: All policies, standards, frameworks, procedures, and architectural artifacts provided within this section are shared strictly as informational, educational, and reference examples demonstrating enterprise documentation engineering. Under no circumstances does Richard P. Dissell, RPDev, or affiliated contributors assume legal liability, fiduciary responsibility, regulatory accountability, or duty of care for their governance, implementation, omission, or operational impact. These examples do not constitute formal legal counsel, statutory advice, or certified regulatory compliance determinations. Any organization or individual adapting or referencing these materials must perform their own due diligence and consult licensed legal and cybersecurity compliance counsel.
A comprehensive suite of 18 modernized enterprise IT and cybersecurity policies, leadership charters, and operational frameworks aligned to NIST CSF 2.0, ISO/IEC 27001:2022, and SOC 2 Type II.
| Category / Tier | Highlights & Core Frameworks | Primary Focus |
|---|---|---|
| 🔒 Tier 1: Zero Trust & Security Baseline | [[Projects/Governance-and-Policies/Information_Security_Policy | Information Security Policy]], [[Projects/Governance-and-Policies/Infrastructure_Hardening_Policy |
| ⚙️ Tier 2: Engineering & Change Lifecycle | [[Projects/Governance-and-Policies/Software_Development_Life_Cycle | SDLC Policy]], [[Projects/Governance-and-Policies/IT_Change_Management_Policy |
| 🚨 Tier 3: Resilience & Incident Response | [[Projects/Governance-and-Policies/Incident_Response_Plan | Incident Response Plan]], [[Projects/Governance-and-Policies/Disaster_Recovery_Plan |
| 🤖 Tier 4: Frontier AI Safety & Culture | [[Projects/Governance-and-Policies/AI_Augmentation_for_Users | AI Augmentation Guidelines]], [[Projects/Governance-and-Policies/Security_Awareness_Training |
| 🌐 Tier 5: Supply Chain & Physical Security | [[Projects/Governance-and-Policies/Vendor_Management_Policy | Vendor Management]], [[Projects/Governance-and-Policies/Vendor_and_Resource_Management |
🔗 Related Architecture & Ecosystem Portals
- Security & AI Research: Read applied research and engineering field guides at blog.iamrp.dev ↗.
- Master Resume: Review production credentials on Curriculum Vitae & Master Resume.
- Ecosystem Wiki: Explore end-user manuals and developer guides at wiki.iamrp.dev.