Independent engineer available for small, bounded remote projects.

Engineering evidence / project resume

• The Go parser bug that reserves memory for input it is about to reject — a defect class with a runnable demo, and why the obvious one-line fix is measurably a regression (a constant cap improved hostile input 6,463x while making a valid 1000-element list 2.36x worse; a proportional bound gives 7x with zero regression). Includes benchmarks against buger/jsonparser and miekg/dns.
• A green CI run is an input, not a conclusion
• How to build a dashboard that can say "I don't know"

allocguard — USD 19 via PayPal. A Go checker for the defect class in the writeup above: capacity reserved from untrusted input before that input is validated. Reports a site only when the count comes from outside the function and the fill loop can return early, so it stays silent on six of ten large Go repositories scanned. Ships with source (MIT), stdlib only, exits 1 on findings. Its low-precision recursion check is off by default, and the README says why.

Cash-First Opportunity Scorecard — USD 29 via PayPal. A 15-minute scorecard for deciding whether a bounty, paid writing call, or fixed-price gig is actually worth starting. Advertised prizes are not income.

Available for one new bounded milestone. The fastest starting point is a USD 300 diagnosis-and-fix milestone: reproduce one backend, API, automation, or data-pipeline defect; deliver the smallest verified correction; add a regression test; and provide a concise handoff. Scope and payment terms are agreed in writing before work begins.

Open a structured milestone request or request a scoped estimate by email.

The exact price is agreed from a written scope before work starts. A first milestone should have explicit inputs, acceptance criteria, and a reproducible verification path. I can work asynchronously and disclose any AI-assisted tooling used during delivery.

For deployment work, the first milestone can cover diagnosis, corrected build and runtime configuration, a staging deployment, health and smoke checks, and a rollback/runbook handoff. Production access and infrastructure charges are not required for the initial diagnosis.

• Source-grounded diagnosis before implementation
• Small diffs, automated tests, and explicit failure handling
• No production secrets or customer data needed for an initial milestone
• Clear distinction between verified results, assumptions, and limitations

Public repositories below show work across Python, TypeScript, Go, C/C++, data systems, automation, model tooling, and infrastructure.

For a scoped inquiry, use the structured request or email link above, or contact tzh476@gmail.com. Include the repository or system, desired outcome, available fixtures, deadline, and budget range. Do not send passwords, tokens, private keys, or regulated personal data.