Engineering projects

Offline-first LLM evaluation & regression testing for AI apps and agents. Prompt injection, groundedness, secret redaction, JSONL suites and CI quality gates.

Durable TypeScript workflow runtime with DAG execution, PostgreSQL state, distributed workers, leases, retries, idempotency, OpenTelemetry and health checks.

Production-grade distributed service control plane in Go with service discovery, TTL leases, health-aware load balancing, distributed jobs, observability, and fault-tolerance.

Production-style .NET 10 cargo pricing API with layered architecture, EF Core, SQL Server, Hangfire, Docker, automated tests and health checks.

Open-source multilingual Windows ERP/CRM built with .NET 8, WPF, MVVM, SQLite, PDF/Excel workflows, RTL Arabic UI, backups and a Windows installer.

Policy-driven AI software-engineering control plane for safe multi-agent development.

Security-focused multilingual inventory system with Flask, RBAC, CSRF protection, audit trails, safe uploads, backups, Docker and automated tests.

Educational TensorFlow/Keras CNN for chest X-ray NORMAL vs PNEUMONIA classification with model card, reproducibility protocol, evaluation and CI validation.

Browser-based course schedule builder with collision detection, automatic group adjustment, privacy-first local processing, PDF export and automated tests.

Arabic-first RTL marketing agency website with responsive multi-page UX, SEO metadata, GitHub Pages deployment and automated link/asset validation.

Responsive multi-page restaurant web experience covering menu discovery, ordering, account flows, customer profiles and a complete conversion-oriented journey.

Recruiter-facing software engineering portfolio showcasing backend systems, applied AI/ML, security hardening, CI/CD and production-oriented project evidence.

Java 21 event-sourced double-entry ledger engine with PostgreSQL durability, idempotent posting, optimistic concurrency, transactional outbox, and deterministic replay.

High-performance adaptive edge gateway in Rust with health-aware routing, circuit breakers, rate limiting, load shedding, request signing, observability, and resilience policies.

Private local-first document catalog in Swift with deterministic indexing, AES-256-GCM encrypted metadata, Apple Keychain protection, security-scoped access, tags/search, SHA-256 duplicate detection, and no network dependency.

.NET 10 durable event-processing engine with bounded partitioning, PostgreSQL journaling, fenced leases, retries/dead-lettering, Testcontainers and CodeQL.

Linux eBPF telemetry agent in C with CO-RE/libbpf, exec/open/connect tracing, PID/UID filtering, NDJSON output, runtime smoke testing, sanitizers and CodeQL.

Privacy-first observability and trace collection platform for AI coding agents using OpenTelemetry, secure data scrubbing, and cloud-native pipelines.

Offline-first synchronization engine in Kotlin for field applications, with bounded push/pull, cursor checkpoints, deterministic conflict policy, SQLite durability, restart recovery, and CodeQL.

Kotlin/JVM local-first replicated sync engine with CRDT convergence, vector clocks, bounded coroutine reconciliation, SQLite durability, deterministic restart recovery, and CodeQL.

Offline-first Flutter incident response workspace with durable local state, explicit notification boundaries, deterministic synchronization, and conflict-safe revision handling.

C++20 vector search engine with exact and graph-based ANN search, L2/cosine metrics, validated persistence, concurrency, recall benchmarking, sanitizers and CodeQL.

KARZOUN-X — Open research on resource-aware, safety-gated local AI for autonomous spacecraft fault diagnosis under delayed or unavailable Earth communication.

GitHub profile source for Mahmoud Karzoun, highlighting backend systems, distributed runtimes, applied AI, security-minded engineering and open-source work.