Aislam Camarini. I build AI systems and the automation around them, mostly in Python and TypeScript, mostly in public. aislam.dev shows the work; this account holds the code.
noema — adaptive learning platform. You feed it your material; it tracks what you know, schedules review with FSRS and answers only from sources it can cite. FastAPI, Next.js, Postgres + pgvector. Active. AGPL-3.0.
isla — virality radar. Pulls public signals (Google Trends, Wikipedia, Bluesky, Hacker News, RSS, YouTube, Twitch, Reddit), measures velocity between real samples and says why something is rising. It won't report a number it hasn't measured. Python, SQLite, REST + SSE. MIT.
forge — acquisition engine for autonomous advertising. Spending limits are code, not prompts: every model proposal is validated and passes a sentinel before it can touch money. Capital guard, decision ledger and sentinel are built and tested; connectors and persistence come next. TypeScript. Apache-2.0.
isahat — security auditor for vibe-coded web apps and APIs. Safe-by-default scanner (headers, cookies, CORS, redirects, XSS, SQLi, traversal, API surface) with a CLI, a local API and a desktop app. SARIF output. Python. Alpha. Apache-2.0.
usina — private. The creative-intelligence platform isla came out of and forge plugs into.
Python and TypeScript. FastAPI, Next.js. Postgres + pgvector, Redis, SQLite. Anthropic, OpenAI and Ollama behind one provider interface. Docker, GitHub Actions, Vercel.
A habit, not a title. forge and isahat have threat models. noema's logger redacts key shapes, with tests. CI runs gitleaks, pip-audit and a CycloneDX SBOM. Every public repo has Dependabot, private vulnerability reporting and a SECURITY.md.