03 / Projects

Research tools & engineering

Open-source contributions, research infrastructure, and engineering projects.

Open Source

Contributions, maintained repositories, and infrastructure for reproducible research.

Pull requestSubmitted · not merged (2026-09-09)

microsoft/PyRIT

External contribution PR #2538 adds API-key generation and completion probes to the Garak scenario family.

Contribution: Submitted the scenario, fixed corpora, CredentialLeakScorer extensions, tests, and documentation. The implementation distinguishes credential-shaped values from public identifiers and excludes request echoes and supplied test fragments.
Result: The code diff and test notes are public. The contribution is submitted but unmerged; submission alone does not establish maintainer endorsement or validation against live targets.

RepositoryPersonal repository · source available

hey-Chloe/MiniClaudeCode

A personally maintained coding-agent reference implementation focused on execution boundaries, tool events, checkpoints, and evaluation.

Contribution: Published a bounded control loop, tool registration and policy interfaces, session persistence, trajectory attribution, and evaluation scripts. Third-party training frameworks carry separate attribution.
Result: Source, controlled reports, and test entry points are available. Offline harness validation is distinct from real-model task solving; the repository currently grants no additional open-source license.

InfrastructurePersonal repository · research infrastructure

hey-Chloe/KAI-Offline-RecSys-Lab

Provenance ledgers, frozen configurations, evaluation reports, and portable experiment views built around public data.

Contribution: Connect retrieval, reranking, calibration, and paired statistics under one offline protocol, with synthetic-path reproduction, public-report checks, and a static Playground.
Result: Reports distinguish public-data experiments, synthetic integration checks, ANN systems measurements, and local serving rehearsals, without presenting offline findings as online business gains.

AI systems and full-stack tools, from implementation to operation.

2026Agent UI / Vue / FastAPI / SSE

A Chinese-language agent workspace that brings plans, tool calls, approvals, code diffs, tests, and checkpoint recovery into one traceable workflow.

Problem: Make agent execution, file changes, and verification outcomes observable and distinct.
Ownership: The personal repository's Studio adapter and interface reuse MiniClaudeCode's native execution engine. The public version replays recordings; the local version connects to the actual runtime.
Outcome: A local workspace, static replays, and a small online evaluation distinguish execution ending, functional correctness, and final verification, while retaining failures caused by permissions and interpreter selection.

2026Static analysis / Semgrep / FastAPI / Vue

A static-analysis workflow for PHP, Python, and Java: rule scanning, vulnerability explanations, AI repair suggestions, rescanning, and history.

Problem: Separate an AI repair suggestion from scanner findings, with inspectable evidence before and after a change.
Ownership: The personal repository connects language and rule selection, scan records, AI suggestions, and Patch Verify across the frontend and backend. Detection uses Semgrep and existing rules.
Outcome: Scanning, AI suggestions, and repair checks form a traceable workflow with a demo and scan history. FIXED means the current rule no longer matches; coverage depends on the rules used.