Skip to content
View firegiant9000's full-sized avatar

Block or report firegiant9000

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
firegiant9000/README.md

Arlo Kharod

Software engineer at Adaptive Software LLC, where I work on healthcare operations software: C#/.NET APIs, React and TypeScript front ends, SQL Server and PostgreSQL, Azure. That work lives in private repositories. What is here is what I build on my own time, and it is where I go deeper on the things I care about at work: backend design, data integrity, platform engineering and security.

Projects

PlanPal Calendar with a one-way sharing layer. Expo + Next.js + Supabase monorepo. OpenAPI contract enforced in CI, row-level security tested per table, deploy verification that fails on a no-op deploy. live demo
TomeStack Local-first Windows desktop app (.NET 10, WPF + WebView2, React) for tabletop character rules. Traceable rules engine, insert-only content revisions, PDF import with OCR into reviewable drafts. 437 .NET tests, 14 e2e flows. solo
FairTix Ticketing under on-sale load. Java 21 / Spring Boot. PostgreSQL pessimistic seat holds with deadlock-safe ordering, SSE waiting room on Redis, fraud scoring with step-up auth, signature-verified Stripe webhooks, OWASP and Trivy in CI. team project, lead author
B.O.A.R.D Real-time collaborative whiteboard on Expo + Firebase. Plan limits enforced in Cloud Functions and rules, metered AI gateway, idempotent and ordered Stripe webhook handling. course origin, solo continuation
Hacker Tracker Threat-intelligence and asset-risk platform for SMBs: version-aware CPE→CVE matching with a CI calibration gate, KEV/EPSS prioritisation, a read-only Go host agent with per-host tokens and replay protection. FastAPI, React, PostgreSQL. six-person capstone, lead author

How I work

Contract first, tests that fail for the right reason, and READMEs that say what is actually built. Every repo above has a status section that is honest about what is not done.

LinkedIn · arlo.kharod@gmail.com

Pinned Loading

  1. FairTix FairTix Public

    Concert ticketing platform built for on-sale load: SSE waiting room, PostgreSQL pessimistic seat holds, fraud scoring with step-up auth, signature-verified Stripe webhooks. Java 21 / Spring Boot 4 …

    Java 3

  2. B.O.A.R.D B.O.A.R.D Public

    Collaborative whiteboard on Expo + Firebase, kept as a frozen portfolio showcase. Server-enforced plan limits (Cloud Functions + rules), rules-tested workspace isolation, idempotent and order-safe …

    TypeScript

  3. PlanPal PlanPal Public

    Calendar app with a one-way social sharing layer. Expo + Next.js + Supabase in a pnpm/Turborepo monorepo, with a contract-driven Edge Function API.

    TypeScript

  4. Senior-Cybersecurity-Project Senior-Cybersecurity-Project Public

    Hacker Tracker: cyber threat intelligence and asset-risk platform that correlates software inventory with CVE, CISA KEV and EPSS data to prioritize remediation for SMB environments. FastAPI, React,…

    Python

  5. TomeStack TomeStack Public

    Local-first Windows desktop app for building and playing fifth-edition characters and homebrew, offline, with a source-aware rules engine. .NET 10 (WPF + WebView2), React/TypeScript, SQLite.

    C#