compliance-auditing

A high-fidelity, read-only internal network security assessment toolkit for Linux and Windows infrastructure. Employs a zero-mutation, default-deny architecture to safely capture and structure risk telemetry without system modifications.

Centralized documentation of hands-on security labs, compliance audits, and exploit writeups

Enterprise Infrastructure Management System (EIMS) — automated OCR hardware asset tracking, continuous Windows log diagnostic & rules-based compliance auditing platform. Built with an Async Hybrid Modular Monolith architecture (FastAPI + PostgreSQL + Redis). [Source-Available / All Rights Reserved]

NIST SP 800-171 Compliance Scanner

Agentic Regulatory Intelligence Architecture (ARIA) — An OpenEnv-compliant framework for benchmarking AI agents against complex GDPR, CCPA, and HIPAA compliance gaps.

Enterprise-grade automation framework, self-healing runtime, and network optimization templates to force NVIDIA RTX hardware acceleration (Pro 6000 & RTX 50 Series) across Carestream / Kodak clinical imaging workstations.

A deterministic GenAI compliance workstation & 4-tier risk classifier based on HK DPO Guideline. / 基於香港數字辦指引的生成式 AI 決定性合規審計與風險分級沙盒。

An enterprise-scale, asynchronous compliance auditing and regulatory drift detection platform. Leverages Next.js, FastAPI, and Qdrant to ingest organizational policies, index logical clauses semantically, and execute agentic delta-audits against incoming regulations using Gemini.

Local Python RAG system for HK DPO Guideline alignment with ISO 42001 audit trail. / 基於香港數字辦指引的純地端 RAG 智能法規檢索與 ISO 42001 密碼學審計工作站。