Kennedy Chinwo
database
Backend architecture
Go services with Gin & GORM, Node/TS gateways, REST APIs, microservices patterns, PostgreSQL, and Firebase for durable, high-throughput backends.
Port Harcourt · Open to opportunities
Systems that hold under real load.
Software engineer and security researcher building secure product platforms, intelligent automation, and on-chain agent infrastructure — with clean architecture and measurable outcomes.
Status
Available for roles
Currently
Sui agent treasuries, AI gateways & cloud-native backends
0
Shipped projects
Sui Move
On-chain Web3
RAG / LLM
Production AI
Security
Cybersecurity degree
Capabilities
Depth across the full product surface
High-throughput APIs, typed frontends, production AI, and Sui Move protocols that respect latency, cost, and security.
layers
Fullstack product UI
Next.js 15+, React 19, TypeScript, and Tailwind — responsive PWAs, wallets, and dashboards with production-grade UX and type safety.
psychology
AI & LLM systems
RAG pipelines, embedding search, Groq/Llama inference, multi-provider routing, and real-time AI workflows with citation and safety controls.
token
Web3 & Sui Move
Sui-native smart contracts, programmable agent treasuries, on-chain spend policies, wallet auth via Mysten dapp-kit, PTBs, and hybrid dApps.
account_tree
AI × on-chain settlement
Gateways that settle LLM spend on-chain (SEAL / Otter): non-custodial caps, velocity pause, multi-provider routing, and agent SDKs.
shield
Security mindset
OAuth/JWT, secure API design, secret sanitization before LLM calls, capability-based ownership on Sui, and threat-aware engineering.
Selected work
Full project index
Case studies worth opening
Shipped & live
Social dApp
DSpace
SuiPod Chat — hybrid decentralized collab: wallet identity, on-chain pods, Firebase realtime messaging, and in-chat SUI transfers.
Case study AI · CADCgen
Natural language → validated STEP/STL CAD files. Groq specs, Pydantic guardrails, deterministic CadQuery geometry.
See live preview SaaS · AttendancePresent
Geo + face-verified lecture attendance. Next.js and Firebase with on-device recognition — faces never leave the browser.
See live previewAI · Fullstack · Tools
01 · Fraud detection
Asguard
Real-time transaction fraud pipeline combining rule-based scoring with AI risk assessment. Flags high-risk events and generates natural-language summaries at sub-second latency.
Read architecture notes
02 · Enterprise RAG
Azeru
Document intelligence that ingests PDFs into chunked, embedded knowledge bases. Semantic retrieval powers citation-backed answers for knowledge-heavy workflows.
Read architecture notes
03 · Real estate SaaS
Hauser
Property marketplace for the Nigerian market with role-aware onboarding, dynamic listings, real-time Firestore sync, and click analytics for premium tiers.
Read architecture notes
Verification
Vouch
Point your phone at a pack: NAFDAC/PPB registry verdicts with vision-AI reads, hazard alerts and community reports.
See live preview EnterpriseAbsolute Energy
Corporate website for an oil & gas enterprise client — company profile, service lines and enquiry capture.
See live previewEight shipped systems — most cards carry a live, scrollable preview of the real site.
Browse all projects
Security research
I take malware apart — and publish the whole record
B.Tech Cybersecurity (FUTO). Three investigations of real specimens — timeline, mechanism, detection — published live with source, IOCs and YARA rules. No CTFs, no toy binaries.
Glossary
- VB6
- the 1998 Windows runtime it was built on.
- Replicator
- a worm that self-copies with no command server.
- Creation-time preservation
- keeping a file’s original timestamp while rewriting it.
Incident report · VB6 replicator
Every Executable Was a Copy
92EXEs replaced
11sInfection window
6 yrsQuiet persistence
Glossary
- APK
- the Android package; 64.2 MB torn down here.
- Native libraries
- compiled C/C++ modules — NGL ships none.
- Firing slot
- a scheduled timer that pushes one fake message.
RE dossier · Android app
Manufactured Longing
64.2 MBAPK torn down
59.3 MBDecompiled JS
24Firing slots
Glossary
- Ad SDK
- an ad library that shares your device identifiers.
- Telemetry
- device fields shipped off the handset.
- Behavioural score
- a label like “Reply likely” on a profile.
RE dossier · Dating & ad-tech
The Hidden Passengers
13Ad & tracking SDKs
129Telemetry fields
37Permissions
Experience
Professional timeline
Fullstack Developer Intern
Dmiebi IT Ventures
- Architected Go backend services and REST APIs for high-throughput data operations.
- Shipped TypeScript web apps with cloud-native architecture and real-time data sync.
- Implemented OAuth/JWT authentication and AI features via external LLM APIs.
B.Tech in Cybersecurity
Federal University of Technology, Owerri (FUTO)
- Secure system design, ethical hacking foundations, and defensive engineering — grounding product work in threat models and least-privilege defaults.
Stack snapshot
Full technology map
Tools I use in production
Backend
- Go (Gin, GORM)
- Node.js
- REST / microservices
- PostgreSQL · Firebase
Frontend
- Next.js 15+
- React 19
- TypeScript
- Tailwind CSS
AI
- RAG & embeddings
- Groq / Llama 3–4
- Semantic search
- Multi-provider LLM APIs
Web3 · Sui
- Move smart contracts
- Mysten dapp-kit · PTBs
- Agent treasuries · x402
- Wallet auth · settlement
Ops & security
- Docker · CI/CD
- OAuth / JWT
- API hardening
- Solidity · Storj
Beyond the code
Hobbies & interests
Security research lives in its own section above. The other habit that sharpens what I ship: making expensive tooling free.
sync
Free-alternative tinkerer
I port paid and proprietary tooling to open, free equivalents — agent workflows from Claude Code to OpenCode, the Cyber Strike security harness ported to OpenCode, and Koe’s native MCP server built as a free alternative to ElevenLabs, because paying for API access should never be the entry ticket.
Contact
Let’s talk about the next role
Open to fullstack, backend, AI, and Web3 roles. Happy to walk through architecture on Asguard, Cgen, Present, Vouch, or any system in the portfolio.