I like backend work that gets close to real infrastructure: Kubernetes resources, auth boundaries, storage, networking, CI, and the quiet glue that turns a feature into something maintainers can actually merge.
- Platform backends: APIs that manage real cluster resources, not just rows in a database.
- Kubernetes edges: Services, Ingress, cert-manager, RBAC, StatefulSets, storage, pod logs, and exec paths.
- Open-source maintenance: small fixes with a reproduction, a reason, and tests when behavior can regress.
- Agent infrastructure: memory, retrieval, tool calls, and the backend paths agents need when they leave the demo.
- I read the surrounding code before touching the line that looks guilty.
- I prefer boring patches in the best sense: narrow, explainable, and easy to review.
- I enjoy the part where a vague bug becomes a concrete failing path.
- I tend to build bigger ideas in a fork first, then upstream the pieces that have earned their shape.
- I care about the last 20%: names, error paths, tests, and whether the next maintainer can follow the trail.
The number I watch on GitHub is not stars. It is the patches a maintainer read, trusted, and merged — 39 so far, across 7 upstream repositories.
casosorg/casos · 31 merged
A Kubernetes-flavored local cloud OS, and my main upstream: App Store installs, worker nodes, certificates, RBAC, Services, storage, and the CI that guards them.
All 31 merged PRs
| PR | Change | Merged |
|---|---|---|
| #142 | fix: repair Helm release upgrade flow | 2026-08-13 |
| #140 | fix: only rewrite a WSL worker's apiserver address when it is unreachable | 2026-08-09 |
| #141 | fix: fix failed UI test about "Add Local WSL" button | 2026-08-09 |
| #118 | feat: add control plane egress policy | 2026-08-06 |
| #116 | feat: strengthen Helm compatibility validation | 2026-08-01 |
| #115 | fix: retry Helm downloads and extend install timeout | 2026-08-01 |
| #114 | fix: stabilize app store install lifecycle | 2026-08-01 |
| #109 | fix: harden app store install defaults | 2026-08-01 |
| #106 | feat: provide default application access data plane | 2026-08-01 |
| #111 | fix: make implicit image pull policy opt-in | 2026-07-25 |
| #108 | fix: validate helm chart readiness and compatibility | 2026-07-25 |
| #105 | fix: stabilize worker DNS bootstrap | 2026-07-25 |
| #103 | feat: persist helm install lifecycle | 2026-07-24 |
| #110 | fix: pin cluster images in CI | 2026-07-23 |
| #102 | feat: add managed flannel overlay networking | 2026-07-21 |
| #96 | fix: bootstrap local app store platform dependencies | 2026-07-09 |
| #97 | fix: improve app store install flow diagnostics | 2026-07-08 |
| #94 | fix: finish worker deployment after delayed node readiness | 2026-07-08 |
| #93 | fix: normalize helm kube version compatibility | 2026-07-08 |
| #95 | fix: regenerate mismatched apiserver CA artifacts | 2026-07-08 |
| #91 | fix: stabilize Helm App Store installs | 2026-07-04 |
| #90 | fix: run App Store UI regression tests with worker node | 2026-07-04 |
| #89 | fix: refresh apiserver serving certificate for changed IPs | 2026-07-04 |
| #86 | fix: add Playwright UI smoke and worker-node deploy/repair regression tests | 2026-06-30 |
| #84 | feat: add backend e2e ui tests | 2026-06-26 |
| #74 | feat: add automatic worker node deployment | 2026-06-24 |
| #72 | fix: restore local access for NodePort services | 2026-06-21 |
| #73 | feat: add PVC mount support for StatefulSets | 2026-06-21 |
| #71 | fix: support ExternalName services in service management | 2026-06-20 |
| #70 | fix: reject invalid roleRef kind for cluster role bindings | 2026-06-19 |
| #69 | fix: require sign in for protected API endpoints | 2026-06-19 |
AstrBotDevs/AstrBot · 3 merged
An agentic chat platform — security and robustness fixes at the upload, image, and HTTP-client edges.
| PR | Change | Merged |
|---|---|---|
| #7773 | fix: align OpenAI http_client with SDK httpx | 2026-04-30 |
| #7807 | fix(core): downscale oversized images | 2026-04-26 |
| #7751 | fix: prevent path traversal in file uploads | 2026-04-24 |
Small, sharp fixes in tools I actually use.
| Repository | PR | Change | Merged |
|---|---|---|---|
| vllm-project/vllm | #41357 | [Bugfix] Prevent stale multiproc RPC deadlines from becoming unbounded waits | 2026-07-29 |
| casosorg/kine | #1 | fix: keep Kine MySQL revisions ordered | 2026-07-19 |
| MoonshotAI/kimi-cli | #2132 | fix(acp): replay session history on load | 2026-05-28 |
| libra-tools/libra | #364 | feat(clean): add -d, -x, -X, --exclude flags | 2026-05-08 |
| deepseek-ai/awesome-deepseek-agent | #27 | Add WorkBuddy DeepSeek V4 guide | 2026-04-30 |
Updated nightly by a small GitHub Actions workflow.
- casosorg/casos#142 - fix: repair Helm release upgrade flow (merged 2026-08-13)
- casosorg/casos#140 - fix: only rewrite a WSL worker's apiserver address when it is unreachable (merged 2026-08-09)
- casosorg/casos#141 - fix: fix failed UI test about "Add Local WSL" button (merged 2026-08-09)
- casosorg/casos#118 - feat: add control plane egress policy (merged 2026-08-06)
- casosorg/casos#116 - feat: strengthen Helm compatibility validation (merged 2026-08-01)
- casosorg/casos#115 - fix: retry Helm downloads and extend install timeout (merged 2026-08-01)
- casosorg/casos#114 - fix: stabilize app store install lifecycle (merged 2026-08-01)
- casosorg/casos#109 - fix: harden app store install defaults (merged 2026-08-01)
- casosorg/casos#106 - feat: provide default application access data plane (merged 2026-08-01)
- vllm-project/vllm#41357 - [Bugfix] Prevent stale multiproc RPC deadlines from becoming unbounded waits (merged 2026-07-29)
| Repository | Why it stays open |
|---|---|
| TencentDB Agent Memory | Layered memory, hybrid retrieval, and agent memory as backend infrastructure. |
| casdoor/casdoor | Auth, OIDC, and identity systems — platform backends eventually meet permissions. |
| apache/casbin-pycasbin | Policy-engine reading ground for RBAC details and permission-model thinking. |
I keep this profile less like a CV and more like a workbench. The interesting part is not a label; it is the trail of small decisions that make a system less mysterious than it was yesterday.
