Skip to content
View cgfixit's full-sized avatar

Block or report cgfixit

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
cgfixit/README.md

Chris Grady

Systems & Solutions Engineer
Atlanta, GA · Infrastructure · Security · Applied AI

Website · LinkedIn · Email

Projects

CyClaw · offline-first local AI

Local knowledge-base Q&A with retrieval before generation, plus an optional governed coding path for real repos. Write and cloud paths ship off.

  • Hybrid semantic + keyword retrieval; LangGraph handles confirmation and audit steps on the request path.
  • Optional coding harness stages patch → verify → human approve → push → draft PR.
  • Audit logs and integrity checks; accounts and memory are available but disabled by default.

Stack: Python · FastAPI · LangGraph · ChromaDB · BM25/RRF · Ollama · SQLite · MCP
Architecture · Setup · Tests

UI demo · Screenshots

CyClaw-Net-Viewer · macOS process egress

TCPView-style desktop app and CLI for macOS: which processes own which TCP/UDP endpoints. Built to watch egress while developing CyClaw. Crate/binary: netboard.

  • Process, PID, IPv4/IPv6 endpoints, TCP state, and an off-box filter.
  • Color-coded connection events; DNS labels optional (off by default); CSV export.
  • egui GUI + CLI; universal Apple Silicon / Intel packaging.

Stack: Rust · egui/eframe · macOS libproc
Build · Design · Tests

CG-agent-harness · loopback coding harness

Rust port of CyClaw’s coding console and real-repo pipeline — without RAG or the rest of the CyClaw stack. Loopback-only; write gates ship closed.

  • Browser console on 127.0.0.1 against a local model (Ollama by default).
  • Pipeline: clone → plan → patch → sandbox verify → human decide → commit → push → draft PR.
  • HTTP process reaches the pipeline only by spawning a child (src/shim); missing API key fails closed.

Stack: Rust (Learning currently) · axum · tokio · cap-std
README · Invariants · Setup

Veeam YARA Scanner · recovery inspection

PowerShell + YARA for scanning mounted recovery data for ransomware-related indicators before it returns to service.

  • Tor / I2P / Freenet-oriented rules with context.
  • JSON findings, matched strings, and scan logs for recovery workflows.
  • Pester coverage for scanner logic and mocked Veeam paths; YARA fixtures for hits and exclusions.

Stack: PowerShell · YARA · Veeam · Pester
Scanner · Rules · Tests

Veeam Proxy Maintenance · patch windows

Coordinates VMware backup proxies around SCCM/ConfigMgr maintenance from VBR or a management host.

  • Drain: disable proxies, wait for active tasks, stop services.
  • Restore: restart services and re-enable proxies post-window.
  • Timeouts, logs, -WhatIf/preview support, SCCM-aware exit codes.

Stack: PowerShell · Veeam · SCCM/ConfigMgr · WinRM · VMware
Implementation · Tests

More projects

Project What it demonstrates
Veeam HealthCheck Simplifier Python analysis of CSV/JSON health exports into reports, PowerShell remediation previews, and ticket payloads. Optional Salesforce/Slack delivery.
Insight Extractor Python NLP: regex, dynamic keywords, and transformer scoring to turn long text into structured security insights.
AI Agent Instruction Templates Templates for source grounding, version checks, tool scope, and escalation (incl. model-specific variants).
Systems Administration Handbook Windows / Linux / macOS references (2026), plus Docker. Windows web app.
Polymarket Mimic Trader Async Python research bot with scoring, exposure limits, and circuit breakers. Paper mode only; live trading is disabled.
Scrape-n-Email Python scrape + email digests with retries, CSV formula escaping, typed config, and offline tests.

Get in touch

Open to systems/solutions engineering, infrastructure automation, agentic engineering, forward deployed engineering, security tooling, and applied AI roles.

contact@cgfixit.com · LinkedIn · Website

Pinned Loading

  1. CyClaw CyClaw Public

    CyClaw is a secure, offline-first local AI agent built on three invariants: RAG-first retrieval, LangGraph topology as security policy - https://bit.ly/CyClaw-Demo

    Python 6

  2. sccm-veeam-proxy-patching sccm-veeam-proxy-patching Public

    Veeam-VBR PowerShell + SCCM: Prevent backup job failures during patch windows. SCCM-integrated or can be ran as standalone from VBR

    PowerShell

  3. CyClaw-Net-Viewer CyClaw-Net-Viewer Public

    macOS TCP/UDP endpoint viewer in Rust. Built to monitor/verify no egress on CyClaw.

    Rust

  4. Veeam-HealthCheck-Simplifier Veeam-HealthCheck-Simplifier Public

    Veeam Backup & Replication Health Check analyzer — CSV/JSON input, PowerShell remediation output, Salesforce/Slack integration.

    Python

  5. CG-agent-harness CG-agent-harness Public

    CG agent - https://bit.ly/CG-agent

    Rust

  6. Insight_Extractor Insight_Extractor Public

    Take Long Threads and Turn them into notes for yourself or AI - BERT + regex insight extractor with dynamic keyword stemmer — threat-intel, OSINT, and security NLP pipeline

    Python