Amar Jaleel

Summary

Software engineer working across product engineering, security and developer tooling, applied AI, and systems. Computer Science student at Sukkur IBA University. Shipped a field issue-reporting platform now in production use, published a security CLI to npm, and ran a controlled study on evidence deficiency in retrieval-augmented generation — including publishing a correction against its own headline result. Contributes fixes upstream to projects maintained by other people, not only to personal repositories.

Selected engineering work

• RODIFTProduction

  Enterprise field issue-reporting platform for a field-sales organization. Staff report outlet problems from a mobile app; each issue is geo-matched to the nearest outlet, routed through the org role hierarchy, and driven to resolution with push notifications and an auditable trail. A web dashboard gives management oversight.

  Flutter · Dart · Next.js · Supabase · Postgres · PostGIS · SQL

  Private repository

• VeriPatchReleased

  Verified remediation for npm vulnerabilities. Scans a project, applies candidate fixes inside a sandbox, proves the vulnerability is eliminated and the fix is safe, then emits an audit-grade evidence report.

  TypeScript · Node.js · Docker · CLI

  npmSource

• KnowledgeGuardResearch

  A controlled study asking whether a RAG system can tell how its retrieved evidence is deficient — missing, insufficient, conflicting, outdated, or absent from the corpus — and whether that diagnosis carries actionable information for selecting a repair action.

  Python · RAG · Evaluation

  Private repository

• CortexWardPre-alpha

  An AI software-security engineer that understands, verifies, fixes, and secures code. Runs a multi-scanner and agent pipeline with a closed verification loop rather than reporting unverified findings.

  Python · Docker · Static Analysis · Agents

  Source

• SceneForgeActive Development

  Turns a JSON manifest of HTML/CSS/JS scenes into a single MP4, scene by scene. Headless Chrome renders frames, FFmpeg composes them, and a React/Monaco editor drives it. Runs entirely locally — no cloud APIs, no uploads.

  JavaScript · React · FFmpeg · Headless · Node.js

  Private repository

• SCAR-OSResearch

  Integrating voice and intent-driven interaction into a developer-oriented operating environment. Final-year project, currently at the research and architecture stage — no implementation yet.

  Private repository

Also Emergency Mesh (Active Development) · CS Learning by Game (Active Development) · BuildSphere (Prototype) · TODO Tracker Pro (Completed) · Portfolio (Active Development). Full detail at amarjaleel.me/work.

Open-source contributions

6 merged into repositories maintained by other people, 1 open. Statuses verified against the GitHub API on 2026-09-20.

• AcademySoftwareFoundation/dna#195 — Merged. Fix SPI v2 Uvicorn app target
• cobusgreyling/loop-engineering#437 — Merged. loop_estimate_cost honors early_exit_required
• cobusgreyling/loop-engineering#395 — Merged. Harden loop-action command execution against unquoted shell expansion
• pydantic/pydantic-ai#5969 — Merged. Fix AGUIAdapter.dump_messages reordering ToolReturnPart after UserPromptPart
• promptfoo/promptfoo#9781 — Merged. Add per-test repeat option
• MCP-Audit/MCTS#233 — Merged. Add doctor optional toolchain checks
• shaal/eye-tracker#61 — Open. Tell a collapsed axis apart from a uniform offset in describeBiasPattern

Research

• KnowledgeGuard / EGB · Controlled study — analysis complete

  Type and action interact strongly (partial eta-squared 0.32, permutation p = 1e-4). Oracle routing beats the best type-agnostic policy by 6.6 F1 points, 95% CI [2.6, 10.5]. But with a real detector the benefit reverses: predicted routing scores 0.064 F1 below type-agnostic. The headroom is real and, on this evidence, unreachable.

• CortexWard · Pre-alpha — verification loop running

  Can an agent pipeline confirm that a reported security finding is real, and that a proposed fix removes it, instead of emitting unverified findings?

• Emergency Mesh · Active development — transport and protocol built and tested

  Can phones relay messages for each other over BLE reliably enough to be useful when there is no internet, no cell service and no server?

• SCAR-OS · Current FYP — Research & Architecture Stage

  How should voice and intent-driven interaction be integrated into a developer-oriented operating environment?

Technical skills

Languages

Python · TypeScript · JavaScript · Dart · SQL · Kotlin · HTML / CSS

Frontend

Next.js · React · WebGL

Backend

Node.js · Supabase · PostgreSQL · PostGIS

AI

RAG · LLM Agents · Evaluation

Security

Static Analysis · Cryptography

Mobile

Flutter · BLE

Systems

FFmpeg · Headless Chrome

Infrastructure

Docker · GitHub Actions

Developer Tools

CLI Design

Every technology listed is attached to a project, a pull request or a research entry on amarjaleel.me/skills. No proficiency percentages.

Education

• Bachelor of Computer Science · Sukkur IBA University · Aug 2023 - Jun 2027

  Focus on software engineering, security and applied AI

• Intermediate (Pre-Engineering) · Government Degree College Thari Mir Wah · Apr 2020 - Oct 2022

  Pre-Engineering with Science subjects. Grade: A

Selected credentials

Google Cybersecurity Professional · Google Data Analytics Professional · Google AI Essentials · Python Bootcamp: Master Python with Real-World Projects

11 in total — 9 Google, 2 Udemy. Verification links at amarjaleel.me/certifications.

Languages

English (Professional) · Urdu (Native) · Sindhi (Native)