Akandwanaho Ivan Alvin codesphere-u

From solving everyday problems to architecting ambitious systems.

Software Engineer · AI Systems Builder · Cybersecurity · Full-Stack & Cloud Engineering
Founder & Managing Director, Codesphere Innovations (U) Limited · Kampala, Uganda

The person behind the systems

My journey has never been about collecting technologies. It has been about using them to build things that matter — from practical business tools, through engineering leadership, to AI, cybersecurity, real-time platforms and open source.

Explore my engineering portfolio · See Cyber Dragon · Explore Auralis Local

About Me

I am Akandwanaho Ivan Alvin (commonly known as Alvin), a Ugandan software engineer, cybersecurity practitioner, full-stack developer, and technology entrepreneur based in Kampala, Uganda.

I build intelligent, secure, and scalable digital products spanning artificial intelligence, full-stack web and mobile platforms, defensive cybersecurity, financial technology, and cloud systems. My work focuses on solving real operational problems—particularly in African markets—while architecting open-source systems and developer tools engineered for global standards.

I believe great engineering combines technical depth, practical usefulness, security by design, and clear architectural trade-offs.

My Engineering Journey

My career has progressed from building foundational business software and independent engineering systems into technical leadership, company building, and open-source systems architecture:

Foundation & Applied Engineering: Studied at ISBAT University (Uganda) while independently building operational software systems across retail, pharmacy, hospitality, hardware, and logistics domains.
Entrepreneurship (4codex Technologies): Founded 4codex Technologies, delivering custom web engineering, cybersecurity, automation, and business software solutions.
Technical Leadership (Waanverse Labs Inc.): Served as Chief Technology Officer (CTO) and Head of Engineering at Waanverse Labs Inc. (departed March 2025), leading technical strategy, system architecture, and engineering workflows.
Business & Engineering Leadership (Codesphere Innovations (U) Limited): Serving as Founder and Managing Director of Codesphere Innovations (U) Limited, combining hands-on software architecture with company leadership, AI-enabled product engineering, cloud solutions, and cybersecurity.
Marketplace Product Engineering (Funa Gigs — Jaminsa Ventures Limited): Serving as Founder and Project Lead for Funa Gigs (a digital services marketplace under Jaminsa Ventures Limited), architecting Flutter mobile apps, real-time job matching, Instant Hire workflows, location-based discovery, payment integrations, and trust/safety controls.
Advanced Systems & Open Source: Designing and maintaining verifiable open-source flagships across local AI inference, multi-agent governance, AI security firewalls, double-entry financial ledgers, and distributed observability.

Professional Experience & Leadership

Role	Organization	Scope & Engineering Focus	Status
Founder & Managing Director	Codesphere Innovations (U) Limited	Custom software architecture, AI-powered applications, web/mobile platforms, cybersecurity, cloud infrastructure, and digital transformation.	Current
Founder & Project Lead	Funa Gigs (Jaminsa Ventures Limited)	Full-stack marketplace architecture, Flutter mobile engineering, real-time matching, live location workflows, payment integrations, identity verification, and RBAC admin tooling.	Current
CTO & Head of Engineering	Waanverse Labs Inc.	Technical strategy, software architecture, engineering management, development workflows, and product delivery.	Former (until Mar 2025)
Founder	4codex Technologies	Software development, web application engineering, cybersecurity, automation, and technical consultancy.	Historical Venture

Education: Studied at ISBAT University, Uganda, complemented by continuous independent systems engineering and applied research.

The Codesphere Agentic Stack (Proof-Carrying AI Agent Infrastructure)

I design and maintain an interoperable, zero-cloud-dependency suite of 9 Model Context Protocol (MCP) & Autonomous Agent Infrastructure systems unified under nexus-aegis (Proof-Carrying Agent Execution):

Layer	Repository	Core Engineering Guarantee	Verified Proof
0. Attestation Kernel	`nexus-aegis`	7-gate Proof-Carrying Agent Execution (PCAE) + RFC 6962 (`0x00`/`0x01`) SHA-256 Merkle proofs	`100%` recall (`0.27 ms` P50) · `245/245` proofs · `77` tests
1. Memory (`v1.1`)	`cortex-mcp`	Bi-temporal knowledge graph (`valid_from` / `valid_until`), contradiction auditor & TruthGate export	`100%` stale-fact suppression · `84` tests
2. Routing (`v1.1`)	`synapse-router`	Pareto cost/latency router (`FAST_LOCAL` → `FRONTIER`), sliding-window rate governor & SimHash cache	`90.59%` USD cost saved · `0.74 ms` P50 · `77` tests
3. Swarm DAG	`swarmweaver`	Conflict-aware parallel wave planner, file-scope RW/WW leases & SHA-256 crash-safe resume	`0` race conditions · `70%` tokens saved · `65` tests
4. Security	`agentshield`	OWASP 2026 prompt-injection detector, capability firewall (Shell/FS/SSRF/SQLi) & egress redactor	`100%` recall / `0%` FPR (25 scenarios) · `42` tests
5. Flight Recorder (`v1.1`)	`agentflight`	SHA-256 cassette replay (`$0` CI), trajectory regression diff, W3C OTel export & 10-rule MCP linter	`2.83 µs/span` (`353k spans/s`) · `90` tests
6. Code Repair (`v1.1`)	`patchpilot`	Stack-trace + AST call-graph fault localizer, unified git diff parser & 8-rule anti-reward-hacking guard	`100%` Top-1 (`-96.6%` tokens) · `73` tests
7. Grounding	`truthgate`	Deterministic citation-span NLI entailment, polarity/numeric verifier & AST symbol grounder (`TG001`–`TG008`)	`100%` precision/recall (`0.115 ms` P50) · `67` tests
8. Governance	`ARGUS-AI`	7-agent adversarial deliberation committee with unilateral Devil's Advocate veto & `PointInTimeGuard`	`100%` trap veto precision · `61` tests

Featured Open-Source Projects (15 Flagship & Domain Systems · 856+ Verified Tests)

🌟 Unified Flagship: 🛡️ Nexus Aegis v1.0 — Proof-Carrying Autonomous Agent Kernel & RFC 6962 PR Attestation Engine

Introduces Proof-Carrying Agent Execution (PCAE): evaluates autonomous agent runs across 7 deterministic safety, budget, concurrency, trajectory, AST anti-reward-hacking, and citation-grounding gates in 0.27 ms P50, and compiles an RFC 6962 domain-separated binary SHA-256 Merkle tree (0x00 leaf / 0x01 internal node) with O(log N) selective-disclosure inclusion proofs and drop-in GitHub Pull Request Attestation Cards.

Python Proof-Carrying Code RFC 6962 Merkle Proofs 7-Gate PCAE Kernel MCP JSON-RPC 2.0
Release v1.0.0 ↗ · 77 Passing Tests (100% Recall · 245/245 Merkle Proofs Verified)

1. 🐝 SwarmWeaver v1.0

Multi-Agent DAG Orchestrator, File-Lease Conflict Guard & Checkpoint Resume Engine

Compiles multi-agent task graphs into conflict-free parallel execution waves via greedy graph coloring over read/write globs (0 race conditions across 50 conflicting parallel tasks), enforces SHARED_READ / EXCLUSIVE_WRITE file leases, and journals completed nodes in a SHA-256 hash chain for 0.0072 ms/node crash-safe resume (70% tokens saved).

Python DAG Scheduler File Leases Checkpoint Resume MCP
Release v1.0.0 ↗ · 65 Passing Tests (0 Race Conditions)

2. 🔍 TruthGate v1.0

Deterministic Agent Hallucination Auditor, Citation Entailment & AST Symbol Grounder

Audits AI agent responses in 0.115 ms P50 across 8 deterministic rules (TG001–TG008)—catching phantom citations, negation/antonym polarity inversions, numeric/currency drift, out-of-bounds line ranges, and hallucinated workspace AST symbols (100% recall, 0% FPR)—and compiles surgical self-repair prompts.

Python Citation NLI AST Grounding LLM Guardrails MCP
Release v1.0.0 ↗ · 67 Passing Tests (100% Recall · 0% FPR)

3. 🔧 PatchPilot v1.1

Autonomous Code Repair, AST Fault Localization & Anti-Reward-Hacking Verifier

Localizes software faults via stack-trace + AST call-graph + BM25 ranking (100% Top-1 accuracy across 25 scenarios, 96.6% prompt token reduction), parses multi-file unified git diffs, blocks reward-hacking patches across 8 AST rules (RH001–RH008, 100% recall / 0% FPR), and exports canonical Nexus Aegis G5 attestation leaves.

Python AST Verifier Diff Parser Nexus Aegis G5 MCP JSON-RPC 2.0
Release v1.1.0 ↗ · 73 Passing Tests (100% Top-1 Localization)

4. ⚡ Synapse Router v1.1

Cost-Aware Multi-Model AI Agent Router, Sliding Rate Governor & Aegis Bridge

Routes agent prompts across FAST_LOCAL, BALANCED, and FRONTIER_REASONING tiers using an 8-feature complexity classifier, sliding-window RPM/TPM rate governor, confidence-gated cascade escalation (90.59% USD cost reduction, 0.74 ms P50 routing latency), a 3-state circuit breaker (100% HTTP 429 failover), and canonical Nexus Aegis G2 leaf exports.

Python LLM Gateway Rate Governor Nexus Aegis G2 MCP
Release v1.1.0 ↗ · 77 Passing Tests (90.59% Cost Reduction)

5. 🧠 Cortex MCP v1.1

Bi-Temporal Knowledge Graph, Contradiction Auditor & Cross-Agent Memory MCP Server

Zero-cloud Model Context Protocol (JSON-RPC 2.0) server that eliminates context amnesia across Claude Code, Cursor, Windsurf, and Antigravity using bi-temporal fact supersession, semantic/polarity contradiction auditing, TruthGate source export, and token-budgeted context compilation.

Python MCP JSON-RPC 2.0 Bi-Temporal Graph BM25 RAG
Release v1.1.0 ↗ · 84 Passing Tests (100% Stale Suppression)

6. ✈️ AgentFlight v1.1

AI Agent Black-Box Flight Recorder, Trajectory Diff, OTel Exporter & MCP Linter

Records multi-step agent trajectories into SHA-256 hash-chained cassettes for 2.83 µs/span ($0) deterministic CI replay, diffs baseline vs. candidate runs (Levenshtein/LCS), exports W3C OpenTelemetry spans to StackPulse, and lints MCP schemas across 10 rules (TS001–TS010).

Python MCP Linter Deterministic Replay OTel W3C Export
Release v1.1.0 ↗ · 90 Passing Tests (353k spans/s)

7. 🐉 Cyber Dragon v1.0

Open-Source Community Cyber Defense Platform

Explainable, 100% SSRF-free heuristic platform for inspecting suspicious SMS messages, phishing URLs, IDN Punycode homographs, brand-impersonation domains (18+ African & global brands), and Mobile Money / USSD diversion traps (*21*, *165*).

TypeScript Next.js 15 Python FastAPI CLI
Live Workbench ↗ · 21 Passing Tests

8. ✨ Auralis Local v0.2

Privacy-First Local AI Workspace for Apple Silicon

Deliberate local AI assistant engineered for 16 GB Apple Silicon Macs. Combines streaming Ollama chat, local MLX/Whisper voice rooms, a line-aware Hybrid BM25 + Phrase RAG Knowledge Base with inline citations, and approval-gated workspace tools.

TypeScript React 19 Node.js Ollama MLX
Architecture Docs ↗ · 36 Passing Tests

9. 🛡️ AgentShield v1.0

AI Agent Security & Governance Framework (OWASP 2026)

Deterministic security firewall for autonomous AI agents. Features multi-layer prompt-injection & RAG context-poisoning detection, capability allow/deny enforcement (Shell, Filesystem, SSRF, SQLi), secret egress redaction, and a SHA-256 hash-chained audit ledger.

Python FastAPI Pydantic v2 OWASP 2026 CLI
Security Spec ↗ · 42 Passing Tests (100% Recall)

10. 🏛️ ARGUS AI v2.1

Auditable Multi-Agent Decision & Research System

7-agent Investment Committee orchestration where a dedicated Devil's Advocate Agent stress-tests theses and holds unilateral veto power. Includes a leakage-free walk-forward backtester with ATR slippage modeling, cryptographic Trade Passports, and an MCP server.

Python Multi-Agent Systems MCP Pydantic
Backtest Report ↗ · 61 Passing Tests

11. 💳 FlowLedger v1.0

African Payment Orchestration & Double-Entry Ledger

Institutional payment state machine and integer minor-unit double-entry accounting engine (UGX, KES, NGN, USD). Handles idempotent requests, HMAC webhook replay protection, simulated MTN MoMo & Airtel Money adapters, and 3-way reconciliation.

Python FastAPI Double-Entry Ledger Fintech
Ledger Invariants ↗ · 51 Passing Tests

12. 📈 StackPulse v1.0

Cloud Observability, Distributed Tracing & SLO Lab

Self-hostable OpenTelemetry trace DAG analyzer that computes critical-path latency bottlenecks (51.2 µs/trace), catches ORM N+1 query regressions, tracks Google SRE multi-window SLO error-budget burn rates, and generates blameless postmortems.

Python FastAPI OpenTelemetry Docker SRE
SRE Architecture ↗ · 47 Passing Tests

Technical Specializations

Artificial Intelligence & Agentic Systems: Local LLM inference (Ollama, MLX, Whisper), multi-agent adversarial deliberation, hybrid BM25 + phrase retrieval (RAG), structured outputs, and AI capability firewalls.
Defensive Cybersecurity & Trustworthy Systems: Static URL/domain heuristics, IDN homograph and brand-impersonation detection, mobile-money/USSD fraud defense, secure API design, RBAC/MFA, and tamper-evident audit trails.
Full-Stack, Marketplace & Mobile Engineering: Cross-platform Flutter applications, React/Next.js interfaces, real-time matching and geolocation workflows, payment orchestration, and modular backend architectures.
Fintech, Healthcare & Sector Platforms: Double-entry accounting ledgers, idempotent webhook processing, offline-first smallholder agricultural advisory systems (agrisignal), and clinical telemedicine monorepos (Clinical-Virtual-Health-Platform).

Selected Architecture & Engineering Highlights

SSRF-Free Static Threat Deconstruction (cyber-dragon): Evaluates untrusted URLs, QR payloads, and USSD strings purely lexically (~0.28 ms mean latency) so the analyzer can never be abused as an SSRF proxy or trigger attacker tracking beacons.
Loopback Sandboxing & Single-Use Human Approval Gates (auralis-local): Binds local AI services strictly to 127.0.0.1 with CSRF/origin validation and requires session-bound, 5-minute expiring human approval tokens before indexing files or persisting state.
Integer Minor-Unit Accounting & Zero-Sum Invariants (flowledger): Rejects IEEE-754 floating-point values across all financial paths, enforcing $\sum \text{Debits} \equiv \sum \text{Credits}$ and SHA-256 hash chaining on every journal entry.
Marketplace & Real-Time Product Architecture (Funa Gigs — Jaminsa Ventures Limited): Combines Flutter mobile applications, Elixir/Phoenix and Supabase/PostgreSQL backend services, live location discovery, Instant Hire workflows, identity verification, and payment state management.
Offline-First Rural Synchronization (agrisignal): Uses Hybrid Logical Clocks (HLC) and Last-Write-Wins Element-Set (LWW-Element-Set) outboxes for rural field synchronization alongside <=160-character GSM-7 advisories in English, Luganda, and Swahili.

Technologies I Use

Category	Verified Practical Stack
Primary Languages	Python, TypeScript, JavaScript, Dart, SQL, HTML/CSS
Additional Languages	Elixir, Kotlin, Java, C#, PHP
Frontend & UI	React, Next.js, Vite, Tailwind CSS, Accessible Component Architecture, Data Visualization
Backend & APIs	FastAPI, Node.js, Flask, Django, Fastify, Elixir/Phoenix, REST/OpenAPI, Webhooks, SSE, MCP
Mobile Engineering	Flutter, Dart, Kotlin, Android Development, Location Workflows, Mobile Auth & Push Notifications
Databases & State	PostgreSQL, Supabase, Prisma, SQLite, MySQL, Firebase, Redis, Relational & Ledger Modeling
AI & Local Inference	Ollama, Apple Silicon MLX, Whisper, Hybrid BM25 RAG, Multi-Agent Orchestration, TensorFlow
Cloud, DevOps & Security	Docker, GitHub Actions CI/CD, Google Cloud, AWS, Vercel, Linux, OpenTelemetry, OWASP Agentic Security

Open-Source Contributions & Community

Upstream Open-Source Bug Fixes & Engineering Contributions (110,000+ Combined ⭐)

Upstream Project	Issue Fixed	Root Cause & Engineering Solution	Live Fork Branch & Verification
`modelcontextprotocol/python-sdk` (24.8k ⭐)	Issue #3803: Tool results over 1 MiB fail over SSE	Threaded configurable `max_sse_event_size: int \| None` through `sse_client` (`src/mcp/client/sse.py`) and `SseServerParameters` (`session_group.py`) with validation and 2 MiB payload regression tests.	Branch `fix/issue-3803...` · `43 passed`
`PrefectHQ/fastmcp` (28.3k ⭐)	Issue #6296: OAuth redirect turns `myapp://` into `myapp:?`	Preserved empty `//` authority on custom native-app URI schemes (`myapp://`, `myapp:///callback`) during `urllib.parse.urlunparse` query injection in `redirect_validation.py`.	Branch `fix/issue-6296...` · `64 passed`
`Textualize/rich` (57.7k ⭐)	Issue #4250: `FileProxy.write()` returns `0` instead of char count	Restored `io.TextIOBase.write()` contract in `rich/file_proxy.py` by capturing `len(text)` prior to newline partition consumption in `Live` stdout/stderr proxies.	Branch `fix/issue-4250...` · `5 passed`

Flagship Repository Issues & Case Studies

All 15 flagship repositories are documented with architecture guides, ADRs, reproducible test suites, and scoped contributor issues:

Browse open good first issue and help wanted tasks across cyber-dragon/issues, auralis-local/issues, agentshield/issues, and flowledger/issues.
Explore full architectural case studies and verified benchmark comparisons in the companion repository: codesphere-portfolio.

Current Engineering Focus

Expanding Cyber Dragon with multilingual East African community fraud response playbooks (en, lg, sw) and regional telecom/financial domain protections.
Advancing Auralis Local and AgentShield for safe, low-memory local agent execution on Apple Silicon hardware.
Scaling Codesphere Innovations (U) Limited and leading product engineering on Funa Gigs (Jaminsa Ventures Limited).

Professional & Contact Links

Company Website: https://www.codesphereug.com — Codesphere Innovations (U) Limited
LinkedIn: https://www.linkedin.com/in/the4codex — Akandwanaho Ivan Alvin
GitHub Portfolio: https://github.com/codesphere-u
Engineering Case Studies & Architecture Explorer: https://github.com/codesphere-u/codesphere-portfolio

Navigation Menu