Skip to content
View edycutjong's full-sized avatar
9 followers · 1 following

Achievements

Achievement: Pull Sharkx3Achievement: Pair Extraordinairex3Achievement: Arctic Code Vault Contributor

Achievements

Achievement: Pull Sharkx3Achievement: Pair Extraordinairex3Achievement: Arctic Code Vault Contributor

Block or report edycutjong

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
edycutjong/README.md

EDY CU

Jakarta, Indonesia · Remote (async-first) [email protected] · github.com/edycutjong · linkedin.com/in/edy-cu-tjong · edycu.dev

SUMMARY

Full-stack engineer specializing in agent infrastructure and MCP (Model Context Protocol) — building the safety layer that lets AI agents act on real systems: transaction lifecycles, human-in-the-loop approval, spending caps, approval revocation, prompt-injection defense. TypeScript · Python · Go · Rust. 14 years shipping software.

SELECTED PROJECTS

BagOS — MCP server for Solana · TypeScript, Solana Web3.js, MCP SDK

  • Shipped v2.0.0 to npm with provenance; listed in the official MCP registry. Full write-path lifecycle: simulate → approve → sign → send → confirm, with per-transaction and per-session spending caps, devnet by default.
  • Caught and publicly remediated a fake-success defect in v1: deprecated the release, published the postmortem, and added CI gates (tarball audit, fabricated-success grep) that make the bug class unshippable.
  • 212 tests with enforced 100% coverage; CodeQL and secret scanning clean; CI/CD with signed publishing and auto-deprecation.

aegis — multi-agent support engine with human-in-the-loop · Python, FastAPI, LangGraph

  • Agent investigates issues via SQL and documentation, proposes actions, and hard-stops for human approval before any destructive operation.

revoker — approval hygiene for automated wallets · EVM

  • Threat rules auto-revoke dangerous token approvals on agent, keeper, and relayer signers before drain contracts execute; demonstrated on-chain.

antigen — prompt-injection defense for metadata graphs · DataHub

  • Sweeps catalog entities for jailbreak and exfiltration payloads, including invisible-Unicode variants; defuses them in-graph with tamper-evident hashes and maps blast radius through lineage.

armsmith — ARM/Graviton benchmark toolkit · Python

  • Signed releases on PyPI via trusted publishing; versioned documentation.

SKILLS

Languages: TypeScript, Python, Go, Rust, SQL Systems: MCP servers, Solana (Web3.js / Anchor), EVM, Node.js, FastAPI, Next.js, PostgreSQL, Supabase Practices: CI/CD (GitHub Actions), signed/provenance publishing (npm, PyPI), CodeQL, enforced coverage gates, Docker

Pinned Loading

  1. BagOS BagOS Public

    🚦 MCP server for Bags on Solana. Every AI-initiated spend is token-gated, SOL-capped, and requires a single-use confirmation before anything is signed.

    TypeScript 1

  2. aegis aegis Public

    Autonomous Enterprise Action Engine — Multi-agent AI with Human-in-the-Loop approval, dynamic model routing, semantic caching, and real-time observability. FastAPI + LangGraph + Next.js + Supabase.

    Python

  3. revoker revoker Public

    Φ Autonomous on-chain security agent — revokes dangerous token approvals through KeeperHub in 13.47s median, so there is never a standing allowance worth attacking

    TypeScript 1

  4. antigen antigen Public

    🧬 A prompt-injection immune system for the DataHub metadata graph — detects, quarantines, and cures OWASP LLM01 payloads hidden in catalog metadata.

    Python

  5. armsmith armsmith Public

    🛠️ The agent that forges your repo for Arm — profiles any AI repo on aarch64, diagnoses why it's slow, and opens a fix PR where every fix must clear a reproduce gate or get dropped.

    Python