Projects

Offline-first, explainable dermatology triage platform awarded 2nd Place at Cimas Healthathon 3.0, engineered for low-connectivity clinics with dark-skin fairness calibration.

// problem statement

Dermatologists are severely scarce in Sub-Saharan Africa, creating months-long referral backlogs. Mainstream medical computer vision models underrepresent darker skin phototypes (Fitzpatrick V & VI) and fail in rural clinics without continuous internet connectivity.

// engineering solution

Engineered a multi-tier clinical triage architecture: an offline Flutter mobile application running on-device edge AI triage and evaluating clinical safety gates (pediatric age, immunosuppression, fever, facial involvement), escalating high-risk cases to a React + Vite Specialist Portal with EDLIZ-aligned clinician treatment recommendations.

// key outcome & impact

Won 2nd Place (Runner-Up) at Cimas Healthathon 3.0. Validated zero-cloud dependency for rural clinic intake, sub-second on-device inference, and safety-gated specialist escalation.

Frontline Clinic (Offline Mobile)          Specialist Telehealth Layer (Edge / Web)
┌─────────────────────────────────────┐    ┌────────────────────────────────────────┐
│ Flutter Mobile App                  │    │ Specialist Portal (React + Vite)       │
│ ├─ Camera Lesion Capture            │───►│ ├─ Remote Triage & Review Queue        │
│ ├─ On-Device Edge AI Model          │    │ ├─ Clinical Safety Gate Inspection     │
│ └─ Clinical Safety Check (EDLIZ)    │    │ └─ EDLIZ Treatment Protocol Selection  │
└──────────────────┬──────────────────┘    └───────────────────▲────────────────────┘
                   │ (Background sync when online)             │
                   └──────────────► Spring Boot API ───────────┘
                                   (PostgreSQL + Docker)

A cross-platform Point-of-Sale (POS) and inventory management ecosystem built in Flutter and Dart, featuring multi-format thermal receipt printing, barcode scanning, and resilient offline-first cloud sync.

// problem statement

Small-to-medium retail and hospitality businesses in regions with erratic power grids and unreliable connectivity struggle with cloud-reliant POS tools that fail during outages, causing stalled checkouts, untracked inventory drift, and end-of-day cash balance discrepancies.

// engineering solution

Architected a native, cross-platform POS application using Flutter and Dart that runs seamlessly across Android, iOS, Windows, macOS, Linux, and Web. Implemented local SQLite caching for instant transaction execution, barcode/QR product lookups, ESC/POS thermal receipt printing (80mm/A4), cash drawer session reconciliation, and asynchronous background synchronization via Firebase Firestore.

// key outcome & impact

Ensured uninterrupted commercial sales processing through complete offline resiliency, enabling instant cart checkouts, real-time profit margin calculations, and transparent cash variance tracking across shifts.

Cross-Platform UI (Android / iOS / Desktop / Web - Flutter)
  │
  ├──► Local High-Speed State & Storage (SQLite / Offline Cache)
  │      ├─ Sub-millisecond Cart & Barcode Item Lookup
  │      ├─ Parked Sales & Shift Cash Reconciliation
  │      └─ Thermal ESC/POS Receipt Rendering (80mm / A4)
  │
  └──► Background Cloud Synchronization (When Network Available)
         └─ Firebase Firestore & Cloud Functions ──► Multi-Terminal Inventory Sync

A production-grade self-hosted infrastructure cluster hosting 15+ containerized services, split-horizon DNS, and automated backups on Proxmox VE.

// problem statement

Public cloud environments abstract away underlying hypervisors, storage, and networking layers. I needed bare-metal control to master enterprise virtualization, container orchestration, and failover mechanics.

// engineering solution

Engineered a multi-node Proxmox VE cluster hosting Nextcloud, Gitea, Paperless-ngx, and Vaultwarden via Docker Compose. Implemented PostgreSQL and Redis data backends, split-horizon DNS routing, and Authentik for centralized SSO/OIDC identity management.

// key outcome & impact

Maintains 15+ containerized daily productivity services with automated ZFS snapshot backups, split-horizon DNS routing, and centralized Authentik SSO authentication, eliminating reliance on third-party cloud tools.

                Public Internet / Local Network
                               │
                     Cloudflare DNS / Proxy
                               │
               Traefik Reverse Proxy (*.elic01.dev)
                               │
               ┌───────────────┴───────────────┐
               ▼                               ▼
        Authentik SSO (IdP)          Containerized Services
      (OAuth2 / OIDC / LDAP)       (Nextcloud, Gitea, Immich)
               │                               │
               └───────────────┬───────────────┘
                               ▼
                      Proxmox VE Cluster
                    (5x EliteDesk Nodes)
                               │
               ┌───────────────┴───────────────┐
               ▼                               ▼
       PostgreSQL / Redis              ZFS / PBS Backups

An enterprise Zero-Knowledge ephemeral secret-sharing platform designed to eliminate plaintext password and token leakage across help desk operations.

// problem statement

IT technicians and corporate staff frequently share sensitive credentials, database keys, and temporary passwords over unencrypted email, Teams, or WhatsApp messages, creating permanent exposure vectors.

// engineering solution

Architected a zero-knowledge web application using client-side Web Crypto AES-GCM 256-bit encryption. The decryption key is generated in the sender’s browser and stored exclusively in the URL hash fragment (#), ensuring the server never receives the key or plaintext. Built on Upstash Redis with burn-on-view auto-deletion and sliding-window rate limiting.

// key outcome & impact

Guaranteed cryptographic privacy for enterprise IT support operations where even database administrators and hosting servers cannot read transmitted credentials.

Sender Browser (Client-Side Encryption)
  │  1. Generates 256-bit AES-GCM key & IV locally
  │  2. Encrypts secret text ──► Ciphertext payload
  │  3. Assembles link: /view/[id]#[localKey]  (Hash fragment never hits server)
  │
  ├──► POST /api/secret ──► Upstash Redis (Key-Value TTL Store)
  │                          └─ Stores ONLY Ciphertext + Configured Max-Views / TTL
  │
Recipient Browser
  │  1. Retrieves Ciphertext from /view/[id]
  │  2. Extracts #[localKey] from window.location.hash
  │  3. Decrypts secret in-memory ──► Redis atomically burns the key

A modern healthcare platform featuring multi-LLM symptom triage, OpenFDA drug-drug interaction validation, and tokenized emergency QR profile access.

// problem statement

Fragmented medical histories, missed medication adherence, and slow clinical intake lead to diagnostic bottlenecks and preventable adverse drug-drug contraindications.

// engineering solution

Architected a full-stack Next.js 16 (App Router) platform with strict TypeScript. Integrated dual LLM triage (Claude Haiku & GPT-4o mini with Ollama fallback), OpenFDA REST API interaction verification, vital telemetry tracking, emergency QR tokens, and doctor tele-consultations backed by Supabase PostgreSQL RLS.

// key outcome & impact

Engineered sub-second AI triage responses, automated drug contraindication detection, and secure emergency medical profile lookups optimized for low-bandwidth environments.

Patient / Doctor Client (Next.js 16 App Router)
  │
  ├──► Supabase Auth & PostgreSQL (Row-Level Security)
  │      └─ Patients, Medical Records, Prescriptions, Vitals
  │
  ├──► Multi-LLM Triage Engine (Claude Haiku / GPT-4o mini / Ollama)
  │      └─ Urgency Classification & Symptom Severity Scoring
  │
  ├──► OpenFDA Drug Validation Service
  │      └─ Automated Cross-Check for Adverse Drug-Drug Interactions
  │
  └──► Emergency QR Access System
         └─ Tokenized Public URL ──► Decrypts Ephemeral Critical Snapshot

A closed-loop academic intelligence platform built for Harare Institute of Technology featuring zero-reprisal student evaluations, verified faculty response threads, and executive QA analytics.

// problem statement

Student feedback at HIT flowed through slow, paper-based channels with no visibility, tracking, or accountability, preventing formative improvements before semester finals.

// engineering solution

Engineered a Next.js 15 and TypeScript platform with Firebase Auth for role-based access, Firestore for real-time ticket escalation, and a responsive Tailwind CSS interface with executive quality assurance triage dashboards.

// key outcome & impact

Built and deployed an end-to-end feedback platform connecting students with departmental academic staff, replacing paper-based complaints with real-time status tracking and verified resolution audits.

Next.js Frontend ──► Firebase Auth (RBAC) ──► Firestore Realtime DB ──► Staff Triage Dashboard
(Student Portal)      (Institutional Login)    (Live Ticket Updates)       (Resolution Workflow)

A browser-based document processing suite with Cinema Mode editing, executing all PDF conversions, metadata sanitization, and restructuring 100% client-side via WebAssembly and PDF.js.

// problem statement

Commercial online PDF tools require uploading confidential contracts, medical records, and financial statements to third-party cloud servers, posing severe data leakage and privacy risks.

// engineering solution

Engineered a zero-upload, client-side PDF manipulation application in Next.js and TypeScript. Leverages WebAssembly and pdf-lib to perform document merging, page extraction, stream compression, damaged xref table repair, and metadata sanitization directly within the browser’s memory sandbox without server uploads.

// key outcome & impact

Delivers complete document editing and privacy sanitization without server transmission, ensuring confidential records remain strictly on the user’s local device.

Browser Client Sandbox (Zero Server Upload)
  │
  ├──► PDF.js & WebAssembly Engine
  │      ├─ Memory-isolated document parsing & rendering
  │      └─ Cinema Mode full-screen reading & annotation
  │
  ├──► In-Memory Manipulation Pipeline (pdf-lib)
  │      ├─ Merge, Split, Reorder, Rotate, Crop (N-Up)
  │      └─ Stream compression & damaged xref table repair
  │
  └──► Security & Privacy Layer
         ├─ Metadata Sanitization (strips author, OS, GPS tags)
         └─ Client-side password encryption & permissions lock

Infrastructure-as-Code (IaC) playbooks that automate multi-site VLAN provisioning, firewall policy rollout, and configuration compliance checks across Cisco Meraki hardware.

// problem statement

Configuring enterprise network appliances manually via GUI dashboards introduces human error, configuration drift across branch sites, and slow rollback times during network incidents.

// engineering solution

Engineered modular Ansible playbooks that interface directly with the Cisco Meraki REST API to push declarative firewall rules, manage SSID profiles, and enforce VLAN policies from Git repositories.

// key outcome & impact

Automated multi-site network configuration via declarative playbooks, reducing manual dashboard provisioning steps to a single executable script with complete Git-based change tracking.

Git Repository (IaC) ──► Ansible Engine ──► Meraki REST API ──► Enterprise Edge Hardware
 (declarative YAML)        (playbook tasks)   (HTTPS / Token)       (VLANs, SSIDs, Firewall)

Precision agriculture ERP and commerce platform featuring visual AI crop disease diagnostics, microclimate agrometeorology, and offline-first field scouting.

// problem statement

Commercial and cooperative farming enterprises across Southern Africa suffer massive yield losses from delayed pest detection, erratic microclimates, and manual record systems that cannot operate in disconnected rural fields.

// engineering solution

Engineered an enterprise precision agronomy platform with Next.js 15, React 19, and Supabase. Features on-device computer vision for leaf pest & disease identification, hyper-local weather telemetry, crop & livestock financial ledger modeling, and an offline-first PWA architecture for field scouts.

// key outcome & impact

Unified field scouting, agrometeorological spray forecasting, and financial yield tracking into a deploy-ready ERP calibrated for Zimbabwean agro-ecological zones (e.g. Mazowe).

Field Scout / Farm Manager (Offline-Ready PWA)
  │
  ├──► Visual AI Diagnostics (Computer Vision / Pest & Disease Models)
  │      └─ Fast on-device/edge image classification of leaf pathologies
  │
  ├──► Agrometeorology Engine
  │      └─ Microclimate forecasting, evapotranspiration & spray windows
  │
  └──► Enterprise Farm ERP Ledger (Supabase / PostgreSQL)
         ├─ Field blocks, soil test records, crop cycles
         └─ Input procurement, yield projection & livestock financial modeling

Multi-tenant whistleblower intelligence and employee feedback platform with zero-knowledge submission anonymity, USSD gateway support, and AI sentiment analysis.

// problem statement

Workplace harassment, fraud, and safety violations go unreported due to employee fear of retaliation, while non-desk and frontline staff in low-connectivity areas lack web portals to speak up.

// engineering solution

Architected a multi-tenant feedback platform using Next.js and Supabase RLS. Strips identifying IP headers and client footprints at the gateway. Built a custom USSD session manager and menu builder enabling frontline staff on basic feature phones to submit anonymous feedback and participate in pulse polls without mobile internet.

// key outcome & impact

Created a secure, untraceable reporting channel with automated NLP sentiment prioritization and dual web + USSD accessibility across corporate and industrial teams.

Reporting Channels:
 Web App (Stripped IP / Headers)         Feature Phone (No Internet)
         │                                       │
         ▼                                       ▼
 Next.js Edge Router                     USSD Session Gateway
         │                                       │
         └───────────────┬───────────────────────┘
                         ▼
             Anonymization Pipeline
         (Strips IP, UserAgent, Metadata)
                         │
        ┌────────────────┴────────────────┐
        ▼                                 ▼
 Supabase Multi-Tenant DB       NLP Sentiment Classifier
 (Isolated Org RLS)             (Toxicity & Priority Triage)

An automated security auditing shell suite designed for rapid reconnaissance, port scanning analysis, and system attack surface evaluation.

// problem statement

System administrators need fast, repeatable security checks to identify exposed ports, weak permissions, and outdated network services without relying on heavy proprietary scanners.

// engineering solution

Developed a modular Bash and Python auditing suite integrating Nmap scripting engine (NSE), firewall rule audits, and permission scanners with structured markdown and JSON log output.

// key outcome & impact

Automated repetitive port scanning, service versioning, and attack surface enumeration, replacing manual CLI triage with structured JSON and Markdown audit reports.

Target Network / IP ──► Host & Port Recon ──► NSE Vulnerability Audits ──► Structured Report
 (CIDR Input Range)        (Nmap Engine)          (CVE & Service Probes)       (Markdown & JSON)

Comprehensive transport platform spanning a Next.js 16 web administration console, parent portal, and dual Flutter mobile applications for client bookings and driver dispatch.

// problem statement

School-run transport and executive chauffeuring in Zimbabwe suffer from lack of real-time route visibility, paper-based attendance rosters, and disjointed driver communication.

// engineering solution

Architected a synchronized multi-platform mobility ecosystem: a Next.js 16 web portal with live GPS vehicle tracking and QR-code student boarding verification, paired with dedicated Flutter client and driver applications on Firebase Firestore and Cloud Functions.

// key outcome & impact

Connected dispatchers, drivers, and parents on a single real-time platform with automated GPS route telemetry and verified child pickup/dropoff notifications.

Parents & Corporate Clients                Chauffeur Drivers
(Flutter Client App)                       (Flutter Logistics App)
        │                                          │
        ├──► Real-time GPS Location & Status ◄─────┤
        │                                          │
        └───────────────────┬──────────────────────┘
                            ▼
           Firebase Firestore & Cloud Functions
           (Trip dispatch, Geofences, QR verification)
                            │
                            ▼
        Dispatcher / Executive Web Console (Next.js 16)
        (Fleet management, School run rosters, Billing)

A comprehensive web portal designed for clinical workflow management, patient records, and appointment tracking in high-compliance healthcare environments.

// problem statement

Healthcare facilities require structured digital interfaces to handle patient intake, clinician scheduling, and sensitive medical records safely and efficiently.

// engineering solution

Built a responsive TypeScript web application featuring role-separated portals for doctors, receptionists, and patients, complete with appointment workflows, prescription logs, and role-based access control.

// key outcome & impact

Implemented role-separated clinical workflows with strict role-based access control (RBAC), structured appointment scheduling, and audit-ready patient records.

Next.js Web App ──► RBAC Auth Middleware ──► Clinical Controllers ──► Encrypted Health DB
(Doctor/Patient UI)  (Session Verification)  (Intake, Prescriptions) (Audit Trail Logs)

A web application for commercial vehicle fleet tracking, route logging, and maintenance scheduling.

// problem statement

Organizations managing transportation assets need centralized visibility into vehicle logs, service intervals, and driver assignments.

// engineering solution

Architected a modern TypeScript application providing real-time fleet dashboards, maintenance alert systems, and structured vehicle utilization reporting.

// key outcome & impact

Delivered a centralized vehicle tracking dashboard providing service interval alerts and driver activity logging.

This site: a long-term career platform built with Next.js 16, TypeScript, and Cloudflare Pages with automated CI/CD.

// problem statement

Hardcoded portfolio websites go stale quickly, lack type safety, and require manual FTP/build steps that discourage regular updates.

// engineering solution

Architected a Next.js App Router application on a typed data layer with GitHub Actions automated deployment to Cloudflare Pages edge network.

// key outcome & impact

Production platform featuring strict TypeScript validation, global security headers, and automated Git-based edge deployments.

GitHub Repository ──► GitHub Actions (CI/CD) ──► Cloudflare Edge Pages ──► Global CDN (HTTPS)
 (main branch)          (lint, typecheck, build)   (Static Export / Headers)   (elic01.dev)