EN: Linux security engineer working in C, Rust, .NET and Go. Focus areas: seccomp, Landlock, eBPF, io_uring, and OIDC/OAuth2 (DPoP, PKCE, mTLS). Public repos publish measurements, CI, and — for Cortex-9 systems — an honest audit status (pass or fail). Offline educational models of known CVEs are listed below; they are not exploit kits and do not contact third-party targets.

ES: Seguridad en Linux con C, Rust, .NET y Go. Enfoque: seccomp, Landlock, eBPF, io_uring y OIDC/OAuth2 (DPoP, PKCE, mTLS). Los repos publican mediciones, CI y el estado de auditoría de Cortex-9. Abajo hay modelos offline educativos de CVEs conocidos (no son kits de explotación).

federicobaez.com · X @Cortex9Sur · LinkedIn ·

• Teaching: former instructor at EducacionIT (Java, MongoDB, Git).
• Industry: Tsoft, Gobierno de la Ciudad de Buenos Aires, Naranja X, Telecom.
• Studies: UTN and FIUBA.
• Certifications: 17 verified HackerRank certifications.
• Freelance: Upwork — Linux and Rust security audits (no rates listed here).

Smaller, purpose-built tools that match the focus above. Full audit status for the older Cortex-9 set is in the table further down.

Differential, offline models of already-patched vulnerabilities. Each repo ships PRACTICE.md (Spanish), positive/negative/adversarial cases, regenerable results/, and GitHub Actions CI with no external network targets. A model is not a finding and not a reproduction against live systems.

Rust y C++ con loom, Miri y sanitizers en CI. / Rust and C++ with loom, Miri and sanitizers in CI.

Repo	Lenguaje / Language	Descripción / Description	CI
lockfree-mpmc	Rust	Bounded lock-free MPMC queue (Vyukov); loom + Miri; Criterion vs crossbeam/std.
arena-slab-cpp	C++	C++20 arena + slab allocators with ASan/TSan/fuzz and honest benches vs malloc/jemalloc.
spsc-c11	C	Lock-free single-producer/single-consumer ring in C11: cached indices, batching, TSan-verified with a negative control, x86-64 and AArch64 CI
intrusive-list-cpp	C++	Header-only C++20 intrusive doubly linked list: allocation-free push/pop/splice, stable sort, safe and auto-unlink hooks, multi-list tags
crc32c-portable	C++	CRC-32C in C++20: slicing-by-8, SSE4.2 and ARMv8 CRC backends with runtime dispatch, combine(), fuzzed and sanitized
bptree-wal	Rust	On-disk B+tree with a redo WAL of page images: atomic transactions, checkpoints, and recovery tested against truncation, bit flips and real SIGKILL
mmap-wal-log	Rust	Append-only log on a memory-mapped file: CRC32C per record, torn-tail recovery, salvage reader, SIGKILL-tested
tiny-jit-x64	C++	Minimal x86-64 JIT for integer expressions: hand-emitted machine code, W^X pages, differential tests against an interpreter
ffi-cbindgen-demo	Rust	O(1) LRU cache in Rust exposed to C and C++ via cbindgen: panic-safe C ABI, ownership rules, RAII wrapper, ASan/UBSan + Miri.

Sin runtime async ni crates de red; CI sin red externa (loopback y respuestas grabadas). / No async runtime or networking crates; CI without external network (loopback and recorded responses).

Repo	Lenguaje / Language	Descripción / Description	CI
uring-http	Rust	Minimal HTTP/1.1 server in Rust on raw io_uring, no async runtime. Tested with Miri and ASan.
dns-stub-rs	Rust	Stub DNS resolver for A/AAAA: strict UDP response matching, TCP fallback, CNAME chains, positive and negative TTL cache; std only

seccomp y Landlock probados contra el kernel real en CI. / seccomp and Landlock tested against the real kernel in CI.

Repo	Lenguaje / Language	Descripción / Description	CI
seccomp-trace-diff	Rust	Analyze and diff seccomp-bpf filters (x86_64): reachable actions per syscall, arch/x32 bypass checks, CI regression gate. Verified against the Linux kernel.
landlock-smoke	Rust	Landlock LSM over raw syscalls: sandboxing exec wrapper and a kernel self-test matrix (fs, REFER, TRUNCATE, TCP, IPC scopes)
proc-maps-guard	Rust	Audits /proc//maps for W^X violations, executable anonymous memory, memfd/deleted code and aliased write+exec mappings

Firmware bare-metal en QEMU y código freestanding para Cortex-M. / Bare-metal firmware on QEMU and freestanding code for Cortex-M.

Repo	Lenguaje / Language	Descripción / Description	CI
qemu-riscv32-uart	C	Bare-metal RV32 firmware for QEMU virt: own startup, NS16550A UART driver, CLINT timer interrupts, trap handling, exit codes for CI.
qemu-cortex-m-blink	C	Bare-metal Cortex-M3 firmware: Morse SOS on the LM3S6965 LED from SysTick, self-checking in QEMU with a semihosting exit code
cobs-frame	C	COBS + CRC-16 framing for serial links in freestanding C99: streaming receiver, 11 canonical vectors, fuzzed, 600 B on Cortex-M0

Cada fila enlaza al estado de su auditoría o verificación; "no auditado" significa exactamente eso. / Each row links to its audit or verification status; "not audited" means exactly that.

Repo	Lenguaje / Language	Descripción / Description	CI	Estado / Status
cortex9-shm-ring-bus	Rust	Lock-free SPSC ring over /dev/shm (Rust) with C/C++/Go/Python clients.		No auditado de forma independiente / Not independently audited — BENCH.md
cortex9-memoria-unificada	C++	C++20 tiered GPU/RAM/disk memory manager.	—	Auditado: pasa el umbral #5 (B+) / Audited: passes threshold #5 (B+) — AUDIT-valor.md
cortex9-elf-zk-loader	Rust	Signed-only ELF loader + seccomp supervisor (Rust).	—	Auditado FAIL: 122/143 (85.3 %) vs 100 %; v0.3 no auditado / Audited FAIL; v0.3 not audited — AUDIT-valor.md
cortex9-xdp-semantic-firewall	Python	XDP semantic firewall for MCP/gRPC payloads (eBPF + Rust/aya).	—	Auditado: no alcanza su umbral de valor / Audited: fails its value threshold — AUDIT-valor.md
cortex9-jitter-exfil	Rust	Timing-jitter covert-channel detector on SSL writes (Rust).		Valor no auditado / Value not audited — VALOR.md
cortex9-sched-entropia	Rust	sched_ext (eBPF + Rust) scheduler weighting threads by prompt entropy.		Valor no auditado / Value not audited — LIMITES.md
cortex9-snapshots-enjambre	Rust	Memory snapshot/restore for a swarm of agent processes (Rust).		Auditado: no alcanza su umbral en general / Audited: fails its threshold overall — AUDIT-valor.md
cortex9-fwm-x11-rust	Rust	X11 window manager grouping windows by title/class/OCR affinity (Rust).		Valor no auditado / Value not audited
cortex9-termica-predictiva	C	C daemon predicting CPU temperature to cap frequency before heavy tasks.	—	Control de hardware no verificado / Hardware control not verified — VERIFICACION.md
cortex9-poincare-fs	Rust	Read-only FUSE filesystem with Poincaré-ball embeddings (Rust).		Auditado: valor no demostrado / Audited: value not demonstrated — AUDIT.md
cortex9-raft-sim	Rust	Raft (election, replication, snapshots) under deterministic simulation: seeded drops/reorders/partitions/crashes + Porcupine-style linearizability checker. Rust, zero deps.		Valor no auditado / Value not audited
cortex9-lsm-engine	Rust	LSM-tree storage engine in Rust: WAL, memtable, SSTables with bloom filters, leveled compaction; crash-tested at every write point		Valor no auditado / Value not audited
cortex9-wal-btree	Rust	Crash-consistent B+tree on a redo WAL with fsync discipline; crashed at every write point with torn writes; proptest vs BTreeMap. Rust.		Valor no auditado / Value not audited
cortex9-wasm-vm	WebAssembly	WebAssembly 1.0 (MVP) interpreter in Rust: decoder, validator, stack machine; passes the official wg-1.0 spec tests, fuzzed with cargo-fuzz		Valor no auditado / Value not audited
cortex9-epoch-gc	Rust	Epoch-based memory reclamation + lock-free hash map (Harris-Michael) in Rust, checked with loom, Miri and ThreadSanitizer. Part of Cortex-9.		Valor no auditado / Value not audited

Servidores MCP escritos desde cero (Python stdlib y Rust), validados entre sí por mcp-crosscheck. / MCP servers written from scratch (Python stdlib and Rust), cross-validated by mcp-crosscheck.

Repo	Lenguaje / Language	Descripción / Description	CI
mcp-server-rs	Rust	Servidor MCP en Rust sin SDK oficial: JSON-RPC 2.0, stdio y Streamable HTTP, herramienta de ejemplo en sandbox seccomp (Linux).
mcp-base	Python	Minimal MCP server from scratch in Python stdlib: JSON-RPC 2.0, stdio/HTTP, HS256 bearer auth, SQLite memory, hash-chained audit log.
mcp-auth-hardened	Python	MCP server with hardened (simplified) auth in Python stdlib: scopes, refresh rotation, revocation, kid rotation, hand-written RS256.
mcp-memory-first	Python	Memory-centric MCP server in Python stdlib: crash-safe, versioned, searchable memory with snapshots.
mcp-resource-heavy	Python	MCP server around resources and prompts in Python stdlib: subscriptions over stdio/SSE, cursor pagination, completion.
mcp-crosscheck	Python	Black-box cross-validation of the mcp-family servers over real stdio/HTTP processes. Python stdlib.

Repo	Lenguaje / Language	Descripción / Description	CI
bench-verify	Rust	Re-run a benchmark claim N times; median + bootstrap CI; PASS/FAIL vs TOML threshold (JSON).
repo-forge	Rust	Rust CLI: husky commit lint + hook, identity check, history leak scan, Rust/C++ scaffolds, gh CI status and profile README rendering
crate-audit-checklist	Rust	Reproducible Rust crate review checklist: tests, clippy, fmt, cargo-audit, unsafe SAFETY hygiene, metadata and Miri, scored JSON report with a schema

Low-level / MCP / tooling tables above are rendered with repo-forge profile render (config). Apache-2.0 on those repos. CVE practice models are maintained separately and each carries its own LICENSE and LIMITATIONS.md.