I am a Computer Programming student at Ondokuz Mayıs University in Samsun, Türkiye.

Most of my projects start as things I want to learn, understand, or use myself. I try to move them beyond simple demos into projects that can actually be tested, documented, maintained, and sometimes released.

My work currently spans developer tooling, web security, AI-assisted engineering workflows, web applications, computational research, desktop tooling, and game development.

AI is part of my workflow for planning, implementation support, iteration, and review. I do not treat generated output as finished work — tests, runtime behavior, documentation, and manual verification still matter.

Some of my newer experiments remain private until they reach a state worth publishing.

• Developer tooling & security — static analysis, CLI tools, CI integration, SARIF, safe file handling, and automation.
• AI-assisted engineering — supervised coding workflows, verification gates, isolated execution, recovery, and review.
• Game development — experimenting with Godot/C# and Three.js while learning gameplay systems, interaction, AI, combat, simulation, and visual presentation.
• Local-first software — desktop tools, SQLite-backed applications, and experiments with Tauri/Rust.
• Computational research — reproducible protein-structure processing and geometry-based analysis with clearly defined scientific limits.

A local-first supervision layer for Codex designed for engineering work that should not run blindly.

CEWP adds bounded scope, isolated worktrees, verification gates, independent review, recovery controls, workflow orchestration, and evidence receipts while leaving code generation to Codex.

Current: v0.14.0-beta.1 · npm beta CLI · Codex plugin · local MCP bridge · supervised checkpoints · Coordinator Mode · workflow runtime

A deterministic static security scanner for Next.js projects.

It checks common problems around secrets, authentication, rate limiting, XSS, raw SQL, command execution, uploads, API validation, and configuration without using AI at runtime.

Current: v0.3.0 · 20 security rules · 429 tests · CLI presets · AST-assisted checks · Terminal / JSON / Markdown / GitHub / SARIF output

A local computational research prototype for protein-structure preparation and geometry-based pocket candidate analysis.

The project combines a Python analysis pipeline with FastAPI, React, SQLite, reproducible manifests, scientific test gates, and a bounded molecular viewer.

Current: source release v0.1.0 · canonical static detector · experimental NMA layer · FastAPI / React application · Mol* viewer integration

BioVoid is a research prototype, not a clinical, diagnostic, validated binding-prediction, or drug-development system.

A Python ZIP inspection and safe-extraction toolkit built around one idea:

Inspect before you extract.

Pagonic detects deterministic archive risk signals such as path traversal, suspicious entries, extreme compression ratios, unsupported compression methods, and structural errors before extraction.

Current: v0.3.0 public alpha · Python library · CLI · optional PyQt6 GUI · safe-extraction gates · local installation

A Japanese-learning application for Turkish-speaking beginners.

It includes Hiragana and Katakana practice, local SM-2 spaced repetition, a 31-lesson beginner course, quizzes, mini stories, XP and streak systems, kana drawing, N5-style practice, and optional Supabase authentication and sync.

Current: usable local MVP · Phase 1–3.5 features implemented · pre-Phase 4 stabilization

My bilingual personal portfolio built with Next.js, TypeScript, Tailwind CSS, and Framer Motion.

It contains my public projects, technical direction, writing, learning progress, and contact information.

Main stack: TypeScript, JavaScript, Python, Node.js, Next.js/React, FastAPI, Git/GitHub, SQLite, GitHub Actions, npm, and Docker.

Currently expanding into: C#, Godot, Three.js, Rust, Tauri, game systems, desktop applications, and lower-level software architecture.

Currently strengthening: algorithms and data structures, SQL, debugging, testing, code reading, software architecture, and writing more code independently.