Pitzi Labs — the consulting-practice landing site (destined for pitzilabs.dev). Astro static site served on the foundry-platform-demo AWS stack via GitHub OIDC → ECR/ECS/ALB. Previewing behind a hidden subdomain before promotion to the pitzilabs.dev FQDN.

Production residential smart home on Home Assistant + Proxmox, 40+ entities managed declaratively in YAML: Konnected alarm panels (custom ESPHome firmware), Hue/Kasa lighting, Sonos audio, energy + environmental monitoring, an automation library, and two purpose-built dashboards — gitops-deployed.

Git-driven, fully declarative observability for a Firewalla home network: one Grafana Alloy container ships metrics + logs to Grafana Cloud (Mimir + Loki, free tier), with Terraform-provisioned dashboards and alerts. node_exporter, LogQL, and a wall-mounted kiosk view.

Reference three-tier AWS platform, 100% Terraform: multi-AZ VPC, ECS Fargate behind an ALB (ACM/Route 53), RDS Postgres + ElastiCache Valkey, WAFv2, KMS, least-privilege IAM, and CloudWatch/CloudTrail/Config + budget guardrails. Hosts the ice-cream-book app live at icecreamtofightwith.com.

Forensic reference-integrity auditor for academic publishing — built for nursing and health-sciences editors who need to catch fabricated, manipulated, or suspicious citations before print. Prompt-engineered deep-scan verification on Claude with live web search.

Bullpen — a self-hosted fleet of headless Claude agents on the LAN. Drop a job, an idle worker picks it up, does the work, opens a PR for review. Scheduled (cron) + triggered (NAS inbox) jobs, per-project context, GitHub App auth, per-job metrics to Grafana, crash-safe at-least-once delivery.

Single-command bootstrap scripts that turn a fresh Linux box into a fully configured cloud-infrastructure dev workstation — same tools, prompt, and workflow across four variants: Chromebook Crostini, Xubuntu (Proxmox VM), Fedora KDE (Proxmox VM), and bare-metal Ubuntu laptop.

Self-hosted security log pipeline shipping Zeek DNS, connection-flow, and TLS-handshake logs from a Firewalla Gold SE to Axiom via Fluent Bit. 30-day searchable history, per-device drill-down dashboards, and APL queries — at zero recurring cost.

The content + Astro/Nginx app deployed onto the foundry-platform-demo AWS stack (via GitHub OIDC → ECR/ECS/ALB) to serve icecreamtofightwith.com. Underneath it's "Ice Cream to Fight With" — a 28-recipe custard ice-cream cookbook in modular Markdown with automated PDF compilation.

Reusable GitHub Actions workflows shared across the PitziLabs fleet: an interactive @claude responder (routes to opus/sonnet/haiku by label), automated PR review, CI patterns, and fleet-wide policy enforcement. The canonical source for cross-repo CI conventions.