Skip to content
View edycutjong's full-sized avatar
12 followers · 1 following

Achievements

Achievement: Pull Sharkx3Achievement: Pair Extraordinairex3Achievement: Arctic Code Vault Contributor

Achievements

Achievement: Pull Sharkx3Achievement: Pair Extraordinairex3Achievement: Arctic Code Vault Contributor

Block or report edycutjong

Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
edycutjong/README.md

EDY CU

Jakarta, Indonesia · Remote (async-first) edy.cu@live.com · github.com/edycutjong · linkedin.com/in/edy-cu-tjong · edycu.dev

SUMMARY

Full-stack engineer specializing in agent infrastructure and MCP (Model Context Protocol) — building the safety layer that lets AI agents act on real systems: transaction lifecycles, human-in-the-loop approval, spending caps, approval revocation, prompt-injection defense. TypeScript · Python · Go · Rust. 14 years shipping software.

SELECTED PROJECTS

BagOS — MCP server for Solana · TypeScript, Solana Web3.js, MCP SDK

  • Shipped v2.0.0 to npm with provenance; listed in the official MCP registry. Full write-path lifecycle: simulate → approve → sign → send → confirm, with per-transaction and per-session spending caps, devnet by default.
  • Caught and publicly remediated a fake-success defect in v1: deprecated the release, published the postmortem, and added CI gates (tarball audit, fabricated-success grep) that make the bug class unshippable.
  • 212 tests with enforced 100% coverage; CodeQL and secret scanning clean; CI/CD with signed publishing and auto-deprecation.

aegis — multi-agent support engine with human-in-the-loop · Python, FastAPI, LangGraph

  • Agent investigates issues via SQL and documentation, proposes actions, and hard-stops for human approval before any destructive operation.

revoker — approval hygiene for automated wallets · EVM

  • Threat rules auto-revoke dangerous token approvals on agent, keeper, and relayer signers before drain contracts execute; demonstrated on-chain.

antigen — prompt-injection defense for metadata graphs · DataHub

  • Sweeps catalog entities for jailbreak and exfiltration payloads, including invisible-Unicode variants; defuses them in-graph with tamper-evident hashes and maps blast radius through lineage.

armsmith — ARM/Graviton benchmark toolkit · Python

  • Signed releases on PyPI via trusted publishing; versioned documentation.

SKILLS

Languages: TypeScript, Python, Go, Rust, SQL Systems: MCP servers, Solana (Web3.js / Anchor), EVM, Node.js, FastAPI, Next.js, PostgreSQL, Supabase Practices: CI/CD (GitHub Actions), signed/provenance publishing (npm, PyPI), CodeQL, enforced coverage gates, Docker

Pinned Loading

  1. BagOS BagOS Public

    🚦 MCP server for Bags on Solana. Every AI-initiated spend is token-gated, SOL-capped, and requires a single-use confirmation before anything is signed.

    TypeScript 1 1

  2. aegis aegis Public

    🏢 Autonomous Enterprise Action Engine — Multi-agent AI with Human-in-the-Loop approval, dynamic model routing, semantic caching, and real-time observability. FastAPI + LangGraph + Next.js + Supabase.

    Python 1

  3. revoker revoker Public

    🛡️ Revokes dangerous token approvals through KeeperHub in 13.47s median — Agents Onchain finalist, top 10 of 190

    TypeScript 1

  4. antigen antigen Public

    🧬 A prompt-injection immune system for the DataHub metadata graph — detects, quarantines, and cures OWASP LLM01 payloads hidden in catalog metadata.

    Python

  5. armsmith armsmith Public

    🛠️ The agent that forges your repo for Arm — profiles any AI repo on aarch64, diagnoses why it's slow, and opens a fix PR where every fix must clear a reproduce gate or get dropped.

    Python