# Open-source projects.

Adrien Murillo — Murillo Consulting

Adrien Murillo, independent engineer and trainer. Cybersecurity, risk governance, Cloud, AI security and Rust development.

## Public projects, distinct from professional engagements

### [Kube Aegis Forge](/en/projets/kube-aegis-forge)

A reproducible Kubernetes GitOps platform secured end to end.

The AWS extension is validated offline. No real AWS deployment is claimed.

[GitHub](https://github.com/murillo-consulting/kube-aegis-forge)

### [BastShield](/en/projets/bastshield)

A sovereign Kubernetes foundation for cloud, local virtualization and disconnected environments.

The Scaleway path remains experimental and requires operator review before deployment.

[GitHub](https://github.com/murillo-consulting/BastShield)

### [Fortplane](/en/projets/fortplane)

A secure Kubernetes baseline for connected, limited-egress and air-gapped environments.

Cluster validation and offline assembly require Zarf and a dedicated Kubernetes environment.

[GitHub](https://github.com/murillo-consulting/Fortplane)

### [Labz](/en/projets/labz)

A disposable AWS cyber range for training, attack simulation and detection.

AMIs depend on account and region. Real deployment can be billable and intentionally vulnerable.

[GitHub](https://github.com/murillo-consulting/Labz)

### [Gate](/en/projets/gate)

A local LLM gateway with DLP, multi-provider routing, budgets and signed audit records.

Live keys remain runtime-injected. Deployment examples require production hardening.

[GitHub](https://github.com/murillo-consulting/Gate)

### [ControlLoom](/en/projets/controlloom)

A Git-native workspace connecting security controls, implementation evidence and reviews.

Sensitive evidence and private audit reports must not be stored in a public workspace.

[GitHub](https://github.com/murillo-consulting/ControlLoom)

### [LangGraph Resilient Agent](/en/projets/langgraph-resilient-agent)

A durable agent with human approval, idempotent effects and redacted audit data.

Header identity and SQLite are local adapters that must be replaced for production.

[GitHub](https://github.com/murillo-consulting/langgraph-resilient-agent)

### [Spring AI Secure RAG](/en/projets/spring-ai-secure-rag)

Tenant-isolated RAG with verified citations and deterministic abstention.

The in-memory index and header identity are explicitly limited to the local demonstration.

[GitHub](https://github.com/murillo-consulting/spring-ai-secure-rag)

### [Impôts France MCP](/en/projets/impots-france-mcp)

A French tax MCP with a Rust/Wasm engine and versioned official rules.

No shared endpoint is guaranteed and outputs remain simulations, not tax advice.

[GitHub](https://github.com/murillo-consulting/impots-france-mcp)

### [cli-skills](/en/projets/cli-skills)

Portable skills for auditing, documenting and designing with coding agents.

Skills assist the work. They do not replace human review or target-project tests.

[GitHub](https://github.com/murillo-consulting/cli-skills)



## Navigation
- [Independent engineer and trainer.](/en/profil)
- [Engineering services.](/en/services)
- [Selected work.](/en/realisations)
- [Open-source projects.](/en/projets)
- [Guides to put into practice.](/en/ressources)
- [Let’s discuss your project.](/en/contact)
- [From scope to handover.](/en/approche)
- [Real contexts. Real constraints.](/en/secteurs)
- [Learn by making decisions.](/en/lab)
- [Legal notice](/en/mentions-legales)
- [Privacy](/en/confidentialite)
- [Train your teams. Through practice.](/en/formation)

[Contact](mailto:contact@adrien-murillo.com)