Skip to content
View itsoumya-d's full-sized avatar

Block or report itsoumya-d

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
itsoumya-d/README.md

Soumya Debnath

Founding AI Product Engineer · Forward-Deployed Software Engineer

Building Autonomous Agent Infrastructure, Enterprise AI Systems & Production Mobile Apps

LinkedIn GitHub Email

Kolkata, India · Open to Relocation & Remote (Global) · 5+ Years Production Delivery & Systems Architecture


📱 Shipped Consumer Products (Live on App Store & Google Play)

CTrackAI — AI Calorie & Nutrition Tracker

Flutter · Dart · Gemini Vision · Firebase · In-App Purchases
App Store · Google Play · 📖 Engineering Case Study

  • Solo-built and shipped end-to-end: Architecture, multimodal AI pipeline, 11-language localization, App Store/Play release operations, and unit economics.
  • Beyond database hits: Low-latency Gemini vision pipeline recognizes real-world uncurated meals (dal, jollof rice, pho, regional mixed dishes).
  • Feature suite: Barcode scanning, voice logging, 20+ micronutrient analytics, Apple Health / Health Connect sync, fasting timers, hydration tracking, and streak mechanics.
  • Economics & Reliability: Local perceptual image hash (pHash) cache cuts recurring API costs by 42% (<240ms cached lookup); holds a 4.9/5 rating on the App Store.

Preeo — Privacy-First Cycle & Health Companion

Cross-Platform Mobile · On-Device SQLite Encryption · Biometric Auth · Scoped Cloud Sync
App Store · Google Play · 📖 Architecture & Data Flow Case Study

  • Cryptographic local storage: Core health logs encrypted on-device (AES-256 GCM SQLite) with FaceID/TouchID protection. No account required for core tracking.
  • Explicit data boundaries: Optional Firebase backup and cloud AI insights require explicit per-feature opt-in; users retain total data deletion and local export control.
  • Condition-specific journeys: 9 distinct clinical journeys (cycles, PCOS, fertility, pregnancy, perimenopause, endometriosis, PMDD, birth control, adolescent health) with 100+ clinical symptom inputs.
  • Clinical export: Secure doctor-share PDF generation and Apple HealthKit / Android Health Connect integration.

🤖 Flagship Agent Infrastructure & Applied AI Systems

┌──────────────────────────────────────────────────────────────────────────────────────────┐
│                             AGENT INFRASTRUCTURE STACK                                   │
├───────────────────────────────┬───────────────────────────────┬──────────────────────────┤
│ AutoPilot FDE 2.0             │ Motion MCP                    │ HEROS                    │
│ Autonomous Business Process   │ Codebase-Aware Motion Engine  │ Agent-Native Action      │
│ Discovery & LangGraph Agents  │ 64 MCP Tools · 230+ Tests     │ Safety & Contracts       │
├───────────────────────────────┼───────────────────────────────┼──────────────────────────┤
│ CertiFlow AI                  │ HostShift                     │ Mobile Design System     │
│ Autonomous GRC & Trust        │ Cross-Platform Generative UI  │ Whole-Codebase Scanner   │
│ Continuous Audit Automation   │ Open Benchmark (230+ Tests)   │ Multi-Framework Codex    │
└───────────────────────────────┴───────────────────────────────┴──────────────────────────┘

1. AutoPilot FDE 2.0 — Autonomous Forward-Deployed Engineering Agent

Python 3.12 · FastAPI · Next.js 15 · LangGraph · Shannon Entropy · Dual-Transport MCP

  • Workflow-Mining Pipeline: Ingests unstructured Slack, WhatsApp, email, and call transcripts, extracts organizational activities via Bayesian parsing, and constructs directed process graphs.
  • Graph Entropy Scoring: Formulates an Automation Potential Score (APS) using transition entropy to pinpoint operational bottlenecks, then runs 1,000-event pre-deployment Monte Carlo simulations.
  • Self-Deploying State Machines: Automatically compiles typed LangGraph state machines with Human-in-the-Loop review gates.
  • Dual MCP Support: Ships stdio and Streamable-HTTP (POST /mcp) transports compatible with Claude Code, Cursor, and Codex CLI. Evaluated across 158 multi-turn interaction runs across 8 enterprise departments.

2. Motion MCP — Codebase-Aware Motion Engine for Coding Agents

TypeScript 5.7 · Model Context Protocol · SceneDoc Format · Kimodo.cpp Diffusion

  • 64 MCP Tools & 230+ Tests: Plugs into Cursor, Claude Code, or Codex CLI to turn existing codebases into animated, living products without rewrites or proprietary runtimes.
  • Framework-Native Diff Staging: Scans routes and component trees, models interactive state machines, compiles open SceneDoc specifications, and generates native code for React, React Native, Flutter, Unity, and Three.js/R3F.
  • 3D Diffusion Bridge: Features natural-language text-to-3D skeletal animation diffusion across 22 SMPL-X standard joints with retargeting for Mixamo and Unity Mecanim.

3. HEROS — Agent-Native Infrastructure & Safety Primitives

Zero-lang Primitives · Node.js / ESM SDK · MCP-Native Contracts · OWASP Agentic Top 10

  • Contract-First Agent Execution: Deterministic JSON-only outputs, stable machine-readable error codes, schema validation, idempotent writes, and auditable receipts so agents never hallucinate text execution branches.
  • Core Primitives:
    • @heros/agentic: Installable SDK surface for explicit, authenticated, auditable agent website actions.
    • forge: Agent-safe database migration risk gate scoring schema modifications before execution.
    • ledger: Accounting receipt primitive with idempotency keys to prevent duplicate actions.

4. CertiFlow AI — Autonomous GRC & Agent Telemetry Simulator (Prototype)

Next.js 14 · TypeScript · Gemini Computer Use · Server-Sent Events (SSE) · RBAC

  • Autonomous Audit Automation (Prototype): Demonstrates autonomous agents continuously inspecting compliance controls across AWS, GitHub, and Okta via Gemini Computer Use workflows.
  • Zero-Cloud Demo Architecture: Runs on simulated AWS telemetry and in-memory audit logs for zero-dependency local evaluation and immediate reviewer verification.
  • Live SSE Dashboards: Real-time compliance score ring with zero-polling updates, automated evidence parsing, and scoped Admin/User/Auditor access controls.

5. HostShift — Cross-Platform Generative UI Portability Benchmark

Python 3.11 · AGPL-3.0 · 230 Passing Tests (84% Coverage) · Open Benchmark Suite

  • Empirical UI Portability Benchmark: Evaluates whether LLM-generated UI code preserves visual and functional semantics across 5 targets: Web (Chromium), iOS (SwiftUI), Android (Jetpack Compose), Flutter (Dart), and Terminal (Textual).
  • Rigorous Validation Gates: Combines AST-level syntax conformance checkers with isolated render oracles. Measured across 100 test tasks using tree-edit distance and bootstrap statistics.

6. Mobile-Native Design System — Codebase-Aware Codex Plugin

Python · Flutter · React Native · SwiftUI · Jetpack Compose

  • Whole-codebase analyzer reconstructing routes, screen state, and design tokens. Enforces 7 progressively disclosed skills and a 30-rule evidence registry for guarded, one-screen-at-a-time native implementation.
  • Mobile Queue Reliability Research: FieldLens Concurrency & Queue Durability Case Study (remediating concurrent read-modify-write lost updates and retry persistence).

🧪 Browser-Native Infrastructure Suite (10 Edge Prototypes)

TypeScript · Go · WebRTC · WASM · WebGPU · WebCrypto · CRDTs

An experimental research suite exploring client-side P2P systems and distributed edge execution:


🏆 Featured Tools & Hackathon Prototypes

  • VulnHunter: High-speed AST & regex security scanner analyzing up to 40 source files in parallel; outputs CWE-tagged reports with automated line-level remediation patches.
  • CyberMentor: Interactive FastAPI security tutor featuring Socratic Claude-assisted hints and vulnerability walkthroughs.

🛠️ Technical Arsenal

Category Core Stack & Tooling
Applied AI & Agents LangGraph, Model Context Protocol (MCP), Gemini 1.5, Claude 3.5, OpenAI Vision, Tool Calling, Structured Outputs, Process Mining, Monte Carlo Simulation
Full-Stack & Real-Time TypeScript, Next.js 15, React, Python (FastAPI), Node.js, REST APIs, Server-Sent Events (SSE), WebSockets, PostgreSQL, Supabase, Redis
Mobile Engineering Flutter, Dart, React Native, Expo, HealthKit, Health Connect, Biometric Authentication, SQLite Encryption, App Store Connect, Play Console
DevOps & Security Docker, GitHub Actions CI/CD, OWASP Agentic Top 10, Threat Modeling, SOC 2 / ISO 27001 Controls, Linux, Git

📬 Connect

Pinned Loading

  1. certiflow-ai certiflow-ai Public

    AI-powered compliance automation platform — autonomous agents verify SOC 2, ISO 27001 controls 24/7

    TypeScript 7 2

  2. ContentForge-AI ContentForge-AI Public

    TypeScript

  3. cybermentor cybermentor Public

    AI-powered OWASP security learning platform — learn to hack, then fix. Built for NextDev Hackathon 2026.

    HTML

  4. fieldlens__ fieldlens__ Public

    FieldLens - AI coaching app for tradespeople built with Expo React Native

    TypeScript

  5. flux-social flux-social Public

    TypeScript

  6. vulnhunter vulnhunter Public

    AI-powered OWASP security scanner for public GitHub repos — paste a URL, get a full vulnerability report in seconds. Built for Quantum Sprint 2026.

    HTML