Skip to content
View HexCodeYT's full-sized avatar
🏠
Working from home
🏠
Working from home

Block or report HexCodeYT

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
HexCodeYT/README.md

Pawan Sedara

Portfolio PlainLink AussieLK


About

I build privacy-conscious products and reliable backend systems, from native macOS utilities and Rust command-line tools to production payment infrastructure and self-hosted platforms.

My work sits across product engineering, backend architecture, infrastructure and security. I care less about adding technology for its own sake and more about building systems that are understandable, observable and difficult to break.

Build the product.
Understand the infrastructure.
Own the failure modes.

Featured work

A local-first copied-link cleaner for macOS, built with Rust and Swift/AppKit.

PlainLink removes tracking parameters directly at the clipboard layer while preserving user control through inspection and restoration workflows.

Engineering highlights

  • Native macOS menu bar application
  • Rust CLI and reusable cleaning engine
  • Clipboard monitoring through a user LaunchAgent
  • Inspect and restore workflows
  • Conservative, fixture-tested rule system
  • Reproducible third-party ruleset imports
  • Signed and notarized release automation

A production Australia-to-Sri Lanka sourcing and purchasing platform with a backend designed around payment integrity and operational traceability.

Engineering highlights

  • Durable Stripe webhook processing
  • Idempotent payment workflows
  • Reconciliation and incident tracking
  • PostgreSQL and Prisma persistence
  • Audit logging and administrative tooling
  • Consent-aware analytics
  • Automated health monitoring
  • Production deployment on Vercel

A self-hosted public and private search stack built around SearXNG and infrastructure-level privacy controls.

Architecture

  • Isolated Docker bridge networks
  • Caddy reverse proxy
  • Unbound recursive DNS
  • Firewall-enforced service boundaries
  • Automated HTTPS certificates
  • Public and private search instances
  • Telegram health monitoring

Live instance: search-public.hexcode.au

P.A.T.H.

Prime Accelerated Throughput Handler

An experimental segmented prime-analysis engine designed for Apple Silicon using Metal compute kernels and Objective-C++.

Research areas

  • GPU-accelerated segmented sieves
  • Deterministic compute pipelines
  • Parallel Metal dispatch
  • Memory and throughput optimisation
  • Large-range numerical processing
  • Benchmark ranges from 10¹⁰ to 10¹⁵

Engineering principles

  • Local-first where practical Keep user data and core functionality on the user’s machine whenever the product allows it.

  • Correctness before cleverness Prefer explicit state transitions, deterministic behaviour and testable boundaries.

  • Design for failure Retries, duplicate events, partial execution and external outages are normal operating conditions.

  • Security through architecture Use isolation, least privilege, auditable state and minimal trust boundaries instead of relying on surface-level controls.

  • Infrastructure should remain understandable Complexity must justify its operational cost.

Technology

Languages

TypeScript Rust Swift Objective-C++ SQL Bash

Product and backend

Next.js Node.js Prisma PostgreSQL Redis Stripe

Systems and infrastructure

macOS Linux Docker Caddy WireGuard GitHub Actions Vercel

Security and reliability

Idempotency · Audit Trails · Network Isolation · Reconciliation · Least Privilege · Secrets Management · Observability · Zero-Trust Design

Current focus

01. Shipping PlainLink as a polished macOS product
02. Building reliable production payment systems
03. Designing local-first and privacy-respecting software
04. Deepening Linux, networking and infrastructure knowledge
05. Exploring high-performance compute on Apple Silicon

Selected repositories

  • PlainLink Local-first macOS URL cleaner built with Rust and Swift/AppKit.

  • privacy-search-infra Self-hosted privacy search infrastructure with isolated networking and recursive DNS.

  • HexCodeYT Source repository for this GitHub profile.

Connect

Website GitHub

Based in Melbourne, Australia.

Pinned Loading

  1. PlainLink PlainLink Public

    PlainLink is a local-first URL cleaner. The MVP is a Rust command line tool with a portable cleaning engine and a macOS clipboard watcher. The project goal is to become a community-maintained, ad-b…

    Rust 7 1

  2. hexcode-portfolio hexcode-portfolio Public

    TypeScript