Nabil Hersi

01Warden

• Go
• OAuth 2.0 / OIDC
• Keycloak
• Redis
• Docker

A zero-trust reverse proxy in Go that checks every request before it reaches an internal app: who you are, whether you're allowed on that exact path, and whether your session is still valid. Authentication runs through OIDC with PKCE against Keycloak, path policies default to deny, and every decision is written to an audit log. Sessions live in Redis so they can be revoked server-side immediately instead of waiting out a token expiry.

2nd place, MLH Hack The Hill

02Lifts

• Next.js
• TypeScript
• PostgreSQL
• TimescaleDB
• Auth0

Peer-to-peer mentoring for hackathon teams. A team posts a technical blocker, another team helps, and the asking team confirms the fix. I built the scoring engine and the points ledger: every award is an append-only row rather than an update to a running balance, duplicate awards are blocked at the database level, reversals record a reason instead of deleting the original, and a verification script reconciles every row against the live leaderboard.

03ASL word recognition

• Python
• TensorFlow
• Keras
• MediaPipe
• OpenCV

Real-time American Sign Language recognition from a webcam across a twenty-word vocabulary. MediaPipe tracks twenty-one hand landmarks per frame, those landmarks are centred on the wrist and rescaled so the model learns hand shape and motion rather than where the signer is standing, and a two-layer LSTM classifies over a rolling forty-frame window. It reaches 55-60% accuracy against a 5% random baseline; the ceiling is training data, not architecture.