Software Engineer · AI Systems Builder · Cybersecurity · Full-Stack & Cloud Engineering
Founder & Managing Director, Codesphere Innovations (U) Limited · Kampala, Uganda
My journey has never been about collecting technologies. It has been about using them to build things that matter — from practical business tools, through engineering leadership, to AI, cybersecurity, real-time platforms and open source.
Explore my engineering portfolio · See Cyber Dragon · Explore Auralis Local
I am Akandwanaho Ivan Alvin (commonly known as Alvin), a Ugandan software engineer, cybersecurity practitioner, full-stack developer, and technology entrepreneur based in Kampala, Uganda.
I build intelligent, secure, and scalable digital products spanning artificial intelligence, full-stack web and mobile platforms, defensive cybersecurity, financial technology, and cloud systems. My work focuses on solving real operational problems—particularly in African markets—while architecting open-source systems and developer tools engineered for global standards.
I believe great engineering combines technical depth, practical usefulness, security by design, and clear architectural trade-offs.
My career has progressed from building foundational business software and independent engineering systems into technical leadership, company building, and open-source systems architecture:
- Foundation & Applied Engineering: Studied at ISBAT University (Uganda) while independently building operational software systems across retail, pharmacy, hospitality, hardware, and logistics domains.
- Entrepreneurship (
4codex Technologies): Founded 4codex Technologies, delivering custom web engineering, cybersecurity, automation, and business software solutions. - Technical Leadership (
Waanverse Labs Inc.): Served as Chief Technology Officer (CTO) and Head of Engineering at Waanverse Labs Inc. (departed March 2025), leading technical strategy, system architecture, and engineering workflows. - Business & Engineering Leadership (
Codesphere Innovations (U) Limited): Serving as Founder and Managing Director of Codesphere Innovations (U) Limited, combining hands-on software architecture with company leadership, AI-enabled product engineering, cloud solutions, and cybersecurity. - Marketplace Product Engineering (
Funa Gigs—Jaminsa Ventures Limited): Serving as Founder and Project Lead for Funa Gigs (a digital services marketplace under Jaminsa Ventures Limited), architecting Flutter mobile apps, real-time job matching, Instant Hire workflows, location-based discovery, payment integrations, and trust/safety controls. - Advanced Systems & Open Source: Designing and maintaining verifiable open-source flagships across local AI inference, multi-agent governance, AI security firewalls, double-entry financial ledgers, and distributed observability.
| Role | Organization | Scope & Engineering Focus | Status |
|---|---|---|---|
| Founder & Managing Director | Codesphere Innovations (U) Limited | Custom software architecture, AI-powered applications, web/mobile platforms, cybersecurity, cloud infrastructure, and digital transformation. | Current |
| Founder & Project Lead | Funa Gigs (Jaminsa Ventures Limited) | Full-stack marketplace architecture, Flutter mobile engineering, real-time matching, live location workflows, payment integrations, identity verification, and RBAC admin tooling. | Current |
| CTO & Head of Engineering | Waanverse Labs Inc. | Technical strategy, software architecture, engineering management, development workflows, and product delivery. | Former (until Mar 2025) |
| Founder | 4codex Technologies | Software development, web application engineering, cybersecurity, automation, and technical consultancy. | Historical Venture |
- Education: Studied at ISBAT University, Uganda, complemented by continuous independent systems engineering and applied research.
|
Open-Source Community Cyber Defense Platform Explainable, 100% SSRF-free heuristic platform for inspecting suspicious SMS messages, phishing URLs, IDN Punycode homographs, brand-impersonation domains (18+ African & global brands), and Mobile Money / USSD diversion traps (
|
Privacy-First Local AI Workspace for Apple Silicon Deliberate local AI assistant engineered for 16 GB Apple Silicon Macs. Combines streaming Ollama chat, local MLX/Whisper voice rooms, a line-aware Hybrid BM25 + Phrase RAG Knowledge Base with inline citations, and approval-gated workspace tools.
|
|
AI Agent Security & Governance Framework (OWASP 2026) Deterministic security firewall for autonomous AI agents. Features multi-layer prompt-injection & RAG context-poisoning detection, capability allow/deny enforcement (Shell, Filesystem, SSRF, SQLi), secret egress redaction, and a SHA-256 hash-chained audit ledger.
|
Auditable Multi-Agent Decision & Research System 7-agent Investment Committee orchestration where a dedicated Devil's Advocate Agent stress-tests theses and holds unilateral veto power. Includes a leakage-free walk-forward backtester with ATR slippage modeling, cryptographic Trade Passports, and an MCP server.
|
|
African Payment Orchestration & Double-Entry Ledger Institutional payment state machine and integer minor-unit double-entry accounting engine (
|
Cloud Observability, Distributed Tracing & SLO Lab Self-hostable OpenTelemetry trace DAG analyzer that computes critical-path latency bottlenecks (
|
- Artificial Intelligence & Agentic Systems: Local LLM inference (Ollama, MLX, Whisper), multi-agent adversarial deliberation, hybrid BM25 + phrase retrieval (RAG), structured outputs, and AI capability firewalls.
- Defensive Cybersecurity & Trustworthy Systems: Static URL/domain heuristics, IDN homograph and brand-impersonation detection, mobile-money/USSD fraud defense, secure API design, RBAC/MFA, and tamper-evident audit trails.
- Full-Stack, Marketplace & Mobile Engineering: Cross-platform Flutter applications, React/Next.js interfaces, real-time matching and geolocation workflows, payment orchestration, and modular backend architectures.
- Fintech, Healthcare & Sector Platforms: Double-entry accounting ledgers, idempotent webhook processing, offline-first smallholder agricultural advisory systems (
agrisignal), and clinical telemedicine monorepos (Clinical-Virtual-Health-Platform).
-
SSRF-Free Static Threat Deconstruction (
cyber-dragon): Evaluates untrusted URLs, QR payloads, and USSD strings purely lexically (~0.28 msmean latency) so the analyzer can never be abused as an SSRF proxy or trigger attacker tracking beacons. -
Loopback Sandboxing & Single-Use Human Approval Gates (
auralis-local): Binds local AI services strictly to127.0.0.1with CSRF/origin validation and requires session-bound, 5-minute expiring human approval tokens before indexing files or persisting state. -
Integer Minor-Unit Accounting & Zero-Sum Invariants (
flowledger): Rejects IEEE-754 floating-point values across all financial paths, enforcing$\sum \text{Debits} \equiv \sum \text{Credits}$ and SHA-256 hash chaining on every journal entry. -
Marketplace & Real-Time Product Architecture (
Funa Gigs— Jaminsa Ventures Limited): Combines Flutter mobile applications, Elixir/Phoenix and Supabase/PostgreSQL backend services, live location discovery, Instant Hire workflows, identity verification, and payment state management. -
Offline-First Rural Synchronization (
agrisignal): Uses Hybrid Logical Clocks (HLC) and Last-Write-Wins Element-Set (LWW-Element-Set) outboxes for rural field synchronization alongside<=160-character GSM-7 advisories in English, Luganda, and Swahili.
| Category | Verified Practical Stack |
|---|---|
| Primary Languages | Python, TypeScript, JavaScript, Dart, SQL, HTML/CSS |
| Additional Languages | Elixir, Kotlin, Java, C#, PHP |
| Frontend & UI | React, Next.js, Vite, Tailwind CSS, Accessible Component Architecture, Data Visualization |
| Backend & APIs | FastAPI, Node.js, Flask, Django, Fastify, Elixir/Phoenix, REST/OpenAPI, Webhooks, SSE, MCP |
| Mobile Engineering | Flutter, Dart, Kotlin, Android Development, Location Workflows, Mobile Auth & Push Notifications |
| Databases & State | PostgreSQL, Supabase, Prisma, SQLite, MySQL, Firebase, Redis, Relational & Ledger Modeling |
| AI & Local Inference | Ollama, Apple Silicon MLX, Whisper, Hybrid BM25 RAG, Multi-Agent Orchestration, TensorFlow |
| Cloud, DevOps & Security | Docker, GitHub Actions CI/CD, Google Cloud, AWS, Vercel, Linux, OpenTelemetry, OWASP Agentic Security |
All flagship repositories are documented with architecture guides, ADRs, reproducible test suites, and scoped contributor issues:
- Browse open
good first issueandhelp wantedtasks acrosscyber-dragon/issues,auralis-local/issues,agentshield/issues, andflowledger/issues. - Explore full architectural case studies and verified benchmark comparisons in the companion repository:
codesphere-portfolio.
- Expanding Cyber Dragon with multilingual East African community fraud response playbooks (
en,lg,sw) and regional telecom/financial domain protections. - Advancing Auralis Local and AgentShield for safe, low-memory local agent execution on Apple Silicon hardware.
- Scaling Codesphere Innovations (U) Limited and leading product engineering on Funa Gigs (Jaminsa Ventures Limited).
- Company Website: https://www.codesphereug.com — Codesphere Innovations (U) Limited
- LinkedIn: https://www.linkedin.com/in/the4codex — Akandwanaho Ivan Alvin
- GitHub Portfolio: https://github.com/codesphere-u
- Engineering Case Studies & Architecture Explorer: https://github.com/codesphere-u/codesphere-portfolio