Le Duc Tam

Systems Engineer & AI Agent Architect • 11+ Yrs Infrastructure

Bridging 11+ years of enterprise IT infrastructure with autonomous AI agent harnesses and deterministic governance.

"I don't build systems to impress — I build them to quietly endure. Solid systems begin with steady hands, zero-trust boundaries, and physical evidence."

11+

Years Enterprise Ops

Zero-WAN

Default-Deny Ingress

< 2s

LogSQL Fleet Triage

Engineered Systems GitHub Profile LinkedIn

telemetry@tamld:~

zsh • active

// System ready. Click commands or execute below:

guest@tamld:~$ tamld --status

• Node: Proxmox VE (i5-8500, 16GB Hard Budget)

• Gateway: MikroTik RouterOS (DHCP Authority)

• Ingress: Traefik v3 + CrowdSec (Zero-WAN)

• Agent Harness: g8s Subagent Capability Sandbox

press / to focus

Operating Substrate & Toolchain

Proxmox VE

MikroTik RouterOS

Go / Golang

Python 3.11

Ansible IaC

Traefik v3

Tailscale Mesh

VictoriaLogs

Featured Engineered Systems

Physical codebases, reproducible receipts, zero ghost capacity.

Core Runtime • Pure Go 1.22+

g8s (The Gatekeepers)

A lightweight, zero-trust process execution & capability harness for AI Agent CLI Workers. "k8s orchestrates your compute containers; g8s orchestrates your AI subagents."

// Authority Delegation Flow:

Frontier Brain (Claude/Opus)

│ issues time-limited write intent

▼ [g8s Supervisor: Path-Scoped Receipt Schema v3]

│ drops kernel capabilities + restricts cwd

▼ Worker Executed (Antigravity / Code CLI) ➔ Exit Code Verified

Subagent Capability Sandboxing github.com/tamld/g8s ↗

Bare-Metal SRE

AI-Assisted Infrastructure Platform (IaC)

Production-inspired reference architecture for bare-metal homelabs: Traefik v3, CrowdSec, Rootless Podman, Tailscale Mesh, and VictoriaLogs.

• Dual-Plane WAN vs LAN isolation

• Single RouterOS DHCP lease authority

Ansible • Proxmox github.com/tamld/IaC ↗

🔒 Architecture Case Study Private SSoT

tamld-llm-wiki (Governed Second Brain)

Deterministic Second Brain with physical note physics (wiki.py). ADLC finite state machines, Gate D deep-why audits, and an epistemic claim ladder (Hypothesis ➔ Proven).

• 3-Layer Map Protocol (Global ➔ Architectural ➔ Behavioral)

• Pre-commit and commit-time hard git hooks

Python 3.11 • Physics Engine Proprietary Knowledge Core

HITL Remediation

defense-in-depth (Telegram HITL Approval)

Human-in-the-loop incident response cards with HMAC-SHA256 signature verification for critical autonomous container restarts, firewall mutations, and triage.

• Cryptographic one-click approval / reject callbacks

• Zero accidental blast radius on live nodes

Security • Autonomous SRE github.com/tamld/defense-in-depth ↗

Career Evolution & Invariants

The Journey: 11 Years to Symbiosis

Click chapters below • 2014 → Present

Machine-Readable Discovery Endpoint • llmstxt.org

AI agents can ingest Tam's entire verified technical profile via raw Markdown in a single token-efficient HTTP request.

/llms.txt /llms-full.txt

$ curl -sL https://flowaxon.com/llms.txt