Hero

A multi-tenant service platform written in Rust — the daemon that manages a single host, the controller that drives a fleet of them, and the operator console on top.

Skills

Rust · OpenRPC · Dioxus · WebAssembly · cloud-hypervisor · btrfs

Contributions

• Split a single-host management daemon into a host agent and a fleet controller, adding a host registry, health probing and resumable cross-host upgrade rollouts over an overlay network.
• Scoped the controller to seven fleet-wide RPC methods rather than mirroring the host’s seventy-four, avoiding some forty hand-written wrapper types and permanent API drift.
• Moved service authorization onto cryptographically verified peer identity, scoped per service and per method and enforced fail-closed, after auditing every consumer across the platform and sequencing the dependent fixes.
• Partitioned multi-tenant storage per authenticated request context, with the tenant identifier stamped server-side rather than taken from the caller.
• Migrated the platform to a schema-first pipeline that generates server, SDK and documentation from one definition.
• Wrote the VM abstraction over cloud-hypervisor — disk-image creation, overlayfs root filesystems, multi-disk attachment and overlay networking — exposed through an embedded scripting API so launches are reproducible.
• Authored the platform’s btrfs layer of subvolumes, quotas and device management, and its container support on Kata with resource limits.
• Shipped a Dioxus/WebAssembly operator console and extracted it into a shared component crate, so the admin shell and the service UI render from one implementation.