Flutter · Dart · Gemini · Firebase App Store · Google Play

Shipped March 2026 and maintained since — currently v1.3, localised into 11 languages, rated 4.9/5 (small review base, 9 ratings).

Most nutrition apps are built around a food database, which means roughly three billion people eat food the app cannot recognise. CTrackAI takes the visual route instead: point the camera at dal, jollof rice, pho or mole and get calories and macros back from a Gemini vision pipeline. Barcode scanning, voice and manual entry, 20+ nutrient analytics, Apple Health, fasting and hydration tracking, streaks.

I built and run all of it — the AI pipeline, the localisation, the rewarded-ad and subscription economics that make the API costs work, and every store release.

Cross-platform mobile · on-device AI · encrypted health data App Store · Google Play

Launched July 2026. No account required, health data encrypted on-device. Nine condition-specific journeys — typical cycles, PCOS, fertility, pregnancy, perimenopause, endometriosis, PMDD, birth control, teens — instead of one generic flow. 100+ symptom inputs, BBT charting, HealthKit and Health Connect, biometric protection, time-limited doctor sharing.

• Best Cybersecurity Tool — Quantum Sprint 2026 for VulnHunter: paste a GitHub repo URL, get an OWASP Top 10 report in under 30 seconds. Analyses up to 40 files in parallel batches, returns CWE-tagged findings with line-level patches and a weighted 0–100 risk score.
• Finalist — NextDev Hackathon 2026 for CyberMentor: 15 OWASP exploit challenges with Claude-based Socratic review of attempted fixes.

CertiFlow AI — agentic GRC platform. Next.js · TypeScript · Gemini · SSE · RBAC Autonomous compliance checks against AWS S3 encryption, AWS IAM MFA, GitHub branch protection and Okta MFA, with live SSE dashboards, evidence analysis and Admin/User/Auditor scopes. My most substantial single codebase.

Motion MCP — codebase-aware motion generation. TypeScript · Model Context Protocol A 22-tool MCP server that scans an existing app, models Rive-like state machines, ranks high-value interactions, and stages framework-native animation diffs — applying changes only after approval.

HEROS — agent-safe infrastructure toolkit. Node.js · MCP JSON-only contracts, stable error codes, schema validation, approval challenges, idempotent writes, audit receipts, file-locking and atomic-write hardening, plus an OWASP Agentic Top 10 threat model.

Mobile-Native Design System — Python · Flutter · React Native · SwiftUI · Compose A plugin that reconstructs routes, state, data boundaries and design language before proposing changes. Seven focused skills, a 30-rule evidence registry, guarded one-screen-at-a-time implementation across four native frameworks.

TypeScript · Go · WebRTC · WASM · WebGPU · WebCrypto · CRDTs · AGPL-3.0

Ten SDK prototypes exploring what becomes possible when you remove the server: peer-to-peer encrypted file transfer, CRDT sync, swarm video relay, on-device analytics, distributed WASM tasks, passkeys, browser inference.

I commissioned an independent external audit of all ten and published what it found — including my own mistakes. It surfaced a concurrency bug losing 90% of writes, remotely triggerable prototype pollution, silent file corruption, and documentation claims my code did not support. I fixed them and shipped the fixes.

What held up afterwards: CRDT convergence verified across 1000+ randomised fuzz seeds with zero divergences, and genuine AV1 encoding through WebCodecs.

These are prototypes, not production libraries — no external users. I list them because the audit-and-repair cycle is the part I would want a team to judge me on.

AllRTC · GhostSearch · PeerVault · SyncForge · PulseNet · MeshAuth · EdgeInfer · SwarmCompute · SyncPlay · ZeroQ

soumyadebnath1619@gmail.com · LinkedIn

Open to software engineering roles — mobile, full-stack, or applied AI. Kolkata-based, open to relocation or remote. Completing an MCA in 2026.