Skip to content

// systems I build & run

My Work

Systems I've designed, built, and run: the ML platform I built at work, the fixes I sent back to the projects it's built on, and my own projects and infrastructure.

At work

Founding MLOps hire · in production

An ML platform, built from scratch

At a fintech serving millions of users, I designed and built the company's machine-learning platform and still run it as its sole engineer, from architecture decisions to daily operations. Data scientists go from Snowflake and S3 data through notebooks, training, benchmarking and versioning to a served model in one place. Five team workspaces run on it.

Serving with provenance, no tenant credentials

Deployments accept only registered, versioned models. A custom KServe storage container resolves an mlflow:// reference through the tracking server with the team's own token, so no object-storage keys exist in tenant namespaces; a Kyverno admission policy rejects anything that doesn't point at a registered model version.

An SDK, CLI and MCP server

One authenticated entry point for notebooks, training, the registry, serving and status, usable from a laptop over OIDC with no kubeconfig. State-changing operations sit behind an explicit opt-in, because an AI assistant that can redeploy production by accident is a design mistake, not a feature.

Shared H100s instead of one GPU per person

HAMi sharing over 8 NVIDIA H100s: selectable VRAM slices, up to 72 workloads at once, several GPUs per notebook when needed, and admission-time quota checks that refuse with the actual numbers instead of hanging. GPU nodes are provisioned on demand per workload.

Per-team access, per-user attribution

Team workspaces with Keycloak group access, and notebooks, experiments and deployed models traced back to the person who created them. Token-verified pipeline submission is rolling out now.

Stack: EKS · Kubeflow · MLflow · KServe · Langfuse · Label Studio · HAMi · Keycloak · Vault · Istio · Kyverno · Argo CD · Snowflake · Python

Upstream contributions

Fixes I found while running that platform in production, sent back to the projects it's built on.

Things I've built

01

ServerGlass

Agentless SSH server monitoring for macOS, iOS, Android, Windows and Linux. One Rust core owns the parsing, scheduling, rate maths and health verdicts; each platform contributes only a view. A full refresh costs exactly one network round trip however many collectors are enabled, and a test fails if that ever stops being true. Nothing is installed, written or modified on a monitored host.

Stack: Rust · SwiftUI · Kotlin · GTK4 · WinUI 3 · UniFFI

View on GitHub →
02

Morgan

A project-scoped memory for AI tools, consolidated into dated facts by a local model. Tell it something from any repository and any MCP client recalls it, scoped to the repo it is working in. Hybrid recall (sqlite-vec and FTS5) fused by reciprocal rank, facts with validity intervals rather than overwrites, and a labelled probe suite that scores recall instead of assuming it works.

Stack: Python · SQLite · MCP · llama.cpp · RAG

View on GitHub →
03

strix-halo-llm

Measured llama.cpp tuning for AMD Strix Halo: the real memory ceiling (about 109 GB, not the 96 GB the BIOS implies), the flags that matter, and five obvious optimisations that measurement ruled out. Shipped with its evaluation harness and a catalogue of the harness bugs found along the way, each with the believable wrong number it produced.

Stack: Python · PowerShell · Vulkan · benchmarking

View on GitHub →
04

lazarev.cloud — Self-Hosted Production Platform

My own infrastructure and proving ground: a 9-node Proxmox cluster with NVIDIA GPU and Ryzen AI NPU passthrough for local AI workloads, fully defined as code with OpenTofu across 11 providers. Vault-issued internal PKI and single sign-on across every service, a self-hosted delivery chain (GitLab CI with Linux, Windows and macOS runners, Harbor, Nexus, Renovate), CrowdSec, Prometheus and Grafana, and automated 3-2-1 backups. This site runs on it.

Stack: Proxmox · OpenTofu · Vault · GitLab CI · Harbor · Nexus · CrowdSec · Prometheus/Grafana

lazarev.cloud →

Also: fingerprint-manager, a Qt desktop front end for fprintd. More on GitHub.

Public work

Free · CC BY 4.0

AI without the fear — a course for beginners

I wrote this for my parents, then made it public. Five short lessons on using AI assistants safely, for people who find them confusing or intimidating: what a chatbot actually is and where it fails, which privacy settings to change, how to ask a question that gets a useful answer, why models state wrong facts with total confidence, and how voice cloning and deepfakes are being used against exactly this audience. Every figure is sourced to an official publication. English and Russian, plus a print-ready handbook and a slide deck for anyone who wants to run a session.