Hi there, I'm Carlos Murillo 👋

Senior Full-Stack, Mobile & Systems Engineer
Specializing in High-Performance TypeScript/React, Native Android / React Native & Smart Contracts (Rust, Solana, Soroban)

---

👨‍💻 About Me

I am a senior software and systems engineer with over a decade of industry experience (GitHub member since 2011). My background spans enterprise private architecture, native mobile application engineering, and open-source systems programming.

Today, my core focus is delivering robust production software across three primary domains:

• 📱 Mobile & Cross-Platform Engineering: Native Android development (Kotlin, Jetpack Compose, Android Auto / CarAppService) and cross-platform apps with React Native & TypeScript.
• ⚡ Full-Stack & Distributed Systems: Scalable web applications using React, Next.js, Node.js, and relational databases (PostgreSQL, Row Level Security, transactional advisory locks).
• 🦀 Web3 & Systems Security: Secure smart contract protocols in Rust on Solana (Anchor framework, PDA security, AST instruction heuristics) and Stellar Soroban (state persistence, TTL rent management, escrow logic).

---

🛠️ Technical Stack & Tooling

Languages:          TypeScript, JavaScript, Rust, Kotlin, SQL
Mobile & Frontend:  React Native, Android (Jetpack Compose, Android Auto), React, Next.js, Tailwind CSS
Backend & Cloud:    Node.js, Express, PostgreSQL (Advisory Locks, RLS), Supabase, Redis, REST APIs
Web3 & Protocols:   Solana (Anchor, Web3.js), Stellar (Soroban SDK, Horizon/RPC)
Testing & CI/CD:    Jest, Vitest, Cargo Test, GitHub Actions, Docker, ESLint

---

🌟 Featured Original Projects

🛡️ SolAgent Sentinel

Autonomous pre-flight security agent & AST firewall for Solana Actions (Blinks) and autonomous AI trading agents.

• Tech: Rust, Solana Anchor, TypeScript, Next.js 14, Tailwind CSS, Vercel.
• Architecture: Deconstructs transaction Abstract Syntax Trees (AST) in memory to intercept malicious SetAuthority wallet drainers and unlimited allowances before signing.
• Performance: Benchmarked at 0.028 – 0.038 ms in-memory AST evaluation latency with zero false positives. Detailed methodology, hardware specifications, and reproducible test commands are documented in BENCHMARK.md.
• Artifacts: Anchor Devnet registry contract, dual-perspective inspector (End-User mode vs. Security Auditor mode), and automated test suite.
• 🔗 Live App: solagent-sentinel.vercel.app · Repo: camesenin/solagent-sentinel

🏍️ MotoECU

Native Android telemetry, diagnostic & trip analytics engine with Android Auto projection support.

• Tech: Kotlin, Jetpack Compose, Android Auto (CarAppService), Bluetooth Classic / BLE, Room SQLite, Coroutines.
• Architecture: Interfaces with motorcycle ECU via Bluetooth ELM327 OBD-II protocols. Implements real-time telemetry streaming, exponential moving average (EMA) filters for noise reduction, and background foreground services with SQLite persistence for trip logs.
• Features: Custom heads-up automotive dashboard, DTC trouble code reader/clearer, and CSV export for telemetry analysis.
• 🔗 Repo: camesenin/MotoECU

---

🔬 Technical Case Studies: Merged Open-Source Contributions

Rather than superficial commits, my open-source work focuses on solving complex architecture, concurrency, and security challenges:

1. Concurrency Control & Database Migration Integrity — StellarCore

• Challenge: Multi-threaded anchor processors running concurrent synchronization jobs suffered potential race conditions during ledger ingestion and schema migrations.
• Architectural Decision: Implemented PostgreSQL namespaced transaction advisory locks (pg_try_advisory_xact_lock) ensuring strict transactional idempotency across parallel worker threads without causing table lock escalation. Added automated pre-migration validation checks.
• Impact: Zero deadlocks under concurrent simulation, deterministic migration rollbacks.

2. Cloud Security & On-Chain State Rent Defense — Orbit Protocol

• Challenge: Decentralized pull payment vaults on Stellar Soroban faced state eviction risks under ledger TTL expirations, alongside multi-tenant security vulnerabilities in API endpoints.
• Architectural Decision: Engineered automated contract state TTL rent extension handlers executed during batch_disburse workflows. Hardened the Supabase PostgreSQL backend by establishing least-privilege Row Level Security (RLS) policies. Eliminated zero-share division arithmetic edge cases.
• Impact: Guaranteed state persistence for recurring payout schedules and locked down customer vault records.

3. High-Throughput Stream Exports & Community Governance — Stolla

• Challenge: Large community proposal datasets produced client memory spikes and lacked export capabilities for DAO audit compliance.
• Architectural Decision: Engineered client-side streaming CSV and JSON export pipelines with sanitized character parsing and chunked payload processing. Integrated vote delegation permission checks with optimistic UI updates.
• Impact: Eliminated browser rendering lag for communities with 1,000+ proposals and enabled one-click compliance exports.

---

🏢 Ongoing Enterprise Collaboration

• Expensify / App: Active contributor to the next-generation financial collaboration platform built on React Native, TypeScript, and Onyx state management. Focusing on root-cause analysis, cross-platform UI synchronization (Web, Android, iOS), and reproducible issue remediation.

---

📬 Connect With Me

• 💼 Upwork: Carlos M. Profile
• 🐙 GitHub: @camesenin
• 🌐 Live Demo: SolAgent Sentinel