Arcane Labs / portfolio index
I'm Jayesh Sudhakar, a systems & security engineer in Australia. I work from the core implementation through to the product experience: AI systems, security tooling, browser-native 3D and personal software. I care about the work that makes a system trustworthy in practice — clear boundaries, resilient architecture and a deliberately simple experience. I’m open to systems-engineering roles, AI integration work and selected builds through Arcane Labs.
01 Selected work
A private, macOS-first AI system that works across projects with native OS-level access — without sending work through someone else’s server.
The hard part: giving a model useful reach into an operating system without giving it unrestricted control. Sage is being built around scoped permissions, sandboxing and an audit trail, so capable automation remains accountable.
An AI-driven personal organisation system for the moving parts of everyday life: academics, scheduling, finance, meals and career planning. Named after the Roman goddess of the hearth, Vesta is designed to be a calm center that stays in step with the life around it.
The hard part: personal systems only earn trust when they are useful enough to return to and clear enough to stay in control of. Vesta combines structured planning with machine-learning-assisted insights, while keeping important actions reviewable.
An in-development private-networking system for Android and macOS: a self-hosted WireGuard mesh, optional exit-node routing, LAN-device monitoring, tracker filtering and connection diagnostics.
The hard part: each capability normally arrives as a separate product. Numen keeps them under one trust model, with a shared Rust core and thin platform layers rather than five disconnected tools.
A shipped Python command-line scanner for web applications you own or are authorised to test. It crawls pages and forms, then runs a focused set of OWASP-aligned checks across headers, TLS, cookies, CORS, redirects, traversal, XSS and SQL injection.
The hard part: useful findings need context. Argus captures baselines before testing, reports severity and evidence, exports JSON, and returns CI-friendly exit codes rather than treating every signal as equally urgent.
A live, playable early-build 3D open world that runs entirely in a browser tab. There is no launcher or download: follow a link and enter the experience.
The hard part: the frame budget. The world uses instanced rendering for dense asteroid fields and keeps its game loop lean, because a browser has nowhere to hide a slow load or uneven frame time.
A direct-to-consumer storefront for an organics brand — catalogue, cart, a four-step checkout, server-side payment session creation, pincode validation, and consignment tracking through a serverless proxy. A partial build is deployed; it isn't taking orders yet.
The hard part: not the storefront — the loyalty economics behind it. Any rewards scheme can be modelled into insolvency. This one was costed per product category, with the loss cases written down before a line of it shipped.
02 Voidpath — playable
Browser-native 3D
A live, browser-native 3D world built solo and still early in its development. Every asset and frame is budgeted because there is no launcher to hide the loading behind.
03 Argus — demo replay
Argus tests a target you own for common web vulnerabilities across a focused set of OWASP-aligned checks. The output below is a recorded replay against a deliberately vulnerable demo host — not a live scan, and not your machine.
04 PureHarvest — in development
A D2C storefront for an organics brand — catalogue, cart, a four-step checkout, server-side payment sessions and consignment tracking. The loyalty economics were modelled to the point of failure before a line of it shipped.
05 How I decide
A feature can work and still make the system worse. These are the six tests I return to when deciding what belongs, what stays out, and what has to hold once people depend on it.
If it does not remove real friction or create real value, it is just another thing to maintain.
Vesta exists because life is usually split across calendars, notes, finance, meals and career planning. Its job is not to become another list. Its job is to reduce the work of keeping those moving parts aligned.
In practice — Vesta
People should be able to understand what a system is doing, what it knows, and when it is wrong.
Argus does not optimise for the largest possible finding count. It scores confidence and suppresses low-signal output so the person reading it can see what deserves action — and why.
In practice — Argus
Capability without boundaries is not intelligence or automation. It is uncontrolled risk.
Sage gets scoped permissions, sandboxing and an audit trail before it gets broader operating-system access. The system should be able to act, but never become difficult to question.
In practice — Sage
Time, money, attention, compute and operational complexity are all costs. A system should be worth them.
Every asset and frame is budgeted because browser-native 3D has no launcher or install time to hide performance cost behind. If the experience is expensive, the experience has to earn it.
In practice — Voidpath
Failure is unavoidable. Silent or misleading failure is a design choice.
Until payment credentials are configured, checkout makes that state explicit and falls back to a clearly marked development flow. It never pretends a payment was taken.
In practice — PureHarvest
Nothing is future-proof. The goal is to make the next necessary change possible without rebuilding everything around it.
Numen is being built around one shared Rust core with thin platform layers, so Android and macOS can evolve without becoming disconnected products.
In practice — Numen
06 Stack
A practical toolkit for taking a product from a hard technical problem to a working experience. The value is not a list of technologies; it is knowing where each one earns its place.
01
02
03
04
05
06
07 Services
Practical engineering for teams that need more than a surface-level build: thoughtful product work, dependable implementation, AI integration and a route to deployment.
Local-first AI, capable agents connected to the tools you already use, and automation that removes repetitive operational work.
Built it first — Sage, Vesta
Finding meaningful security risks early, then helping build the systems and tooling that address them.
Built it first — Argus, Numen
Product and brand experiences with real-time browser graphics, designed to stay fast and accessible on everyday devices.
Built it first — Voidpath
A storefront with payments, logistics and tracking, supported by unit economics that are modelled before incentives go live.
Built it first — PureHarvest
Fast, considered websites, product interfaces and dashboards that are designed around what the business or user actually needs to do.
Built it first — Vesta, PureHarvest
Desktop and mobile product work where performance, system integration, privacy and reliable deployment matter as much as the interface.
Built it first — Sage, Numen
08 ARC-1 — prototype
I built ARC-1 as my personal Keeper of Threads — a quiet intelligence, an echo at the edge of my attention. He receives a first signal, gathers the pieces that matter, and keeps their shape intact so the conversation has weight and direction. By the time I step in, there is already a thread to follow.
Please relay your enquiry to him, and he will make sure the thread reaches me with its shape intact.
Your details stay inside this private enquiry flow and are used only to respond. ARC also records minimal operational telemetry — page activity, device class, approximate network region, referral origin and session time — to protect the site and improve the path. No advertising or mailing-list sign-ups.
I’m open to systems-engineering roles and selected freelance builds: AI integration, automation, native applications, interactive web, secure product work and deployment. If you need someone who can move from the technical core to the experience people actually use, let’s talk.
Leave it with ARC-1 →