I'm Abdul Afif Al Kaysan, a builder in Bandung, Indonesia. I build quant research systems, web3 security tooling, and Android/kernel tooling — and I publish the negative results, not just the wins.

Every claim below is checkable in the linked repository.

Four of these are packaged and installable, published under the PyPI account bedul:

• rfc5322 1.0.1 — RFC 5322 conformant email address parser with the full obsolete §4.4 grammar; dependency-free (Python 3.12+). pip install rfc5322
• pdfua 0.1.2 — Checks the machine-checkable subset of PDF/UA-1 and WCAG 2.1 in PDFs, built on pikepdf with no JVM (Python 3.10+). pip install pdfua
• dns-shield 0.1.2 — Detects ISP DNS poisoning and works around it with DNS-over-HTTPS and SNI-preserving connections (Python 3.10+). pip install dns-shield
• calphad-io 0.1.2 — Reads, writes and validates CALPHAD thermodynamic databases (Thermo-Calc .TDB, ChemSage/FactSage .DAT) (Python 3.10+). pip install calphad-io

arbitrage-research — Measured arbitrage research across 10+ classes on real public order books, at a $100 retail basis. → The verdict is negative: no class is net-positive, because the retail fee/spread floor — not the absence of signal — defeats every one. The methodology documents three of the project's own measurement artifacts caught before they became claims.

honest-backtest — Statistical guards that refuse to certify a backtest you have fooled yourself with. → Each guard was written from a specific false positive it caught in the author's own research; 301 tests pass locally, CI green.

rfc5322 — The parser behind the PyPI package above: an RFC 5322-conformant email address parser (full obsolete §4.4 grammar), zero runtime dependencies. → 288 tests, 99% coverage, CI green.

chainguard-web3-security — Next.js web3 security dashboard that simulates and risk-scores EVM and Solana transactions before signing, with a companion set of onchain contracts. → A set of Solidity contracts under Foundry, with CI green.

dns-shield — The diagnostics and DNS-over-HTTPS workaround behind the PyPI package above, for ISP DNS poisoning. → 299 tests passing (4 opt-in live tests deselected); stdlib only, no runtime dependencies.

gki-abi-checker — Android GKI ABI compatibility checker for kernel .config files and source definitions. → Validates memory-layout flags (e.g. CONFIG_SLUB_DEBUG) whose change would shift struct page and bootloop a GKI device. MIT.

Open to work, contract, and research collaboration in quant research, web3 security, and Android/kernel tooling.

Python · TypeScript / JavaScript · Solidity · Shell · Java · C — with pytest, Foundry, Node.js, GitHub Actions, and Linux/Android kernel tooling.

• Email: alkaysan07@gmail.com
• GitHub: @beduldul