Work

Built, Shipped, Running.

Every project on this page is live today. The problem, what I built, and what it does now.

Client website · Live at fbkustoms.com

FBKustoms: custom builds & restoration

Built for Fede at FBKustoms, Melbourne, Florida.

Problem: FBKustoms does custom car builds, classic restoration, fabrication, bodywork and show-quality paint. That work is visual, so the site has to show it, and customers need an easy way to ask for a quote.
Build: Standalone Next.js 16 site with a Black & Gold design
Content reviewed and updated with the client's feedback
A featured build with real photos, specs and a video showcase, plus a gallery
Quote and contact form on Resend that reports real send errors instead of a false "sent", with a honeypot spam trap
Local SEO: business schema, sitemap, share metadata and a directions link
Accessibility: skip link, focus rings, reduced motion
Full-screen mobile menu with a visible quote button, lighter media, and Vercel Web Analytics + Speed Insights
Result: Live at fbkustoms.com. The quote form tells the truth: if a message doesn't send, the visitor sees an error instead of a false "sent". Business schema, a sitemap and a directions link help people find the shop locally, and on a phone the full-screen menu keeps the quote button in view.

AI agent · Live on maxeffort.ai

Problem: A business site needs something that can answer questions and help people figure out what they need at any hour. But a public chatbot is also a public target: anyone can try to talk it out of its instructions, run up the API bill, or fish for private details.
Build: Streaming chat on Claude, with a system prompt that defines a character instead of a list of refusal rules
Prompt guard: every message is scored against weighted threat patterns, and strikes escalate the session from normal to shutdown
Rate limits: 30 requests per minute per IP, 2,000 characters per message, 30 messages per session
Strict API role whitelist: only user and assistant turns are accepted
Points visitors to a free 30-minute call when they're ready to talk
Result: Red-teamed in May 2026 over four sessions, with Claude Opus 4.7 driving a browser through Claude Code against Jarvis running Claude Sonnet 4.5. In the final logged round, the strike system took the attacking session from first response to full lockout in about three minutes, the edge ignored every spoofed IP header, and no system-prompt content leaked. The write-up covers what held and what didn't. In October 2026, Jarvis moved to Claude Sonnet 5.5; the red-team results are from the Sonnet 4.5 version.

iOS app · Live on the App Store

Problem: Learning to read piano notes takes a lot of repetition. The goal was to make that practice feel like a game for kids, in an app parents never have to worry about.
Build: Native iOS app: note-reading practice with a pixel pet companion
Works entirely offline, with no network requests and no server
No accounts, no ads, no analytics or third-party SDKs
High scores and preferences stay on the device
Taken through App Store submission to release
Result: Live on the App Store, published under my own name. Support and the privacy policy live at maxeffort.ai/apps.

Tell me what's slowing your business down. 30 minutes, free, and you'll leave with an honest answer about what's worth building.