Systems, Security & Quantitative Infrastructure · B.S. Computer Science (Beijing Institute of Technology) · AlphaDragon Team · Beijing

Founder-engineer with 12+ years architecting cross-border clearing/settlement infrastructure, deterministic multi-site Tailscale networking and sandbox isolation compilers, reproducible offline digital forensics (DFIR) toolchains, and quantitative market-data pipelines. Creator and lead maintainer of three Linux Foundation OpenSSF Best Practices Silver-certified open-source repositories.

Project	Domain	Architecture & Supply-Chain Assurance
StarHub Kit (v1.3.0)	AI Agent Sandbox Firewall, Mesh & MCP Compiler	Zero-dependency declarative compiler & native MCP Server (starhub mcp · brew install Ziqi/tap/starhub-kit · flake.nix · bit-for-bit reproducible builds) compiling Autonomous AI Coding Agent Sandbox Firewalls (--profile ai-sandbox), multi-target policies (nftables, macOS pf, Tailscale ACL HuJSON, Sing-box v1.11+, iptables/ip6tables), 100.x + 4via6 mesh routing, selective QUIC (UDP/443) rulesets, and topology security audits (starhub audit).
StarShield Forensics (v0.3.8) [Portal & Synthetic Benchmark]	Digital Forensics, Tamper Triage & MCP	General-purpose, zero-dependency offline DFIR toolkit & native MCP Server (starshield mcp · uvx --from starshield-forensics starshield demo or brew install Ziqi/tap/starshield-forensics): deterministic Chromium/Electron LevelDB .log record carver (OBSERVED / DERIVED / INFERRED epistemic tiers), PNG/JPEG screenshot tamper & ICC display-pipeline provenance inspector, standard financial identifier checksum validator (IBAN/Luhn/ABA), and StarShield-Bench-24 (100% synthetic validation corpus · UK FSR Statutory Code FSA – DIG 100 & ISO/IEC 17025 482-vector dual-tool validation).
KLine Kronos Suite (v1.2.0)	Multi-Market Time-Series Hygiene & MCP	Zero-dependency multi-market (us / crypto / hk / cn) intraday OHLCV session cleaner (kline-kronos demo via uvx or brew install Ziqi/tap/kline-kronos-suite), look-ahead leakage auditor (leakage-audit), universal JSONL window exporter (export-windows), native MCP Server (kline-kronos mcp), and 5-stage ttkbootstrap fine-tuning workstation.

• Official Homebrew Tap (Ziqi/homebrew-tap) — One-command macOS & Linuxbrew installation from SLSA Level 3 attested release tarballs across all three toolkits: brew install Ziqi/tap/starhub-kit, brew install Ziqi/tap/starshield-forensics, and brew install Ziqi/tap/kline-kronos-suite.
• OWASP GenAI Data Security Initiative — Contributed bilingual (EN / ZH) financial-triage indirect prompt-injection test cases (TC-0456–TC-0467).
• Supply-Chain & Verification Baseline — Across all three repositories: 100% GitHub Community Health, OpenSSF Best Practices Silver, OSPS Baseline Level 3, SLSA Build Level 3 + offline Ed25519 release signatures, SPDX-2.3 SBOMs, FSFE REUSE 3.2/3.3 licensing, UNESCO Software Heritage (SWHID) / Zenodo DOI archival, CodeQL SAST, automated coverage/fuzz gates, and GitHub Private Vulnerability Reporting.

北京理工大学计算机科学与技术学士 · AlphaDragon Team · 12 年以上跨境清结算与高可靠系统架构经验，专注于 声明式异地组网与沙箱隔离工具链、可复现离线电子数据取证（DFIR） 与 高频量化时序工程（旗下三大旗舰仓全员获评 Linux 基金会 OpenSSF Silver 银牌且 Scorecard 均达 8.0+，支持官方 Homebrew 源 Ziqi/tap 一键安装）：

• StarHub Kit (v1.3.0)（OpenSSF Silver #16658 · Scorecard 8.2/10 · SLSA L3 + OSPS Baseline L3 · SWHID swh:1:snp:0a98e8ee）：支持 brew install Ziqi/tap/starhub-kit、原生 flake.nix、零依赖原生 MCP Server (starhub mcp) 及无特权 --dry-run 预览；面向 AI 编码智能体沙箱隔离（--profile ai-sandbox，封锁云元数据 SSRF 与横向渗透）、多后端策略编译（nftables、macOS pf、Tailscale ACL、Sing-box、Mihomo）与拓扑安全审计（starhub audit）的确定性编译器。
• StarShield Forensics (v0.3.8)（OpenSSF Silver #16602 · Scorecard 8.0/10 · PyPI PEP 740 可信发布 · Zenodo DOI 10.5281/zenodo.24145804 · 在线门户与合成基准报告）：通用离线、零第三方依赖 DFIR 工具集与原生 MCP Server (starshield mcp)，涵盖确定性 Chromium/Electron LevelDB .log 物理帧恢复、PNG/JPEG 截图篡改与 ICC 色彩链路防伪溯源、标准金融标识符校验位（IBAN / Luhn / ABA）核验工具及 100% 合成验证语料库（StarShield-Bench-24 · 对齐 UK FSR 法定守则 FSA – DIG 100 与 ISO/IEC 17025 482 向量双工具交叉验证，支持 uvx --from starshield-forensics starshield demo 与 brew install Ziqi/tap/starshield-forensics 零门槛体验）。
• KLine Kronos Suite (v1.2.0)（OpenSSF Silver #16679 · Scorecard 8.9/10 · SLSA L3 + OSPS Baseline L3 · SWHID swh:1:snp:d3ac3e0d · 核心语句覆盖率 92.15% + 2,000 轮属性模糊测试）：支持全球多市场（us 美股、crypto 7×24、hk 港股、cn A 股）高频 OHLCV 去噪清洗、右闭合重采样、未来函数穿越体检 (leakage-audit)、通用时序大模型 JSONL 窗口导出 (export-windows) 及原生 MCP Server (kline-kronos mcp)。