Skip to content
View davidcockson-compliance's full-sized avatar

Block or report davidcockson-compliance

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse

Hi, I'm David Cockson 👋

Infrastructure · Observability · AI Workflows

regulation → system → constraint → control → automation

I build self-hosted infrastructure, monitoring stacks, and AI tooling from my homelab.
Most of what I ship is open source.

📍 Macclesfield, UK

Website Blog LinkedIn Email


Python Terraform Docker Proxmox Prometheus Grafana FastAPI

🔭 Current Focus

  • Distributed AI Systems — Multi-provider LLM routing, Model Context Protocol (MCP), and multi-agent graph pipelines.
  • Self-Hosted Infrastructure — High-availability virtualization on Proxmox (Ubuntu VMs), container orchestration via Docker, and secure networking.
  • Full-Stack Observability — Telemetry pipelines spanning infrastructure, runtimes, and LLMs using Prometheus, Grafana, Loki, Tempo, OpenTelemetry, and Langfuse.
  • Infrastructure as Code (IaC) — Declarative systems provisioning and configuration management via Terraform, Ansible, and automated CI/CD engine loops.

🛠️ Selected Projects

ears-specs — VS Code extension

VS Marketplace Open VSX

A small editor extension for writing requirements in EARS — the Easy Approach to Requirements Syntax, a convention that keeps each requirement to one of five plain-English templates so it stays clear and testable. EARS is a common format for spec-driven development, including writing the specs that brief LLMs and AI coding tools.

Available on the VS Code Marketplace and Open VSX (so it also installs in Cursor and VSCodium). It works on any .ears.md file and:

  • Colours the EARS keywords, <placeholders>, and [DRAFT]/[STABLE] markers as you write.
  • Sorts each requirement into its EARS type — Ubiquitous, State-Driven, Event-Driven, Option-Driven, Unwanted — in a sidebar list, worked out from the opening keyword.
  • Adds a command to re-organise a spec into tidy per-type sections, a scaffolder for new spec files, and Tab-completion snippets for each template.

Self-hosted LLM job runner that turns an Obsidian vault into a distributed, deterministic AI workbench.

  • File-Driven Pipeline: Decentralized task queue (_queue_active_completed) managed entirely through markdown files.
  • Unified Engine Matrix: Multi-provider routing layer orchestrating local Ollama nodes alongside Groq, Gemini, Anthropic, and HuggingFace endpoints via a single configuration table.
  • Knowledge Synthesis: Complex research execution powered by LangGraph — features parallel web scraping, entity extraction into a KuzuDB graph database, and automated report compilation.
  • Self-Healing Workflows: Closed-loop GitLab CI code-generation engine that catches execution context, streams tracebacks back to the LLM, fixes failures, and automatically re-tests.
  • State & Memory: Contextual execution memory using a MemPalace MCP server to surface past run data with a single declarative YAML flag.
  • Dual-Layer Telemetry: System metrics and runtime traces routed to OpenTelemetry/Tempo/Grafana, paired with deep LLM call, token, and cost analysis via Langfuse. Automated alert routing via Discord.
  • Reactive UI: Lightweight administrative interface built with FastAPI, HTMX, and Server-Sent Events (SSE) for live-streaming job states.
  • Quality Gates: 87 automated unit/integration tests managed via parallelized GitLab CI and GitHub Actions pipelines with automated deployment on green merge.

Operational risk and structural compliance architecture mapping AI system constraints to automated software guardrails.

  • Translates high-level organizational policy directives, regulatory compliance rules, and algorithmic data requirements into auditable code controls.
  • Codifies risk-mitigation vectors directly into target deployment configurations and LLM orchestration schemas.

Declarative Prometheus and Grafana stack engineered for multi-node bare metal and virtualized infrastructure visibility.

  • Aggregates system metrics, OS logs, and runtime traces across the homelab infrastructure cluster.
  • Implements deep per-container resource tracking, performance profiling, and error anomaly detection using standard Docker metrics exporters.

A modular blueprint repo showcasing cloud infrastructure patterns, secure network topography, and automated software delivery.

  • Implements immutable infrastructure practices utilizing highly reusable, modular Terraform modules.
  • Provisions structured cloud environments alongside automated, repeatable Python deployment pipelines and security baselines.

Enterprise-scoped AI governance framework designed to enforce security constraints, policy alignment, and compliance tracking in automated system workflows.


✍️ Recent Writing

More articles at blog.davidcockson.com


⚙️ How I Approach Systems

flowchart LR
    A[Observe system] --> B[Find constraint]
    B --> C[Map the gap]
    C --> D[Design control]
    D --> E[Automate solution]
    E --> F[Monitor outcome]
    F --> A
Loading

Pinned Loading

  1. EARS-SPECS EARS-SPECS Public

    Tools for helpings with EARS (Easy Approach to Requirements Syntax) when using SDD (Spec driven development)

    JavaScript

  2. vault-runner vault-runner Public

    Python

  3. infra-practice infra-practice Public

    Infrastructure as Code practice — Terraform, Python automation, CI/CD

    HCL

  4. homelab-monitoring homelab-monitoring Public

    Prometheus + Grafana monitoring stack for a home server. Host metrics and per-container visibility via Docker.

  5. sable-ai-governance-framework sable-ai-governance-framework Public

    Open-source AI governance framework for UK HR/recruitment AI providers. UK GDPR, DPA 2018, Data (Use and Access) Act 2025, Equality Act 2010. CC BY 4.0.

  6. pickles-gmbh-ai-governance-framework pickles-gmbh-ai-governance-framework Public

    Open-source AI governance framework for German legal AI providers. Covers EU AI Act, GDPR, BDSG, and BRAK. 22 documents across 5 stages plus a worked example. CC BY 4.0.