Matt G

A fully realised alternate reality game built as a satirical "official government portal." The site maintains a deadpan bureaucratic fiction across 10+ interconnected pages — complete with a suppressed research library, intercepted transmissions, a staff document archive, and a fake internal terminal.

Beyond the surface, there are multiple puzzle layers and a hidden narrative thread running through the site. Built to be explored, not explained.

My role: Sole build — design and code. Wrote the narrative, designed the puzzle layers, and built every page.

A neuroscience education site built around two daily games: The Daily Case, a clinical diagnosis puzzle where you work from a set of symptoms to a diagnosis, and Map the Brain, a region-identification quiz with an AI Q&A panel that explains what each region actually does.

All game content is authored by the client in Google Sheets and pulled in as published CSV, so new cases and questions go live without a deploy, with a built-in sample set as fallback if a sheet is ever unreachable.

My role: I did not build Neurole. I was brought on after launch to modernise an existing site — refreshing the visual design and front-end look and feel, porting it to React, and fixing the archive so past cases replay correctly.

A subscription billing and paywall layer serving two separate products from one account. Customers buy a plan on the billing site; the purchase unlocks gated features inside each product without either product having to know anything about payments.

Card subscriptions run through Stripe, crypto through Coinbase Commerce, with a card→crypto onramp for customers who want it. No card or wallet data touches the application — checkout is hosted, and every webhook is signature-verified before it is trusted. An hourly scheduled worker re-checks each active subscription and automatically reverts lapsed accounts to free, so a missed webhook can't leave a plan unlocked indefinitely.

My role: Sole developer. Scoped the requirements from client Q&A, chose the payment architecture, and built both the frontend and the Workers handling checkout, webhooks, entitlement sync, and reconciliation.

Authorised security and QA testing for Polaris Scholar, LLC, on their student college-readiness platform — a single-page app spanning thirteen modules, several education systems, and eight languages.

The engagement covered authentication and session handling, cross-origin policy, write authorisation, stored-input handling, and prompt-injection resistance on the platform's AI assistant, alongside feature-by-feature functional QA across education systems and languages. Delivered as a written assessment with reproduction steps, severity ratings, and remediation guidance. Findings remain confidential to the client.

My role: Security contractor, working to an authorised testing scope agreed with the client. Ran the assessment and wrote the report; also served as one of the platform's functional QA testers during a multi‑education‑system rollout.