# Godfrey Lebo

> Senior AI Security & LLM Engineer (7+ years in production) based in Abuja, Nigeria; remote-first.
> Founder of Sether — streaming-native PII redaction for production LLM APIs (npm: @raeven-co/sether).
> Specializes in AI security, LLM guardrails, AI compliance (GDPR, SOC 2, HIPAA, EU AI Act),
> mobile development (Flutter), Rust, and software supply chain security.

Godfrey Lebo builds production security tooling for AI applications. He is the founder of
Sether (Raeven, Inc.), a Senior Engineer at Must Company (Seoul-headquartered fintech,
remote from Nigeria), and maintains open-source packages across npm, crates.io, PyPI, and pub.dev.

## Key pages

- [About](https://godfreylebo.dev/about): Bio, experience, and education
- [Projects](https://godfreylebo.dev/projects): Open-source security, AI, and mobile tooling with live download stats
- [Articles](https://godfreylebo.dev/articles): Writing on AI security, LLM engineering, and mobile development
- [Speaking](https://godfreylebo.dev/speaking): Talks and appearances
- [Certifications](https://godfreylebo.dev/certifications): Professional certifications
- [CV (PDF)](https://godfreylebo.dev/godfreycv.pdf): Downloadable résumé
- [RSS feed](https://godfreylebo.dev/rss/feed.xml): Article syndication

## At the Boundary (drawing set, updated daily)

- [At the Boundary](https://godfreylebo.dev/sheets): a numbered set of drawing sheets on software, security and AI. One lesson per sheet, drawn like construction documents, from systems Godfrey runs (a multivendor marketplace, a reading app, a PII-redaction engine, a customer-finding tool), plus field reports on incidents disclosed while the set runs (the METR API-key theft, Plugin4Shell).
- [Plain-text edition of every published sheet](https://godfreylebo.dev/sheets/llms.txt): headline, notes, schedules and cross-references, for language models and answer engines.
- Essays behind the set: [Five boundaries, one rule](https://godfreylebo.dev/articles/at-the-boundary), [Five bugs, one bug](https://godfreylebo.dev/articles/five-bugs-one-bug), [App Review is a boundary](https://godfreylebo.dev/articles/app-review-is-a-boundary), [Software that does nothing](https://godfreylebo.dev/articles/software-that-does-nothing).

## Notable projects

- [Sether](https://setherai.vercel.app): Streaming PII redaction for LLM APIs — chunk-boundary-safe Transform streams, a reversible alias/decoy engine (realistic stand-in values drawn from officially reserved fictional ranges), compliance-mapped redaction events (GDPR / SOC 2 / HIPAA / EU AI Act)
- [npm_sentinel](https://crates.io/crates/npm_sentinel): Rust CLI for npm supply-chain malware analysis
- [rust_secure_dependency_audit](https://crates.io/crates/rust_secure_dependency_audit): Rust crate auditing dependency health, licenses, and footprint risk
- [rag-poison-guard](https://godfreylebo.dev/projects/rag-poison-guard): Defenses against RAG data-poisoning attacks

## Contact

- Email: emorylebo@gmail.com
- GitHub: https://github.com/emorilebo
- LinkedIn: https://linkedin.com/in/godfreylebo