Skip to main content
← Work
Case Study CORAC Engineering 2025

SITH DeepTrace.

A zero-trust data provenance platform for Earth Observation data — verifying file lineage and integrity entirely in the user's browser, without ever transferring the sensitive files themselves.

Role
Senior Frontend Engineer
Timeline
Apr 2025 — ongoing
Sector
GovTech · Aerospace
SITH DeepTrace
◆ Trust model
Zero
Hash-chain verification
◆ Auth
OAuth
AWS Cognito pools
The challenge

Earth Observation data is sensitive and massive. Providers and consumers need to verify that a file’s lineage is intact — that nothing has been tampered with between collection, processing, and delivery — but the files themselves often can’t move across networks.

DeepTrace solves this by doing the verification client-side: the browser fetches a cryptographic hash chain, reconstructs the lineage graph, and validates each step against trusted sources — without the operator ever holding the raw data.

What I owned
01

Lineage visualization in D3.js

Interactive force-directed graph of provenance. Each node is a processing step; edges are hash-verified transforms. Supports 1000+ nodes with zoom, pan, and query-based highlighting.

02

Client-side hash-chain verifier

Pure-browser cryptographic integrity check. Walks the chain from leaf to root, validates each SHA-256 hash against a trusted anchor, flags any tampered link with precise diagnostics.

03

Zero-trust auth with Cognito

AWS Cognito OAuth flow — access tokens never hit our server. Scoped permissions for data providers vs. consumers, with session-level hash-chain verification gating sensitive operations.

04

Vue 3 + Vite + Shadcn stack

Set up the project from scratch. Strict TypeScript, automated linting, pnpm workspaces, CI with preview deploys. Established patterns the rest of the team adopted.

Stack
Vue 3TypeScriptD3.jsVitepnpmShadcn UIAWS CognitoOAuthREST APISubtleCryptoNode.js v22+
◆ Contact me

Let's discuss your
vision Let's talk → with me.