Alex Artigues

Infra tools for humans

Denver, CO albert.a.artigues@gmail.com
Resume (PDF) choudoufu GitHub intentius.io Posts

The receipts

25 years Infrastructure and software since 2000. Data centers, storage, streaming, graph.
8 years of Terraform ProtectWise and Shutterstock in production, and now a fork of OpenTofu with a feature in it.
15 lexicons on npm chant, my multi-cloud infrastructure compiler. AWS, Azure, GCP, Kubernetes, Helm, Docker and more, synthesized from one typed source.
5 years on the pager Owned Shutterstock's clickstream analytics platform around the clock. Kafka, EMR, Terraform.
3 years in regulated production FINRA's Graph-as-a-Service platform on Neo4j, with the security review and compliance weight.
39 posts A year of working out in public why infrastructure state belongs somewhere else.

Run it yourself

~2 minutes · needs Docker · nothing hosted
git clone https://github.com/INTENTIUS/choudoufu
cd choudoufu
bash live/e2e/run.sh --expect 5

It stands up a real estate against a local AWS emulator, deletes the state file in front of you, and replans. Exit 0 means every claim the script makes held. Or hand the repo to a coding agent and have it report each step back.

What I've built

choudoufu Go ยท MPL-2.0 OpenTofu without the state file. Each resource carries its ownership as ordinary cloud tags, so AWS tells you what an estate contains and your existing IAM decides who may change it. chant TypeScript A synthesis compiler for infrastructure. Roundtrips native vendor specs 1:1 from a typed source, with an LSP and an MCP server on the same model.
warden Built on chant Governance-as-code for git forges. One YAML file holds an org in a declared state: diff against the live API, run guardrails, dry-run or apply. Ownership-gated deletes and a removal cap so a typo cannot cascade. Three siblings on one shared reconcile core. GitHubGitLabForgejo
loomster Built on chant Typed, tiered infrastructure-as-code for awslabs/loom. Six components, three tiers, generated CI, and a naming scheme that keeps many instances from colliding. spicypath Live A profile inspector for the OpenTelemetry era. Reads OTLP Profiles, pprof, speedscope and four more formats into one model. blacklight Hosted Paste a repo URL, see the misconfigurations hiding in your infra. A hosted run of chant's audit engine. neo4j-backup Dagster Policy-based backup and restore for self-hosted Neo4j Enterprise, as drop-in Dagster pipelines. Validated, and agentless on restore via seed-from-URI and an alias swap.

Before this

FINRA 3 years, current Graph platform Graph-as-a-Service on Neo4j, in a maximally regulated environment. All on AWS.
Shutterstock 5 years Principal data infrastructure Owned the clickstream analytics platform around the clock. Terraform, Kafka, EMR. Mentored three engineers in Ireland into ownership.
ProtectWise Acquired by Verizon Data infrastructure Streaming pipelines for real-time network-security analytics. Owned the Hadoop infrastructure.
SolidFire Acquired by NetApp Test engineering, then DevOps On-site hardware lab for a distributed SAN product. Hands on a wide variety of hardware.