What I have built

One venture, one tool I maintain, and the client work I can describe without naming anyone. The engagements below are anonymised on purpose.
Schedule a call

Ventures

Start-Alpha
One blueprint to deploy, govern and recover distributed infrastructure — from edge to cloud. Secure software supply-chain, from OS to applications.

A sovereign control plane for fleets that cannot assume connectivity. A single declarative blueprint covers workloads, OS configuration, cloud resources, security policy and disaster recovery; agents reconcile it across every site autonomously. Built on Kubernetes and OpenTelemetry, with export so the definition stays yours.

Kubernetesk3sGoOpenTelemetrySPIFFE/SPIRE

Co-founder & CTO · 2026 — present

Open source

What I build in the open, and the projects everything else is built on.
AuthorGo
twinmodel

A toolkit for authoring ontology. Compact YAML transpiles to OPC-UA ModelDesign.xml, CESMII i3X 1.0 JSON. Embedded catalog of companion specifications and MCP server.

It deliberately does not emit NodeSet2.xml itself — Part 5 compliance is the ModelCompiler's job. The point is to make the information model a reviewable artefact in git instead of hand-written XML, so the data contract can be argued about like any other code.

Built on itGo
OpenTelemetry

The vendor-neutral standard for traces, metrics and logs.

Built on itGo
OpAMP

Open Agent Management Protocol — remote configuration, health reporting and upgrade of telemetry agents at fleet scale.

Built on itGo
SPIFFE / SPIRE

Workload identity without shared secrets — short-lived SVIDs issued and rotated automatically.

Built on itGo
k3s

A certified Kubernetes distribution small enough to run in a plant cabinet.

Engagements

Client work, anonymised. Named case studies appear here only where a client has approved publication.
CAC40 industrial groupConfidential

Multi-sector manufacturing · Recent

Design and first proof of value for a unified namespace backbone spanning more than one hundred sites worldwide, including the reference architecture and modelling layer.

  • Architecture accepted as the group-wide target for plant data
  • Proof of value delivered against real site constraints rather than a lab
MQTTOPC-UAi3X
CAC40 process manufacturerConfidential

Manufacturing — critical process · Recent

Observability, unified namespace and optimisation delivery across an edge estate supporting a critical manufacturing process, plus end-to-end delivery of a multi-plant planning and scheduling tool.

  • Cost-optimised observability across 100+ hosts, instrumenting camera, ML inference and display latency end to end
  • Resource-efficient UNS on edge infrastructure, reducing proprietary software reliance by 90%
  • Optimisation algorithm deployed to edge, integrated with SCADA and PLCs under real-time constraints, with yield improvements validated by R&D
  • Planning and scheduling tool in production use by 10+ planners and operations users
k3sOpenTelemetryMQTTOPC-UAPython
CAC40 car manufacturerConfidential

Greenfield Electric Vehicle components · Recent

Launched integration platform foundations and defined the target architecture for the OT-to-MES-to-Cloud integration layer.

  • Platform provider scoped and selected, first integrations delivered across ERP, PLM, PLC and SCADA
  • Integration costs reduced by 40%
  • First validation app proved out data contracts and was used during line commissioning ahead of full MES rollout
iPaaSPLC/SCADAMESERPPLM
© 2026 Mathieu Sabatier