Software that stays maintainable after I leave the room.

Father, husband, independent consultant in mobile architecture, Spec-Driven Development (SDD) and AI agent orchestration, and Certified Judicial IT Expert (Perito em Informática, CONPEJ). 18+ years in software engineering, from digital banking at 34-million-customer scale to technical pre-sales for 30+ enterprise brands.

I help companies and engineering teams adopt GenAI with governance, modernize complex mobile platforms and pay down technical debt without sacrificing delivery speed. The goal is not generating more code, it is still knowing why the code is the way it is after the agent has gone.

📍 Porto Alegre, Brazil · remote-first · 🦀 Rust, 🍎 Swift, 🐍 Python

• AI agent orchestration & SDD governance: versioned specs, ADRs and the Research → Plan → Implement cycle inside the repository.
• Mobile architecture modernization: target architectures and migration roadmaps for brownfield apps, Super Apps and Server-Driven UI.
• SDLC agent-readiness diagnostics: measuring real GenAI adoption maturity from observable evidence in code, practices and risks.
• Mobile security & forensics: assessments against OWASP MASVS, plus judicial technical reports (laudos e pareceres).
• PoC & MVP engineering: fast answers to critical technical questions, with governance and a clean repository handover.
• Mentorship & squad enablement: training tech leads in SDD, system design and AI-assisted workflows.

I run Michel Lütz Treinamentos e Consultoria and the creative ventures under ML Creative Hub.

Mobile Application Security Testing (MAST), dynamic instrumentation with Frida, MobSF, static and dynamic analysis, reverse engineering and auditing; OAuth2/OIDC token management, certificate pinning, obfuscation and RASP. More at micheltlutz.me.

A safe, dependency-free HTML DSL for Rust and WebAssembly

Describe the page in Rust with a fluent builder or the html! macro, and the compiler checks it. No DOM, no runtime, no template language: just a tree of plain values rendered once to a string. Includes metadata, an accessibility audit, sitemaps, feeds, static site output and a WebAssembly build.

The same idea in Swift 6 and Python

Type-safe HTML with built-in XSS protection, SEO metadata and a static site generator. Independent of any web framework. Winged-Python is on PyPI.

let page = HTML(children: [
    Head(children: [Title(content: "My Site")]),
    Body(children: [H1(content: "Hello, World!")])
])

Dump decrypted IPAs from jailbroken iOS devices via Frida

A Swift reimplementation of frida-ios-dump using the frida-swift bindings.

Real-world coding challenges for front-end, back-end and mobile

Ready-to-use Dockerized API so you can focus on the interface, or replicate the routes in your language of choice.

Also: MLNetworkLayer · favorite-links

Articles on mobile architecture, Swift, Rust and engineering with agents at micheltlutz.me. Talks: TDC Floripa 2026, Unilasalle Innovation Week, Dev Summit.

Mobile architecture · Server-Driven UI · Spec-Driven Development · agent orchestration · AppSec · judicial forensics · technical mentoring

• MBA in Data Science for Business, PUCRS
• MBA in Business Intelligence & Business Technology, focus on AI and Big Data
• AWS: Solutions Architect Associate · AI Practitioner · Cloud Practitioner
• Others: CAPM® (PMI) · ITIL® Foundation · Kanban KMP I® · SAFe Agilist · CSM · CSPO · Management 3.0

Website · LinkedIn · YouTube · Medium · Credly · Lattes · PMI registry · Favorite Links · ML3dPrint · 💖 Sponsor me

"Transforming ideas into code, code into solutions, and solutions into real impact." 🚀