Chia-Yu Chiang

I take medical software all the way to deployment: each piece is live and anyone can open it. My capstone is a two-sided health information platform. The consumer side, ClinCalc, interprets 35 lab indicators in the browser, and the AI analysis receives the verdicts, not the lab values (report photo scanning is the exception). The clinic side, ExClinCalc, is designed for primary-care clinics and covers registration, triage, the physician's SOAP workflow and pharmacy dispensing, with access control written into the database as 42 PostgreSQL policies.

I have since applied the same approach outside healthcare: personal finance, Taiwan stock data, speech synthesis, a learning platform and commerce compliance.

All 8 works can be opened or downloaded publicly. Some main repositories are private; what is public is the release.

Fig. 1
G5 failure G4 severe G3b mod.–severe G3a mild–mod. G2 mildly decreased G1 normal or high 0 15 30 45 60 90 eGFR (mL/min/1.73 m²)
KDIGO eGFR categories. ClinCalc stages kidney function against these boundaries in the browser.

An eGFR below 60 for more than three months meets one of the diagnostic criteria for chronic kidney disease.

Figs. 2–3
ClinCalc consumer home screen ExClinCalc physician dashboard
ClinCalc consumer home screen, then the ExClinCalc physician dashboard.

Work

8 projects

Titles open the full write-up; ↗ opens the work itself.

  • 2025–2026 Consumer Health

    ClinCalc

    Consumer health self-check & multimodal interpretation platform

    Helps everyday users understand lab reports with trustworthy, explainable interpretation.

    Next.js · TypeScript · Supabase · CF Workers

    Lab values are interpreted in the browser. A language model is involved only when the user asks, and for lab data it gets conclusions such as “high” or “low”, never the values.

  • 2025–2026 Clinical

    ExClinCalc

    Clinical Decision Support System (CDSS) for primary clinics

    Full workflow loop: registration → SOAP charting → prescription check → pharmacist dispensing.

    PostgreSQL RLS · Supabase · CF Workers · TOTP

    Of the 42 database policies, 6 enforce two-factor authentication and 8 keep demo accounts inside demo data; 109 integration tests, run on every push, simulate what each role must and must not be allowed to do.

  • 2026 Interop Research

    clinconvert

    FHIR R4 interoperability research POC

    Research proof-of-concept: structuring Excel medical records into HL7 FHIR R4 Bundles.

    Astro · TypeScript · Web Crypto · FHIR R4 · HL7

  • 2024–2026 Cross-domain

    Kaizei

    Personal Finance OS (desktop app)

    The same engineering approach, carried across domains — medical-grade security thinking applied to personal finance.

    Electron · React · TypeScript strict · CF Workers

    The master key is generated on the device and never uploaded. The server cannot recover the plaintext cryptographically.

  • 2026 Research Work

    Zhiyin

    A model-agnostic Chinese TTS engine

    Make swapping models cheap first — then run a reproducible four-engine evaluation with objective metrics.

    Python · IndexTTS-2 · GPT-SoVITS · faster-whisper · PyTorch

    The technical report records two negative results and lists the small speaker and listener samples as a threat to validity.

  • 2026 Learning Platform

    Lumi

    Open-source personal learning platform (self-hosted · offline-capable)

    A personalised review system starting from TOEIC — content is generated at build time, so no LLM is called at runtime.

    SvelteKit · TypeScript strict · Turso (libSQL) · Drizzle · CF Pages

    Questions whose answers overlap too much with the passage are rejected: they test word-matching, not reading.

  • 2026 Financial Data System

    TRADESIGHT

    Taiwan equity analysis tool (desktop shipped)

    Institutional and branch-level flows, screening, health checks and backtesting — read-only, and structurally incapable of trading.

    Python · FastAPI · Tauri v2 · pytest · 政府開放資料

    It connects to a broker API but has no ordering feature. A test scans the whole codebase and fails the build if order-related code appears.

  • 2026 Commerce & Compliance

    Maplebox

    Bilingual imported-food storefront (demo)

    Taiwan's tax and food-labelling rules encoded as build-time checks rather than things people must remember. Runs on seed data; checkout is not wired to a gateway.

    TypeScript · Next.js · Hono · Turborepo · CF Workers

Approach

The stacks differ from project to project; the way decisions are made does not.

Privacy first
Interpretation runs on the device first; the AI analysis gets the verdicts, not the lab values; report photo scanning sends the photo to the model.
Rules first
Interpretation and calculation are done by deterministic rules. The language model only turns the result into readable text; it makes no decisions.
Security in the database
Even if the application has a bug, the database still blocks unauthorized access. 42 RLS policies are the last line of defence.
I can say every attack I thought of is blocked. I cannot yet prove there is none I missed. That is why I want graduate training.

Writing

in Chinese

Problems I ran into while building these systems, written down.

More

Research interests, a reading list and my thesis are on the About page. A printable one-page version is the Résumé.