wail@altacode:~$

Wail Ettouil.

AI & Data Engineer / Solutions Architect

I build the systems companies actually run on. Not apps, not tools. Operating platforms for businesses with trucks on the road, animals in transit, stock on shelves, and regulators at the door. I learn an operation from the ground up, then I build its digital twin, and I stay until the whole company runs on it.

Code shipped: 1.5M+ lines
Commits: 13,700+
Organizations: 9
Base: Tangier ⇄ Amsterdam

Where it started

It started with C, and a bad idea.

My first language was C. Pointers, memory, segfaults: the unfriendliest possible introduction to computers, and I loved it. Then I discovered HTML and realized every web page is just code someone else wrote, which means it can be changed. My first real project, at an age I won't defend, was trying to strip the ads out of websites I had no business visiting. It worked. Sometimes.

That instinct never left: see a system, take it apart, understand why it was built that way, rebuild it better. It just moved from web pages to companies. Somewhere along the way I stopped asking "how does this website work" and started asking "how does this business work: where does the truck go, who signs the paper, where does the money actually move?"

On the side, I learned how logistics systems work from the people who run them, and built the blueprint I still use today for digitalizing companies of 100+ staff: sit with every role, learn the operation from the ground up, then teach it back to them inside a system built around how they already work.

The road

Simple steps, taken seriously.

2021

A real-estate internship in northern Morocco

Nord Sakan. My first time writing code that ran a business process for strangers: a rentals-and-sales platform with a back office the agents actually used. Small system, big lesson: software only matters if the person behind the desk trusts it.

2022 to 2024

Luxury furniture, in your living room

Through the right contacts, a handmade-furniture house (MHL) took a chance on me. I put their catalogue into clients' homes through a phone camera, augmented reality before I knew to call it that, and put their workshop's stock and orders under real-time control. Two years of learning how craftsmen, showrooms, and inventory actually behave.

April 2025

The internship that became an ecosystem

A final-year internship at Koekkoek International Horse Transport in the Netherlands. Three months to prove myself. I never really left. I immersed myself in the European horse-transport system from inside the trucks: CMR papers, TIR carnets, veterinary documents, border regulations, corridor planning, driver scheduling, stable operations. Fifteen months and 2,700 commits later, a 280,000-line platform ran the company: orders, routing, invoicing, paperwork, and live GPS tracking of drivers and horses. Built by one person: me.

Nov 2025

Legal cannabis, fully traceable

Morocco legalized regulated cannabis production, and Bled's Blend needed every gram accountable across land, biomass, supply and demand, and international clients, with Terranoid running extraction in the lab. I built the traceability platform: from seed to finished product, every batch tracked, every step ready for the regulator. Offline-first, because farms don't have fiber.

2026

The ecosystem grows wings

Med&Ark brought the horse-transport model to Morocco under its Dutch parent. Horse E.T. took it to the sky: intercontinental air transport, where a single horse can be worth more than the aircraft hold it flies in: passports, vaccines, blood tests, airway planning, partner airlines. And between road and air I built Lorys, a neutral shared layer where two companies cooperate on hand-overs and settlement without ever seeing each other's private data.

Now

AltaCode

Everything I learned in one practice: digital ecosystems for operations-heavy companies: logistics, live-animal and high-asset transport, supply chains, and finance, with AI where it earns its keep and security designed in from day one. Direct. No hand-offs. I learn your operation, then I build it.

What I do

Seven disciplines. One job: make it run.

I don't do AI demos. I put models to work inside operations, where being wrong costs money.

Document intelligence in production: horse passports, veterinary papers, and invoices read by machine and turned into clean structured records, with no re-typing
Fine-tuned models where generic ones fail: domain language, domain documents, domain decisions
Forecasting and planning on live operational data (demand, stock, routes), not on last quarter's export
TensorFlow, PyTorch, OpenCV, NLP, chosen per job and never for the badge

Where I go deepest

Logistics & live-animal transport

Living cargo doesn't wait. Welfare rules, rest stops, veterinary checks, temperature, timing. I build systems that treat an animal as what it is: the most demanding shipment there is.

High-asset transport

A single competition horse can be worth more than the truck it rides in. Chain of custody, documentation, insurance-grade records. Nothing moves without a trail.

GPS & geolocation

Live tracking of drivers, vehicles, and animals across borders: positions on the map, arrival estimates that mean something, and history you can replay when a client asks what happened.

Notable project · security research

CertForge

A defensive research project from my cryptography work at Al Akhawayn University. The question was uncomfortable and worth asking: what is the padlock in your browser actually promising, and what happens to that promise when someone owns the network underneath it? Step through it, then open the mathematics and check every claim yourself.

Live wire

● encrypted end to end

Step 01 / 05

How it is supposed to work

Your browser asks the server to prove who it is. The server presents a certificate signed with a private key only it holds, and your browser checks that signature against an authority it already trusts. Only then do the two agree on a session key and start encrypting. Watch the wire: everything crossing it is hex, and it stays hex.

Handshake

client → server : hello, prove who you are

server → client : certificate, signed with its private key

client : signature verified against a trusted authority ✓

both : agree a session key neither one transmitted

client ⇄ server : AES from here on

The mathematics, computed live

Nothing here is a diagram of the idea. It is the arithmetic.

Every number in the four panels below is calculated in your browser as you read: the key pair, the signature, the agreed secret, the S-box, the field multiplication, and the two keys an attacker ends up holding. Small parameters so they fit on screen, identical mathematics to the real thing.

Before any data moves, the server has to prove it is the server. It holds a private number nobody else has, and everyone else holds the matching public one. Signing is exponentiation with the private key; verifying is exponentiation with the public key. The numbers below are real and computed in your browser, just small enough to read.

Two primesp = 1009 , q = 1697

Modulus n = p·q1712273

φ(n) = (p−1)(q−1)1709568

Public exponent e65537

Private d = e⁻¹ mod φ(n)1070081

Certificate digest H42271

Signature = H^d mod n1137589

Verify = sig^e mod n42271 ✓ matches H

Anyone can run the verify line, because e and n are public. Only the holder of d could have produced that signature. That is the entire basis of "this really is altacode.eu". Real certificates use the same arithmetic with numbers around 2048 bits, where factoring n back into p and q is the part nobody can do.

Conducted in a controlled lab environment for penetration-testing education, documented alongside its mitigations. Published as defensive research, with no operational tooling.

Notable project · side project

BioNest

A medical records platform with two obsessions: help doctors read images faster, and make it impossible to quietly rewrite a patient's history. I led a team of four. My part was the security architecture and the record integrity model. Try to break it below.

Patient record chain

R-1041 · Patient 4471 · entered by Dr. Alaoui

Chest X-ray: no abnormality detected

seal 868e8ccdb741

✓ intact

R-1042 · Patient 4471 · entered by Dr. Alaoui

Prescribed amoxicillin 500mg, 7 days

seal f315e3b905d2

✓ intact

R-1043 · Patient 4471 · entered by Reception

Follow-up scheduled in 14 days

seal 798d392e2367

✓ intact

Chain intact. Each seal is derived from the record's contents and the seal before it. Press "Alter a record" to change a single dosage and watch what happens.

Four models, one second opinion

A medical language model tuned on clinical text, breast-cancer imaging assessment, tuberculosis and pneumonia screening from chest X-rays, and three-dimensional recognition for Alzheimer's indicators. None of them diagnose. They flag, rank, and explain. The doctor still decides.

Security as the foundation

Layered network and application defences, restricted access paths, cryptographic controls on the record store, and an audit trail built for the kind of scrutiny medical data attracts. In healthcare, "we think it's secure" is not an answer anyone accepts.