I'm Neville Ko, Head of Product & Experience at Distinct AI and an official n8n creator with published templates on the n8n marketplace. I have 20 years of experience shipping 0-to-1 products and I'm now building production-grade AI automation for regulated industries like financial services and healthcare.
I specialize in agentic RAG systems, multi-agent orchestration, and governance-aware AI mapped to real compliance frameworks: SEC/FINRA, OSFI E-23, SOC 2 Type II, PCI-DSS v4.0, and OWASP LLM Top 10. My work is production-ready, privacy-first, and built with audit trails, least-privilege tooling, and human-in-the-loop controls.
Working implementations of all 10 OWASP LLM risks for financial services, insurance, and legal tech: n8n workflows, system prompt library, and governance checklists.
| Risk | Artifact | Coverage |
|---|---|---|
| LLM01 Prompt Injection | Workflow + Prompt | 21-pattern scanner, risk-score gating |
| LLM02 Sensitive Info Disclosure | Workflow + Prompt | 7-category PII redaction |
| LLM03 Supply Chain | Governance doc | Model intake assessment checklist |
| LLM04 Data Poisoning | Workflow | RAG ingestion validation + allowlist |
| LLM05 Improper Output Handling | Prompt | Output sanitization system prompt |
| LLM06 Excessive Agency | Workflow + Prompt | Human-in-the-loop approval gate |
| LLM07 System Prompt Leakage | Governance + Prompt | Audit framework + hardened prompt |
| LLM08 Vector/Embedding Weaknesses | Workflow | Sanitization + audit metadata on upsert |
| LLM09 Misinformation | Prompt | Grounding and uncertainty disclosure |
| LLM10 Unbounded Consumption | Workflow | Sliding-window rate limiter |
Practical guardrails for deploying AI in payment card environments, implementing PCI-DSS v4.0 at the inference layer.
| Artifact | Type | Coverage |
|---|---|---|
| Cardholder Data Detector | n8n workflow | Pre-inference PAN/CVV/expiry masking across all 4 card networks |
| PCI Scope Boundary System Prompt | System prompt | Hard prohibitions, redirect instructions, masked input handling |
Audit infrastructure for LLM deployments in SOC 2 Type II environments: tamper-evident interaction logging, automated retention enforcement, and an AI system evidence template for auditors.
| Artifact | Type | Coverage |
|---|---|---|
| Audit Log Pipeline | n8n workflow | Webhook-triggered, SHA-256 integrity hash, append-only Supabase insert |
| Retention Enforcer | n8n workflow | Daily schedule, flags entries expired after 90 days |
| SOC 2 AI Evidence Template | Document template | Structured documentation for AI systems under SOC 2 audit |
Model risk governance artifacts for LLM deployments in federally regulated Canadian financial institutions, aligned with OSFI Guideline E-23 (published September 2025, effective May 2027).
| Artifact | Type | Coverage |
|---|---|---|
| Model Intake Classifier | n8n workflow | Webhook-triggered risk tier assignment per E-23 C.2 (quantitative + qualitative scoring) |
| LLM Model Card Template | Document template | Full model inventory tracking per E-23 Appendix 1 and D.2 |
| Model Risk Assessment Checklist | Governance document | Scored risk factor assessment per E-23 C.2 and C.3 |
| Third-Party LLM Vendor Review | Governance document | Standalone external model assessment per E-23 C.1 |
Prompt library and output scanner for AI deployments in cross-border investment advice environments. Covers both CIRO (Canada) and SEC/FINRA (United States) for firms operating across both jurisdictions.
| Artifact | Type | Coverage |
|---|---|---|
| Suitability Boundary Prompt | System prompt | Constrains AI to general information; routes personalized advice to registered representatives (CIRO 3400, Reg BI) |
| Required Disclaimers Prompt | System prompt | Mandates risk disclosures, AI identification, and past-performance language (FINRA 2210, CIRO) |
| Prohibited Claims Prompt | System prompt | Blocks return guarantees, performance predictions, and exaggerated claims (FINRA 2210(d), CIRO fair dealing) |
| Supervision Alignment Prompt | System prompt | Flags AI outputs requiring principal review before client delivery (CIRO 2900, FINRA 3110) |
| Investment Recommendation Scanner | n8n workflow | Scans AI-generated text for 5 advice-boundary violation types with rule citations and remediation actions |
Production-ready automation workflows: agentic RAG, AI agents, and developer utilities; all importable directly into n8n.
| Workflow | Category | Level | Use Case |
|---|---|---|---|
| Autonomous customer support agent | AI Agents | Advanced | SaaS and enterprise customer support |
| Multi-KB agentic RAG assistant | RAG | Advanced | Internal knowledge Q&A for teams |
| Slack Gemini Agent | AI Agents | Intermediate | AI assistant for Slack workspaces |
| Gmail AI Triage | AI Agents | Intermediate | High-volume inbox management |
| Seed a Supabase AI knowledge base from Notion | RAG | Intermediate | RAG pipeline ingestion from Notion |
| AI Daily Briefing Bot | Utilities | Beginner | Daily news digest for teams |
| Claude to Slack MCP Connection Test | Utilities | Beginner | Developer MCP integration testing |
| URL and Article Summarizer to Slack | Utilities | Beginner | Content research and curation |
| API Health Monitor | Utilities | Beginner | DevOps uptime monitoring |
| RSS Feed to Slack Alert | Utilities | Beginner | Topic and brand monitoring |
| GitHub PR to Slack Notifier | Utilities | Beginner | Engineering team PR visibility |
| AI Webhook Classifier | Utilities | Intermediate | Support triage and content routing |
- Multi-Agent Orchestration: modality-agnostic, agent-to-agent workflows focused on security and privacy
- Privacy-First Local AI: on-device open-weight models for sensitive financial and healthcare data
- Context and Memory Management: hybrid memory retrieval for context-aware personalization
- Hybrid Inference Routing: optimizing token efficiency, latency, and cost across cloud and local
IDEs and Editors
Agents and Workflows
Inference and APIs
AI Models
Prototyping
Data and Knowledge
Links: Portfolio · LinkedIn · n8n Official Creator
Open to advisory, consulting, and collaboration on AI automation, agentic systems, and governance-aware AI for regulated industries. Connect on LinkedIn