i build things because the version i want usually doesn't exist yet.
the work moves between macOS internals, agent memory, security research, origin servers, and games that keep turning into systems projects. i don't really separate these — they feed each other. the security work becomes infrastructure, the agent work keeps coming back to memory, and the games keep growing backends they don't need.
right now i'm pushing Layerline toward something i'd trust in front of real sites, building Junkstep — a rhythm battle game in early alpha — and growing Valhalla into a real distribution platform.
| project | what it is |
|---|---|
| Layerline | zig origin server. vhosts, fastcgi, reverse proxy, TLS, HTTP/2 stable, HTTP/3 in tree. the edge stack i want to own end to end. |
| engram | agent memory system. hybrid retrieval — HNSW, BM25, graph, cross-encoder, learned reranker. 98.1% R@5 on LongMemEval. |
| mythic | cognition runtime above engram. activation cycles, reflection, checkpoints, plugins. not another wrapper — the layer that makes memory feel alive. |
| kiln | native mac app for agent CLIs. the thing i wished existed, so i built it. swiftui, swift 6. |
| dns-proxy | DNS-based web proxy. route specific domains through exit nodes, bypass geo blocks without touching everything else. docker-deployed. |
| engram-cloud | hosted layer around engram. workspaces, api keys, ingestion. |
| verge.raya.ac | evidence work. source registers, claim threads, receipts. structured accountability instead of screenshots. |
a platform for licensing and distributing software. auth, invites, crypto payments, HWID binding, key management — the full stack for selling and gating a product without handing the whole thing to stripe and a licensing SaaS.
it started as a backend for one product and turned into something general. the architecture is clean enough now that i'm starting to trust it with real products, not just prototypes.
running on it: CS2 (external assistance platform). more coming.
not public yet. getting there.
| work | shape |
|---|---|
| Junkstep | C++20/raylib rhythm battle. alpha — signed apple silicon builds, online play, replays, bot battle. still getting sanded down. |
| Aurora / SRDPKit | local-first macos security workbench. baseline diffs, IOKit research, safe tool registry. risky probes stay gated. |
| Dawnline OS | arch-based os scaffold for agent workstations. archiso, rootfs, containerized builder. |
| SecPulse / Keyleak | disclosure tooling, leaked-secret triage, source handling. |
| Warden | remote control over tailscale. agent, CLI, web, native mac. |
| Apple security research | accepted reports, SRDP tagging, baselines. the boring parts are the point. |
| project | notes |
|---|---|
| ember-cpu | 32-bit CPU from scratch. assembler, C compiler, JIT, and then i ported DOOM to it. |
| eero-mac | native mac app for eero networks. |
| intellidash | intelligence dashboard. 200+ live feeds, local analyst, flight tracking. |
| epstein-archive | document archive, full-text search. 100k+ docs indexed. |
| adelaide-metro-tracking | real-time transit tracking for adelaide. |
| neuro-memory | older memory system. what came before engram. |
| Proton / wine | ARM64 port spike. real port work, not a magic compatibility layer. |
public repos 27 (21 non-fork)
public source ~255k lines (linguist estimate, private work not counted)
most active Layerline, Junkstep, kiln, engram
private active Valhalla, CS2, Aurora/SRDPKit, Dawnline OS, SecPulse, Warden
i don't count lines as a vanity metric. linguist skips lockfiles, vendored deps, generated code, binaries. private work isn't in that number.
native apps when they make sense. web when it earns it. tools should be fast, direct, and slightly overbuilt in the places that save time later. i'd rather ship something rough and real than polish a fake demo.
security research keeps turning into infrastructure. agent work keeps turning back to memory. if a system can't be resumed by another session, it probably isn't done yet.
languages swift python zig c++ typescript javascript go rust bash
apple swiftui appkit xpc sandbox tcc iokit metal
agents mcp embeddings retrieval memory systems event streams local models
security burp nuclei custom scanners source registers disclosure
infra postgres docker cloudflare tailscale layerline nginx dns
payments crypto hwid licensing invites key management
games raylib realtime input chart importers replays multiplayer
accepted apple security research reports. SRDP work under tagging. reports across apple, hackerone, bugcrowd, and direct disclosure. the usual holes — CORS, authz, sandboxing, exposed secrets, client-side trust, platform weirdness.
i care less about making this sound impressive than making it checkable. source boundaries, exact repro steps, local baselines, saved artifacts. knowing when not to run the dangerous thing.
site · junkstep · kiln · layerline · mythic · engram · verge
macOS internals, sandboxing, agent memory, origin servers, DNS — or why a rhythm game needs this much backend.