Deployment patterns widen an agent’s reach as it improves, assuming capability and trustworthiness rise together. On why that is backwards, and on the containment that buying an agent maximum flexibility actually costs.
Projects
in development
unreleased
wiregap P/2F9
A containment architecture for one operating model in particular: granting an agent maximum flexibility inside a zone whose boundary it cannot reach past. A machine that may execute anything is separated from a machine that may reach anything, with a single reviewable program between them holding the entire trusted computing base. Effect is bounded by capability absence rather than by inspection, so no command evaluation is required inside the zone.
docs/principles.md foundational assertions
4. Trust is zero and irrelevant.
6. No reachable execution beyond the boundary.
7. Effect is defended; information is not.
12. Guarantees are structural, never caught.
13. The system classifies authorship, not acts.
E/71B
R/A4C
A platform-scoped soundness account for a userspace driver reading memory a network device mutates concurrently, cited to primary specifications.
R/8E3
A survey of demonstrated physical-emanation exfiltration channels, their published rates and ranges, and the receiver each requires.
proof of concept
open source · mit
wvf P/63D
A constrained notation format for encoding conceptual worldviews, built for LLM context persistence, in which the structure itself enforces what can and cannot be stored.
example.wvf wvf notation
Trust
.formation
- slow
- requires consistency | over time
- contextual @personal-experience
.erosion
- fast !
- single violation => collapse?
- asymmetric vs formation &Trust.formation
E/C96
A format that cannot store noise
The working thesis behind wvf: a storage format that refuses noise structurally, before judgment.
maintained
open source · mit
codey P/4E8
A terminal AI coding assistant built in Rust: streaming responses, permission-gated tool execution, Neovim diff previews, sub-agents for background research. The daily instrument, and the seat where the rest of this work gets done.
README.md toml
[agents.foreground]
model = "claude-opus-4-6"
max_tokens = 8192
[ui]
theme = "base16-ocean.dark"
maintained
open source · mit
fastcbv P/D82
Class-based views for FastAPI. HTTP verbs become methods on a class, and the dependencies an endpoint group has in common are declared once as class attributes instead of repeated in every function signature.
example.py python
@router.view("/items/{item_id}")
class ItemView(BaseView):
db: Annotated[Database, Depends(get_db)]
async def get(self, item_id: int) -> dict:
return await self.db.get_item(item_id)
in development
unreleased
llint P/5A3
Review runs against an accumulated release candidate rather than individual pull requests, and most of what it produces is the same observations about naming, docstrings, exception breadth, and typing that the previous candidate produced. llint front-loads those opinions into documented rules and applies them before a person reads the code.