Projects

Things I've built, contributed to, or run as personal infrastructure. Open source where possible.

Invariant Platform

The platform everything else on this site is written against.

Invariant Platform

live · checked nightly

A small, security-first Kubernetes platform that re-asserts its own posture every night, from outside itself, and whose only repair is a rebuild from a declaration. Two hundred and two numbered decisions, eighteen invariants, and the nightly check published on the site — findings included. The provisioner is one static Rust binary, released as signed artifacts, that refuses to change the fleet unless it is one.

Personal Projects

Side projects built for learning, utility, or both.

Open Source Contributions

Projects in the open source community where I have an active role.