Highlights
Block or report copyleftdev
Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.
You must be logged in to block users.
Contact GitHub support about this user’s behavior. Learn more about reporting abuse.
Report abuse
Fund the compute behind my open source — every tip becomes AI inference credit I can spend on any model.
Note
I build sharp, single-purpose tools — mostly in Rust and Zig, sometimes in Go or Python. Security scanners, developer utilities, AI infrastructure, and the occasional absurd experiment. On GitHub since 2008. Everything ships.
gitmesh.app · don@codetestcode.io · linkedin
I'm a systems-level software engineer focused on security tooling, developer infrastructure, and AI-native systems. Most of my work lives at the intersection of offensive security, protocol engineering, and CLI design — shipping single-binary tools with minimal dependencies that solve one problem well.
- Security research — network beacon detection, distributed scanners, web fuzzers, OSINT frameworks, and supply-chain forensics
- Developer tools — self-hosted tunnel servers, webhook inspectors, deterministic crawlers, and CI/CD automation
- AI infrastructure — Model Context Protocol (MCP) servers, multi-agent coordination protocols, and DSLs for composable AI systems
- Systems programming — Rust-first, with production work in Zig, Go, Python, TypeScript, and Nim
- Open source — 40+ original public tools, all designed to be auditable and forkable
I care about software that is small, correct, and observable. If it can't be deployed with scp and run without a runtime, it's probably too complicated.
Rust Zig Go Python TypeScript Nim Shell Docker PostgreSQL Redis SQLite
| Repository | Description | Lang | Last push |
|---|---|---|---|
| leet-index | super top secret | $\texttt{JavaScript}$ | 2026-08-29 |
| smesh-a2a | A2A v1 interoperability gateway for decentralized SMESH agent swarms | $\texttt{Rust}$ | 2026-08-29 |
| kahea | OpenAPI testing and deterministic API fuzzing for AI agents—catch contract bugs before unsafe… | $\texttt{Rust}$ | 2026-08-28 |
| copyleftdev.github.io | Canonical, self-regenerating identity page for copyleftdev — schema.org Person, llms.txt, and… | $\texttt{HTML}$ | 2026-08-28 |
| kilo-data | Open threat-intelligence and IP-reputation ETL for phishing and abuse screening, with BGP and… | $\texttt{Rust}$ | 2026-08-28 |
| vulngraph-data | Deterministic data pipeline for VulnGraph — ingests 11 vulnerability sources, publishes… | $\texttt{Rust}$ | 2026-08-28 |
This section and the metrics panel above are regenerated nightly by a stdlib-only Python script querying the GitHub API — no third-party stats services, nothing to go stale.
| Repository | Description | Language |
|---|---|---|
| floq | C2 beacon detection via Floquet spectral analysis — pcap, live capture, or OTLP; 274 KB binary | $\texttt{Zig}$ |
| anomalyx | Contract-first anomaly detection across ~30 formats — logs, pcap, OTLP; deterministic CLI | $\texttt{Rust}$ |
| fatt | Distributed async scanner for exposed files across millions of domains | $\texttt{Rust}$ |
| fuf | Fast next-generation web fuzzer | $\texttt{Rust}$ |
| robin-smesh | Decentralized dark web OSINT framework — Tor crawling, artifact extraction | $\texttt{Rust}$ |
| mini-shai-hulud-dragnet | Forensic dataset + live dashboard for the 2026 npm supply-chain worm — 1,117 dropbox repos, 47 IOCs | $\texttt{Shell}$ |
| Repository | Description | Language |
|---|---|---|
| tailx | Live system cognition engine — tail reimagined: anomalies, traces, structured JSON; 144 KB | $\texttt{Zig}$ |
| coelacanth | AI-first Unix primitives, clean-room reimplemented under one machine-checkable contract | $\texttt{Zig}$ |
| palimpsest | Deterministic crawl kernel — same seed, identical crawl; JA3/JA4 impersonation, WARC++ | $\texttt{Rust}$ |
| hook-bin | Single-binary webhook inbox — embedded SQLite, live dashboard, zero deps | $\texttt{Rust}$ |
| zgrok | Self-hosted ngrok alternative built on Tokio | $\texttt{Rust}$ |
| cora | Multi-pattern fixed-string matcher — Aho-Corasick + SIMD on mmap'd files, NDJSON output | $\texttt{Rust}$ |
| Repository | Description | Language |
|---|---|---|
| smesh-rust | Decentralized coordination protocol for multi-agent LLM systems — QUIC P2P, sub-µs signal diffusion | $\texttt{Rust}$ |
| vajra | Deterministic semantic reduction engine for structured data — break noise, preserve truth | $\texttt{Rust}$ |
| agent-calc | AI-native exact calculator — typed JSON math, symbolic reasoning, mutation-tested | $\texttt{Rust}$ |
| sigmos | DSL for defining AI-native, composable, reactive systems | $\texttt{Rust}$ |
| mcp-flow | WebTransport binding for MCP — QUIC streams, no head-of-line blocking | $\texttt{Multi}$ |
| toon-zig | TOON (Token-Oriented Object Notation) — 30–60% token reduction for LLMs | $\texttt{Zig}$ |
| Repository | Description | Language |
|---|---|---|
| humanlang | Token bucket rate limiter implemented in 37 languages (1957–2016) | $\texttt{Multi}$ |
| git-archaeology-lab | Hands-on exercises for forgotten git commands — crafted history, real bugs, real bisect targets | $\texttt{Shell}$ |
| gitfoo_episode_1 | Git Black Belt Masterclass — the other 90% of git most devs never use | $\texttt{Python}$ |
| OverHelloWorld | Intentionally over-engineered Hello World — DDD, CQRS, event sourcing, telemetry | $\texttt{Go}$ |
| fafoaas | FAFO as a Service — spec-first engineering masterclass; AsyncAPI 3 + MCP, 98/98 mutation score | $\texttt{TS}$ |
| tip-to-tip-efficiency | Mathematically serious crate for a deeply unserious Silicon Valley efficiency empire | $\texttt{Rust}$ |
Pinned Loading
If the problem persists, check the GitHub status page or contact support.