Folders and files
| Name | Name | Last commit date | ||
|---|---|---|---|---|
Fund the compute behind my open source — every tip becomes AI inference credit I can spend on any model.
Note
I build sharp, single-purpose tools — mostly in Rust and Zig, sometimes in Go or Python. Security scanners, developer utilities, AI infrastructure, and the occasional absurd experiment. On GitHub since 2008. Everything ships.
gitmesh.app · don@codetestcode.io · linkedin
I'm a systems-level software engineer focused on security tooling, developer infrastructure, and AI-native systems. Most of my work lives at the intersection of offensive security, protocol engineering, and CLI design — shipping single-binary tools with minimal dependencies that solve one problem well.
- Security research — network beacon detection, distributed scanners, web fuzzers, OSINT frameworks, and supply-chain forensics
- Developer tools — self-hosted tunnel servers, webhook inspectors, deterministic crawlers, and CI/CD automation
- AI infrastructure — Model Context Protocol (MCP) servers, multi-agent coordination protocols, and DSLs for composable AI systems
- Systems programming — Rust-first, with production work in Zig, Go, Python, TypeScript, and Nim
- Open source — 40+ original public tools, all designed to be auditable and forkable
I care about software that is small, correct, and observable. If it can't be deployed with scp and run without a runtime, it's probably too complicated.
Rust Zig Go Python TypeScript Nim Shell Docker PostgreSQL Redis SQLite
| Repository | Description | Lang | Last push |
|---|---|---|---|
| leet-index | super top secret | $\texttt{JavaScript}$ | 2026-08-30 |
| kalshi-kernel | Unofficial safety-focused MCP kernel for Kalshi market workflows | $\texttt{Go}$ | 2026-08-29 |
| smesh-a2a | A2A v1 interoperability gateway for decentralized SMESH agent swarms | $\texttt{Rust}$ | 2026-08-29 |
| copyleftdev.github.io | Canonical, self-regenerating identity page for copyleftdev — schema.org Person, llms.txt, and… | $\texttt{HTML}$ | 2026-08-29 |
| kilo-data | Open threat-intelligence and IP-reputation ETL for phishing and abuse screening, with BGP and… | $\texttt{Rust}$ | 2026-08-29 |
| vulngraph-data | Deterministic data pipeline for VulnGraph — ingests 11 vulnerability sources, publishes… | $\texttt{Rust}$ | 2026-08-29 |
This section and the metrics panel above are regenerated nightly by a stdlib-only Python script querying the GitHub API — no third-party stats services, nothing to go stale.
| Repository | Description | Language |
|---|---|---|
| floq | C2 beacon detection via Floquet spectral analysis — pcap, live capture, or OTLP; 274 KB binary | $\texttt{Zig}$ |
| anomalyx | Contract-first anomaly detection across ~30 formats — logs, pcap, OTLP; deterministic CLI | $\texttt{Rust}$ |
| fatt | Distributed async scanner for exposed files across millions of domains | $\texttt{Rust}$ |
| fuf | Fast next-generation web fuzzer | $\texttt{Rust}$ |
| robin-smesh | Decentralized dark web OSINT framework — Tor crawling, artifact extraction | $\texttt{Rust}$ |
| mini-shai-hulud-dragnet | Forensic dataset + live dashboard for the 2026 npm supply-chain worm — 1,117 dropbox repos, 47 IOCs | $\texttt{Shell}$ |
| Repository | Description | Language |
|---|---|---|
| tailx | Live system cognition engine — tail reimagined: anomalies, traces, structured JSON; 144 KB | $\texttt{Zig}$ |
| coelacanth | AI-first Unix primitives, clean-room reimplemented under one machine-checkable contract | $\texttt{Zig}$ |
| palimpsest | Deterministic crawl kernel — same seed, identical crawl; JA3/JA4 impersonation, WARC++ | $\texttt{Rust}$ |
| hook-bin | Single-binary webhook inbox — embedded SQLite, live dashboard, zero deps | $\texttt{Rust}$ |
| zgrok | Self-hosted ngrok alternative built on Tokio | $\texttt{Rust}$ |
| cora | Multi-pattern fixed-string matcher — Aho-Corasick + SIMD on mmap'd files, NDJSON output | $\texttt{Rust}$ |
| Repository | Description | Language |
|---|---|---|
| smesh-rust | Decentralized coordination protocol for multi-agent LLM systems — QUIC P2P, sub-µs signal diffusion | $\texttt{Rust}$ |
| vajra | Deterministic semantic reduction engine for structured data — break noise, preserve truth | $\texttt{Rust}$ |
| agent-calc | AI-native exact calculator — typed JSON math, symbolic reasoning, mutation-tested | $\texttt{Rust}$ |
| sigmos | DSL for defining AI-native, composable, reactive systems | $\texttt{Rust}$ |
| mcp-flow | WebTransport binding for MCP — QUIC streams, no head-of-line blocking | $\texttt{Multi}$ |
| toon-zig | TOON (Token-Oriented Object Notation) — 30–60% token reduction for LLMs | $\texttt{Zig}$ |
| Repository | Description | Language |
|---|---|---|
| humanlang | Token bucket rate limiter implemented in 37 languages (1957–2016) | $\texttt{Multi}$ |
| git-archaeology-lab | Hands-on exercises for forgotten git commands — crafted history, real bugs, real bisect targets | $\texttt{Shell}$ |
| gitfoo_episode_1 | Git Black Belt Masterclass — the other 90% of git most devs never use | $\texttt{Python}$ |
| OverHelloWorld | Intentionally over-engineered Hello World — DDD, CQRS, event sourcing, telemetry | $\texttt{Go}$ |
| fafoaas | FAFO as a Service — spec-first engineering masterclass; AsyncAPI 3 + MCP, 98/98 mutation score | $\texttt{TS}$ |
| tip-to-tip-efficiency | Mathematically serious crate for a deeply unserious Silicon Valley efficiency empire | $\texttt{Rust}$ |
