Principal engineer. I build the thing before there is a thing: cloud foundations, LLM gateways, and the multi-agent systems that run on top of them. Los Angeles.

Most of my work is private. Of 2,100 contributions so far in 2026, 1,840 are in private repositories. What is below is a sample of how I work, not a record of what I have shipped. The parts you cannot see are cloud migrations, a Postgres-backed control plane for a fleet of agents, multi-cloud cost tooling, and a Proxmox private cloud that a film distribution platform runs on.

• tabby. A vertical tab manager for tmux, in Go. 75 stars, 7 forks and 3 open issues from people I have never met. Its Zellij port, tabby-zj, is Rust compiled to WASM, which meant rebuilding the same tool against a second plugin API inside a sandbox.
• em-dee-pdf. Markdown to PDF in Rust with no LaTeX toolchain. Parses with comrak, transpiles the AST to Typst, renders through the Typst engine. 18 themes.

• zappy-mcp. A WhatsApp MCP server. The point of it is per-chat permissions, which the common ones do not have.
• paperclip-chat-bots. A chat bridge with a per-user to per-agent routing and access-control engine, so "this user reaches the support agent only, admins reach any agent" is expressible. A flat allowlist cannot say that.
• paperclip-plugin-issue-assigner. Delegated work was silently never starting, because plugin-driven issue writes skipped the assignment wakeup. I filed the cause upstream as paperclipai/paperclip#3279 and shipped a plugin that works around it.

An eleven-year habit, and most of what I know about security came out of it.

• tokey. A Rust credential daemon. Drives a real Chrome window to log in, pulls Slack session tokens out of localStorage and the session cookie, does Google OAuth, stores everything at 0600, and refreshes in the background.
• cleanshot-direct-link. A macOS clipboard watcher that rewrites a CleanShot share link into the signed direct media URL. The README leads with the six-hour expiry and when not to use it, because that is the first thing you would hit.
• tmobile-usage, time-warner-cable-usage and bank_simple_api. The same instinct in 2014 and 2015, against consumer accounts that had no API.

Three PRs open on the Ethereum Foundation Proximity Prize, written in Lean 4 against ArkLib: an unconditional exact delta-star pin at rate 1/8, another at the top rung of the mu=6 ladder, and the Paley constant table extended to n=128. Undecided at the time of writing. I am a platform engineer who wanted to find out whether I could read the proofs.

advanceD-wars, a tile-based strategy game on ImpactJS, picked up 5 stars and has sat untouched since. I rebuilt the same game thirteen years later with websockets, containers and Playwright visual-regression tests, which turned out to be a blunt diff of how my engineering changed. responsive-hackathon is what came out of an NFL responsive-design week in February 2013.

1,137 pull requests authored, 451 of them merged into repositories I do not own. 270 issues, including bug reports and proposals filed against fifteen other people's projects. 89 stars and 11 forks across 11 repos. Fourteen years on this account.

Consulting and fixed-price audits at neueway.com. Resume at neueway.com/resume.pdf. b@debea.si