Note
I build sharp, single-purpose tools — mostly in Rust and Zig, sometimes in Go or Python. Security scanners, developer utilities, AI infrastructure, and the occasional absurd experiment. On GitHub since 2008. Everything ships.
gitmesh.app · don@codetestcode.io · linkedin
I'm a systems-level software engineer focused on security tooling, developer infrastructure, and AI-native systems. Most of my work lives at the intersection of offensive security, protocol engineering, and CLI design — shipping single-binary tools with minimal dependencies that solve one problem well.
- Security research — network beacon detection, distributed scanners, web fuzzers, OSINT frameworks, and supply-chain forensics
- Developer tools — self-hosted tunnel servers, webhook inspectors, deterministic crawlers, and CI/CD automation
- AI infrastructure — Model Context Protocol (MCP) servers, multi-agent coordination protocols, and DSLs for composable AI systems
- Systems programming — Rust-first, with production work in Zig, Go, Python, TypeScript, and Nim
- Open source — 40+ original public tools, all designed to be auditable and forkable
I care about software that is small, correct, and observable. If it can't be deployed with scp and run without a runtime, it's probably too complicated.
Rust Zig Go Python TypeScript Nim Shell Docker PostgreSQL Redis SQLite
| Repository | Description | Lang | Last push |
|---|---|---|---|
| leet-index | super top secret | 2026-07-07 | |
| cosaci | Distributed attested CI mesh — property-tested at every layer | 2026-07-06 | |
| floq | Detect C2 beacons in network traffic using Floquet spectral analysis from quantum chaos… | 2026-07-04 | |
| smesh-rust | High-performance decentralized coordination protocol for multi-agent LLM systems.… | 2026-07-04 | |
| fafoaas | FAFO as a Service — an event-driven homage to FOAAS and a working masterclass in spec-first… | 2026-07-03 | |
| coelacanth | AI-first Unix primitives, clean-room reimplemented in Zig under one self-describing… | 2026-07-01 |
This section and the metrics panel above are regenerated nightly by a stdlib-only Python script querying the GitHub API — no third-party stats services, nothing to go stale.
| Repository | Description | Language |
|---|---|---|
| floq | C2 beacon detection via Floquet spectral analysis — pcap, live capture, or OTLP; 274 KB binary | |
| anomalyx | Contract-first anomaly detection across ~30 formats — logs, pcap, OTLP; deterministic CLI | |
| fatt | Distributed async scanner for exposed files across millions of domains | |
| fuf | Fast next-generation web fuzzer | |
| robin-smesh | Decentralized dark web OSINT framework — Tor crawling, artifact extraction | |
| mini-shai-hulud-dragnet | Forensic dataset + live dashboard for the 2026 npm supply-chain worm — 1,117 dropbox repos, 47 IOCs |
| Repository | Description | Language |
|---|---|---|
| tailx | Live system cognition engine — tail reimagined: anomalies, traces, structured JSON; 144 KB |
|
| coelacanth | AI-first Unix primitives, clean-room reimplemented under one machine-checkable contract | |
| palimpsest | Deterministic crawl kernel — same seed, identical crawl; JA3/JA4 impersonation, WARC++ | |
| hook-bin | Single-binary webhook inbox — embedded SQLite, live dashboard, zero deps | |
| zgrok | Self-hosted ngrok alternative built on Tokio | |
| cora | Multi-pattern fixed-string matcher — Aho-Corasick + SIMD on mmap'd files, NDJSON output |
| Repository | Description | Language |
|---|---|---|
| smesh-rust | Decentralized coordination protocol for multi-agent LLM systems — QUIC P2P, sub-µs signal diffusion | |
| vajra | Deterministic semantic reduction engine for structured data — break noise, preserve truth | |
| agent-calc | AI-native exact calculator — typed JSON math, symbolic reasoning, mutation-tested | |
| sigmos | DSL for defining AI-native, composable, reactive systems | |
| mcp-flow | WebTransport binding for MCP — QUIC streams, no head-of-line blocking | |
| toon-zig | TOON (Token-Oriented Object Notation) — 30–60% token reduction for LLMs |
| Repository | Description | Language |
|---|---|---|
| humanlang | Token bucket rate limiter implemented in 37 languages (1957–2016) | |
| git-archaeology-lab | Hands-on exercises for forgotten git commands — crafted history, real bugs, real bisect targets | |
| gitfoo_episode_1 | Git Black Belt Masterclass — the other 90% of git most devs never use | |
| OverHelloWorld | Intentionally over-engineered Hello World — DDD, CQRS, event sourcing, telemetry | |
| fafoaas | FAFO as a Service — spec-first engineering masterclass; AsyncAPI 3 + MCP, 98/98 mutation score | |
| tip-to-tip-efficiency | Mathematically serious crate for a deeply unserious Silicon Valley efficiency empire |






