Skip to content

Code you can read.

These are the repositories behind the work: infrastructure, local AI, and the systems around them.

Read the repositories

01

Supporting proof / Released work

cfctl

Keep an AI operator from granting itself permission to write.

A governed Cloudflare control plane that makes infrastructure changes reviewable before execution and verifiable afterward.

Hash-bound plans separate intent from mutation; exact-operation approval, one Cloudflare boundary, live verification, and durable rectification evidence are implemented in a Rust CLI with macOS and Linux release artifacts.

Inspect the repository

02

Supporting proof / Released work

Speaker Scribe

A private speech lab in one Mac app.

A self-contained Apple Silicon app for local transcription, speaker diarization, correction, and export.

The packaged app carries its own Python runtime, ffmpeg, and Whisper model; MLX Whisper, Silero VAD, SpeechBrain embeddings, and clustering produce editable speaker turns and TXT, SRT, or JSON exports.

Inspect the repository

03

Supporting proof / Released work

MLXRead

Option–Escape speaking through a model that stays on the Mac.

A native macOS replacement for Speak Selection, powered by an on-device MLX voice.

SwiftUI and AppKit wrap Accessibility selection capture, on-device Kokoro and Soprano models, sentence-streamed playback, immediate cancellation, privacy controls, and signed Sparkle updates.

Inspect the repository

04

Workbench / Building in public

maildesk-cf

Email routing that lives in policy code instead of mailbox lore.

A Cloudflare-edge mail desk whose routing and reply authority live in a typed Rust policy core.

The Rust routing core and Cloudflare Email, D1, R2, and Queue paths exist. The operator UI and a public release do not yet exist, so this remains an inspectable build rather than a finished product.

Inspect the repository