Pinned
Founder, Proof
Continuous correctness audits for critical infrastructure
Every finding backed by a runnable reproducer
- 100% MC/DC. Complete requirements. Heavy fuzzing. Still found 7 real bugs in a production library โ including silent data loss. Coding agents train on diffs and pass/fail suites. They almost never see the contract. I generate the missing layer: verified requirements +
- My wife just did the most brutal website review. I spent an hour sitting all red, saying "Yes, ma'am. Yes, dear." We were sitting in a cafe and I asked her to look at it. She's not technical at all. But she was a newspaper editor for years, and apparently that instinct never
- If you need to write an RCE Kimi is your best friend ๐
- My OSS project jsonparser turned ten this year! I wrote it in 2016 because I wanted real-time analytics from plain files and encoding/json was too slow. Somewhere along the way it ended up inside Grafana, Tyk, Keybase, Docker and Itsio, and many others. This summer I went back

