(03) Work
Selected work.
A short, honest list. Things I'm building and documenting — mostly in Rust, mostly at the seam between developer tools and the systems they sit on top of. A project lands here once I can state honestly what it does, where it stands, and what its limits are. Each page carries its own release state and evidence, so what you can check from outside is visible per project rather than promised here.
-
gm-crypto-rs
Pure-Rust SM2 / SM3 / SM4 SDK for the Chinese national crypto standards, with constant-time-designed secret paths and an in-CI dudect leak-regression harness. Public v1.11.0 on crates.io — version-by-version evidence on its release-history page. Read more →
-
RepoLens
A repository memory and context layer for AI coding agents. It exposes 26 MCP tools and pairs structured repository context with typed, decaying memory so agents can keep a durable model of a project across sessions. Private pre-release. Private project — no public source link. Read more →
-
ghrunners
A one-shot macOS CLI for GitHub Actions self-hosted runners — read-only observability (launchd domain, PID, process tree, log tails, optional GitHub API) plus guarded launchd control. Missing pieces degrade to partial output rather than a hard failure. Private/local. Local prototype — no public source link. Read more →
-
Explainer Engine
A deterministic pipeline that turns a YAML storyboard into a narrated concept video — a plot, a cited code callout, or an animated concept diagram per beat. On-screen content is marked simplified, and a citation gate verifies every claim against the source repo at a pinned commit before a frame is drawn — the
verified @ commitbadge is the gate's verdict, not decoration. Private/local. Local prototype — no public source link. Read more →