Posts
2026
- Agents Can't Bluff a Kernel: Teaching AI to Prove Gauss in Five Proof Systems Sep 23 The factorial function type-checked on the first try. It passed the termination checker. It compiled to C, ran natively, and printed an …
- The Function That Beat the Model: What We Measured When We Removed the LLMs Sep 21 For months, a 1-billion-parameter model validated sensitive-data detections in our proxy pipeline. Last week we ran it against a 40-line …
- Manifold: Chaining Seven Proxy Layers Into a Single Transparent LLM Pipeline Jul 29 Every LLM proxy tool you install — a redactor, a router, a rate limiter, a cache — spins its own HTTP server. Each one speaks the OpenAI or …
- DAEDALUS — A Security Research Control Plane for Apple's Container Runtime Jul 28 What is DAEDALUS? DAEDALUS is an open-source security-research control plane built on Apple’s container runtime. It exploits a unique …
- Fake recruitment, remote JSON payloads, and function-inliner malware (analysis) May 19 Clone-and-run recruitment lures that pull obfuscated Node.js from jsonkeeper-style hosts: IOCs, SHA-256 hashes, a small fetch script, function-inliner teardown, MITRE mappings with links, and what to do if you already ran the artifact.
- Local-Splitter: Cutting Cloud LLM Costs by Putting a Small Model in Front Apr 15 Cloud LLM tokens are expensive. Not in the “my AWS bill is high” sense — in the “I’m burning $0.015 per 1K output tokens and my coding agent …
- LLM-Redactor: What Leaves Your Prompt When You Talk to a Cloud LLM Apr 15 Every time a coding agent sends a prompt to a cloud LLM, the full content of that prompt — your code, your credentials, your customer names, …
- Resilient Write: Giving Coding Agents a Write Path That Doesn't Break Apr 12 If you’ve spent any time watching an LLM coding agent work, you’ve seen it happen: the agent generates a perfectly good file, calls Write, …
- What Leaves Your Workstation When You Use an LLM Coding CLI Apr 11 TL;DR I put five LLM coding CLIs through a transparent TLS-intercepting proxy for about three and a half hours in a lab environment and …
- Ollama-Forge for Security Research: Local Models, Refusal Ablation, and Reproducible Pipelines Feb 16 Introduction Security work often involves prompts and data you cannot send to commercial APIs: malware descriptions, exploit drafts, …