Formally verified binary tower fields (F(2^k) to F(2^256)), constant-time by default, with hardware carry-less multiplication. For Sumcheck, GKR-based provers,…
Per-call SSH-signature (SSHSIG) credentials for gRPC control planes, product-neutral: the credential a caller signs with its own OpenSSH key (method-bound,…
What an estate's FRONT (vm1) does that is no product's: its own HTTPS (the certificate fed, kept or from ACME HTTP-01 in-process, the hand-over to its…
The estate's wall clock: HTTPS-Date / SNTP / signed-peer time, one quorum rule, step-or-slew, a report a control plane can serve, and the front's signed-time…
The ONE admission trait for the nordisk suite — `Admit::plan` (what this work would cost, which class it gets, and a sentence saying why), `Admit::admit` (a…
What an appliance's disks hold, read the cheap way: every storage mount (/proc/self/mounts, pseudo filesystems left out), one statvfs(3) per mount (total /…
Scheduled, unconditional actions for the Lavoisier agent — a UTC cron engine plus a job registry that fires direct tool calls or prompt turns and keeps…
LOW relay wire protocol: signed envelopes with seat binding, sequence monotonicity and transcript-hash chaining over an untrusted relay. Pure Rust, native and…