Broker-owned goals and tracking store: user-explicit goals, an append-only tracking log, and the read-only feed query interface whose every item carries its…
A Secret<T> wrapper whose Debug impl renders only a length, never the wrapped value, so every place a password or passphrase is exposed is a single greppable…
Name reservation. Gaz is the contact layer of the mere stack: persona-scoped, key-rooted contact records (your petname for them, their stable keys, attested…
Know when an agent's work is actually done. Run any ACP agent in its own worktree, verify its change with your own checks run outside the agent, see the…
Bundle a directory tree into a zip, then read one entry back out of it as a seekable stream — no temp directory, never the whole file in memory. Optional…
The ONE durable panic record for nordisk binaries: a `std::panic` hook that writes payload + location + thread + backtrace + the artifact's own build stamp and…
Steel-backed Lisp evaluator as an ikigai module: `urn:lisp:eval` runs s-expressions whose builtins ARE the kernel verbs (source/sink/meta/exists/delete), each…
The ONE admission trait for the nordisk suite — `Admit::plan` (what this work would cost, which class it gets, and a sentence saying why), `Admit::admit` (a…
Fast streaming ASCII/UTF-16LE string extractor for raw memory dump (.dmp) files, with simple noise filtering for byte-fill/heap-fill patterns. Never loads the…
A replayable, drivable text-editing engine: Helix's editing model in a pure Elm architecture. The whole editor is one serializable state; every input is a…
CUPS print jobs for forensics: the IPP control files in the spool (/var/spool/cups, macOS and Linux): who printed what, from which application and host, to…
Windows scheduled tasks for forensics: the task XML files of System32\Tasks and the .job files of older Windows (what runs, as whom, when, hidden or not).
