The Linux TAP guest network: address pool, TAP devices, identity-invariant NAT (eBPF TCX or iptables), and the quarantine ledger behind arcbox-vm-driver's…
fbui rendering layer: a headless, CPU software renderer for Linux framebuffer UIs. A tiny-skia painter (rects, paths, gradients, clipping, opacity groups,…
Exec pack - materialize a blob tree into a sandbox, run one registered tool under policy, capture outputs and changed files back to blobs with a receipt
The file formats of FusionVault Streams: Arrow IPC, Parquet, CSV and JSON lines as one writer/reader shape over the arrow-rs codecs — the format axis of the…
Semiont's Rust SDK: the protocol's types, the transport contract and a client of the bus over it, and what a client needs to name its principals and hold its…
A daemon that auto-connects ALSA and PipeWire MIDI ports, and PipeWire audio ports, based on regex rules, with optional Lua hooks on connect/disconnect and…
CUPS print jobs for forensics: the IPP control files in the spool (/var/spool/cups, macOS and Linux): who printed what, from which application and host, to…
Take custody of Windows child processes: exact handle inheritance, kill-on-close jobs, launches into another session's token, and SDDL-secured pipes. Not a…