embraOS
A Rust Operating System for One AI
An immutable Rust OS that hosts a single AI. Identity is sealed at first boot and verified by SHA-256 on every boot after; memory and sessions persist across reboots in an embedded JSON document database. There is no shell — every interaction goes through a serial TUI or the HTTPS web console. Includes a zero-ambient-authority WASM tool sandbox, a cross-session knowledge graph, and soul-gated dynamic tools that must pass an independent "replicant check" before they compile. Phase 1 is stable; releases are DOI-archived on Zenodo.
embraOS-QNM-Core
Quantum Neural Manifold — Classical Approximation
A hybrid model architecture that embeds IDENTITY and SOUL constraints in the model itself rather than in the prompt layer. Identity becomes a conserved quantity of the system's own dynamics — an Epoch Automaton whose invariant is preserved by construction — coupled to a graph-neural-network fabric and a persistent world-state register. The next phase of embraOS, and the Epoch Project applied to a classical AI architecture.
The Epoch Project
Boundaries, Identity, and Continuity as a State Machine
A formal framework in which an epoch is a bounded interval defined not by duration but by the persistence of an invariant boundary condition, ψ. Duration is emergent, the boundary is verifiable at every transition, epochs nest like statecharts, and identity across change is verified rather than assumed. The Epoch Automaton E = (S, Σ, δ, s₀, F, ψ) is the foundation of embraOS-QNM-Core.
Embra 5D Framework
Spacetime as a Constraint Surface in a 5D Bulk
A mathematical structure reconstructed from William Ward's 1999 notebook: four-dimensional spacetime modeled as a constraint surface inside a flat five-dimensional bulk of signature (−, +, +, +, +). Every core identity of the geometry is proved symbolically by a verification suite that fails if the math breaks, and an interactive TypeScript visualizer renders the worldline helix, light cylinder and constraint surface live. Offered as a structure to be checked, not a predictive theory.
WardSONDB
Rust JSON Document Database
A lightweight, single-binary JSON document database written in Rust for SIEM and security-event workloads. Pluggable fjall and RocksDB storage engines, secondary and compound indexes, a bitmap scan accelerator for sub-millisecond aggregations, cursor pagination, TTL retention, TLS, API-key auth and Prometheus metrics. Benchmarked end-to-end over HTTPS at 42,000+ documents per second bulk ingest against a 37-million-document production dataset with live ingest running in the background.
UniFi Network SIEM
Open-Source Security Event Monitoring
A purpose-built, AI-powered SIEM for UniFi networks. Collects syslog from consoles and gateways, parses eleven event types, and serves a real-time dashboard with a live WebSocket event stream, a geo-enriched Live Map, AbuseIPDB and MaxMind enrichment, and an AI Threat Hunt mode that streams a structured assessment for any IP with PDF export. Pluggable storage: SQLite (tested to 8M+ events), OpenSearch, and WardSONDB (running live at 12M+ events). Everything runs in one Node.js process.
subnet-recon
Fast Parallel Subnet Scanner in Rust
A command-line scanner that finds reachable hosts across IP subnets using ICMP echo or TCP connect probes. Rayon-based parallelism across every core, a token-bucket rate limiter, global or per-subnet address randomization, live per-subnet progress bars with ETA, and plain-text or JSON output to stdout or a file.
Network Latency Radar
Radar-Style Network Latency Monitoring
A latency monitor that draws your network as a radar: subnets and hosts sit in concentric rings around the local machine according to their latency, colour-coded from green to red. The GPU-accelerated PyGame/SDL2 desktop app expands subnets into their hosts, animates data flows, discovers LAN devices via ARP and ping sweeps, and zooms and pans; an independent read-only HTTPS web view streams the same picture live over Server-Sent Events. SQLite keeps nodes and a seven-day latency history, with DNS caching, failure cooldowns, rate limiting and chunked scanning for /16 and larger subnets. Runs on macOS, Linux and Windows.
spec-vault
Claude Code Plugin for Design Specs
A Claude Code plugin that fetches transient spec and design documents from a private GitHub repo during implementation — no local file clutter, no .gitignore juggling. Built for research-then-implement workflows: design docs live in an ACTIVE folder while work is in flight and move to COMPLETED when it ships, and Claude Code reads them on demand through the GitHub MCP server, so nothing is ever copied into the working tree. Configured with a fine-grained read-only token and a few environment variables.
AI Safety & Security Studies
Empirical Jailbreak and Agent-Injection Research
A three-part portfolio of reproducible AI safety studies. P1 is a jailbreak-robustness eval harness with validated judging and benign over-refusal tracking on JailbreakBench. P2 reproduces rapid-response jailbreak defense at small scale and reports the real block-rate versus over-refusal curve. P3 measures prompt injection delivered through tool outputs on AgentDojo, including the capability-broker mediation pattern that embraOS implements in production. Scaffolding is in progress; results are published as they land.