Posts
Each post is the write-up of one project: what it does, how it works, and the problems that took the most thought.
-
Picking the few photos that teach a face recognizer the most
winnow picks a few maximally different face crops from Immich for Frigate's face recognition, using ArcFace embeddings, K-Medoids and farthest-point sampling.
-
A TrueNAS backup patch that rebuilds itself every boot and refuses to half-apply
An overlayfs patch that adds Backblaze B2 and S3 to TrueNAS's built-in restic backups, survives reboots and updates, and stands down when TrueNAS changes.
-
Tendril: turning one multi-GPU machine into several gaming PCs
A Rust appliance OS that gives each GPU in one box its own Windows or SteamOS VM, installs the guests unattended, and rolls back bad updates.
-
A command classifier should only run when nobody can be asked
opencode-guard adds permission modes, a static shell safety floor, credential guards and redaction to opencode, and asks a model only when no person can be.
-
Every agent session leases its model from one broker
opencode-broker leases a model to every opencode session, turn by turn, against shared subscription windows, local GPU slots and privacy lanes.
-
Running coding agents unattended: an instruction is not a security boundary
A private control plane that syncs agent config across machines and runs scheduled agent jobs inside permission envelopes they cannot widen.
-
The worst agent incidents are the ones nobody narrates
An unattended agent reads my own coding-agent transcripts, decides which moments were real incidents, and files them in a ledger, exclusions included.