I build production multi-agent LLM systems and the event-driven backends behind them.

Self-hosted Go LLM gateway with a correctness-gated cache and per-run cost attribution

Self-hosted LLM gateway in Go that speaks OpenAI's Chat Completions and Embeddings wire format, plus Anthropic's Messages API, in front of OpenAI, Anthropic, Gemini, AWS Bedrock and any OpenAI-compatible server. One binary carries a three-layer response cache whose near-duplicate hits must pass non-configurable correctness gates, per-tenant virtual keys with Decimal budgets and Redis-backed rate limits, regex guardrails, and OpenTelemetry spans that attribute cost to an agent_run_id. A separate Python CLI, evals, scores agent outputs with Wilson intervals and an opt-in two-judge panel. 23 gateway releases through v0.20.0 (2026-10-15); solo-maintained.

Approve one exact MCP tool-definition digest; the gateway lists only tools that match it

Go control plane against MCP tool poisoning by rug pull. It crawls each upstream MCP server, versions every tool definition by the SHA-256 of its RFC 8785 canonical JSON (`_meta` included), and lets a named person approve one exact digest. It runs as agentgateway v1.6.0's ExtMCP processor, so a tool is listed only while its live digest still equals the approved one, and a call is denied whenever the evidence is missing or disagrees. Every decision lands in a hash-chained SQLite audit log, and since v0.4 human decisions are signed with OpenSSH keys. Single-tenant, CLI-only, pinned to one gateway version, one author.

Fail-closed query-cost guardrails for AI agents on BigQuery, Snowflake and Databricks

A single-process stdio MCP server that prices a SQL statement before an AI agent runs it: BigQuery dry run (PRECISE), Snowflake EXPLAIN (UPPER_BOUND), Databricks EXPLAIN COST (HEURISTIC). It refuses to execute when the estimate exceeds the caller's cap or when no comparable figure exists. Four tools, a schema-enforced accuracy tier on every estimate, read statements only by default, and results capped at 1000 rows and 8 MiB and labelled untrusted data. Ten PyPI releases in 37 days, the last three remediating a security audit, with SLSA provenance and a hash-pinned build. Solo-maintained; one GitHub star.

Claude Code mod: one press rewrites a vague prompt from your CLAUDE.md and skills

A Claude Code mod, an in-process hooks module rather than a skill, that draws an Enhance / Send / Undo band above the prompt. One press sends the draft, the instruction files the session already loaded and the skill listing to a three-rung model chain with per-rung fallback, highlights the inserted words, and prints the call's cost on the band. Nine post-call guards refuse rewrites that add commands, invent paths or flip intent, and optional session and day spend caps sit on a per-writer ledger. MIT, 178 commits at v0.6.0, installed from GitHub as a plugin marketplace; not on npm.

Recreation of Stripe's four-tier rate limiter and load shedder, as a Go sidecar and core

Open-source recreation of the four-tier rate limiter and load shedder Stripe described in a 2017 engineering post: a per-key token bucket, a per-key concurrent-request cap, a fleet-wide shedder that reserves capacity for critical traffic, and a sidecar-local in-flight shedder. Thin Go and Python HTTP clients call a per-host Go sidecar, which forwards checks over gRPC to a central Go core that keeps shared state in Redis through atomic Lua scripts. Every tier has a shadow mode. One author, 22 releases through v2.13.1 (2026-09-02).

Offline code intelligence engine — Tree-sitter indexing, hybrid BM25+vector+grep search

Zero-infra code intelligence — Tree-sitter AST indexing + up to 7-leg RRF retrieval (BM25 + vector + grep + SPLADE + multi-granularity; the graph-BFS leg is opt-in and measured harmful) + knowledge graph (Louvain community detection, Pyvis). MCP server. 4,435 unit test functions on main at v3.4.3. Works offline with no API key.

Production intelligence layer for 5,000+ feature flags.

Self-hosted feature flag intelligence with blast-radius gating, circuit-breaker auto-rollback, causal incident correlation ("What Changed?"), and Knight Capital–style tombstoning. Go + Python + TypeScript polyglot.

Agentic-intelligence framework for Claude Code.

Command-driven multi-agent orchestration for Claude Code — 221 commands, 164 subagents (152 adapted from VoltAgent, MIT), 354 skills, and cost-aware model routing. Ships as npx mindforge-cc.