██╗██╗ ██╗██████╗ ██████╗ ███████╗ ███╗ ███╗
██║██║ ██║██╔══██╗██╔════╝ ██╔════╝ ████╗ ████║
██║██║ ██║██║ ██║██║ ███╗█████╗ ██╔████╔██║
██ ██║██║ ██║██║ ██║██║ ██║██╔══╝ ██║╚██╔╝██║
╚█████╔╝╚██████╔╝██████╔╝╚██████╔╝███████╗ ██║ ╚═╝ ██║
╚════╝ ╚═════╝ ╚═════╝ ╚═════╝ ╚══════╝ ╚═╝ ╚═╝
$ run judge.sys
> load core.module ............... 100%
> mount /docket .................. 16 repos
> verify chain ................... 1,704 commits · signed
> uplink ......................... established
INCOMING TRANSMISSION — MATTHEW J.
builds the infrastructure AI agents actually run on:
memory they can trust · tools they must earn · compute they can schedule
I build open-source infrastructure for AI agents, with a focus on trusted memory, scoped permissions, and systems people can inspect and control.
My projects explore how agents remember, use tools, coordinate work, and run on local compute. That includes BrainConnect, AgentConnect, and Decima, built around a belief that useful autonomy needs clear boundaries and accountable decisions.
I work across Python, Rust, and TypeScript, with interests spanning local AI, cybersecurity, and hands-on learning. Alongside agent infrastructure, I build CTF challenges, incident-response exercises, and tools that help people learn to work with AI.
I learn by building, testing, and sharing what I discover. This GitHub is where that work takes shape.
001 · Decima
An agent-native operating system — four verbs over one signed append-only log,
where state is a fold and authority is a held object.
Python event-sourcing capability-security · 625 commits · 1,262 tests + Playwright e2e
002 · AgentConnect
Control plane for managed coding agents — tasks, artifacts, reviews, audits, handoffs.
Verified driving a real
claude agent end-to-end; an auth-bypass bug found, fixed, retested.
Python Apache-2.0 · 9 packages · ~1,500 tests
003 · BrainConnect
Human-gated trusted memory for agent systems — agents propose, humans promote.
Scoped claims, provenance, contradiction, supersession. Retrieval can never widen trust.
Python MCP Apache-2.0 · 951 tests · ★ most-starred on the docket
004 · CTFGenerator
AI-resistant CTF platform — deterministic, seed-based challenges grounded in real CVEs,
behind a full FastAPI + PostgreSQL control plane with 8-role RBAC and isolated build workers.
Python FastAPI PostgreSQL · 270 commits
005 · Operation Silent Ridge
A complete cooperative incident-response event for 10 teams — Autopsy, Wireshark, Cutter,
Wazuh, IRIS + CTFd, browser desktops via Guacamole, all Dockerized and drill-tested.
Currently shipping for a live late-October event.
> docket --archive · supporting planes & side missions
- Seam — minimal Rust runtime: orchestrator delegates to sandboxed workers, all authority through a capability broker
- Connect-Governance — deterministic decision kernel: pure
evaluate(), byte-replayable records, Ed25519 grants - ToolConnect — tool-governance decision point: Cedar policies, tamper-evident audit, MCP discovery
- ComputeConnect — local compute orchestration with default-deny privacy tiers over llama.cpp engines
- Connect-Control — server-rendered control-plane app over the Connect ecosystem
- Connect — ecosystem hub: architecture, ADRs, engineering standards
- OmniDM — AI dungeon master with a real rules engine; web, desktop, mobile, CLI + Discord/Slack/Matrix bots · MIT
- brainconnect-control-model — LoRA SFT on Qwen3-4B, adversarial-hardened, measured-lossless Q4_K_M CPU quant
- TheJudgeLadder — learn to work with AI from zero: five rungs, first chat to supervising agents
- CEI-Labs-Agent — beginner-friendly local CTF coach, Ollama-powered, teaches rather than solves
languages Python · Rust · TypeScript · Shell
agents MCP · event-sourcing · capability security · audit chains
inference Ollama · llama.cpp · LoRA SFT · Q4_K_M quantization
platform Docker · FastAPI · PostgreSQL · SQLite · GitHub Actions
security Wazuh · IRIS · CTFd · OIDC/PKCE · secret & injection scanning
If something on the docket helped you, fuel the next build:
> end of transmission
state is a fold · authority is held · judgment is human


