Infrastructure intelligence,
open by default.

A 34-module series on keeping a personal agent alive unattended: cron hygiene, context compaction, cost governance, sandboxing, secret policy, delivery health. Every module names the failure it prevents.

Curated list of what actually keeps a personal agent running — written from what broke. Built from data and validated in CI, so it cannot quietly rot.

Four runtime plugins: a proot sandbox that gives the terminal tool a workspace and nothing else, skill generation from real usage, deletion-first compaction, and reactions turned into verdicts.

Deterministic checks for scheduled agent jobs: did it run, did it succeed, did the output arrive, is the watchdog itself alive. No model, no network, exit codes a cron can act on.

One call to speak through several text-to-speech providers: key rotation, quotas, cooldowns, a monthly ceiling and a free fallback engine, so a voice never depends on one vendor.

Local control plane for autonomous coding agents: contract-scoped missions with explicit file boundaries, command policy, evidence capture, scope ledgers and replayable event logs.

Blood pressure and body weight into one local SQLite file: Bluetooth SIG frame parsers, deduplication by construction, a watchdog that notices a silent device, and CSV out. No cloud, no vendor app.

Protocol notes for a blood-pressure cuff that only talks to its own app: GATT services, frame layout, what the vendor tool does, and what can be read without it.

The same for a Mi scale: advertisement format, the standard weight service, and why an encrypted MiBeacon device stays unreadable without the binding key.

The same for an AliveCor ECG: the BLE handshake, frame decoding, and what the official app adds on top of the raw signal.

Declarative YAML patching for MaxMind DB files — dry-run diffs and reproducible MMDB overlays you can version and review.

Security intelligence pipeline aggregating hostile IP infrastructure, abuse feeds, anonymizers and attack telemetry into fast runtime lookup databases.

Consensus GeoIP compiler — seeds prefixes from DB-IP Lite, merges location candidates from GeoLite2, IP2Location and more, into a single local IPv4 database.

Developer toolkit for inspecting, validating, diffing and explaining custom MaxMind DB files — understand exactly what's inside any .mmdb.

Production-safe updater for MaxMind DB files — verification, smoke tests, atomic swaps, rollback and Prometheus metrics for reliable GeoIP deployments.

Prefix-preserving IP sanitizer for logs — pseudonymize or anonymize IPv4/IPv6 while keeping subnet-level analytics and SIEM exports useful.

CI-native linter and normalizer for IP blocklists, allow-lists, CIDR feeds, ipset/nftables inputs and network policy datasets — catch bad ranges before they ship.

Open IP enrichment layer adding CIDR, ASN, cloud, CDN, crawler, Tor and VPN-adjacent context — with source provenance and confidence scoring.

Schema-driven CSV ↔ MMDB bridge for custom IP intelligence datasets — turn tabular data into MaxMind DB files and back, on a defined schema.

Daily route-security snapshot analyzer for BGP RIB dumps and RPKI VRP JSON — track ROA coverage, invalids and origin changes over time.

Browser-only Tor relay intelligence: collects public relay data hourly, stores compact snapshots in-repo and renders a dashboard — no database, no backend.

Interactive crawler IP intelligence dashboard covering search, AI and user-triggered fetchers — verify Googlebot, GPTBot and friends against published ranges.

Discovers RFC 8805 geofeeds from public RIR data, downloads and validates every row, adds provenance, checks BGP visibility in bulk, and publishes a clean dataset.

Public ASN infrastructure signal aggregation for VPN overlap, Tor visibility, public-feed exposure and defensive network analytics.