Our open source projects

Durable webhook gateway with Caddyfile-style config. Receive, queue, deliver - with HMAC auth, retries, DLQ and hot reload. Single binary, zero runtime dependencies.

• At-least-once delivery with SQLite/WAL or PostgreSQL
• Pull, push, SSE and exec delivery modes
• HMAC-SHA256 with replay protection and secret rotation
• Prometheus metrics, OpenTelemetry tracing and MCP server

Secret manager for machine identities: KV secrets, gap-free access auditing and path-based authorization. Envelope encryption with master key rotation, HTTPS API and CLI - built for build and deploy pipelines.

• Envelope encryption with master key rotation
• Fail-closed, hash-chained audit trail
• Path-based policies with separated capabilities
• SDK and runner for services that only read environment variables

C# code generator for stored procedures. Automatically generates strongly-typed models and DAOs from SQL stored procedures with IntelliSense support and full type safety.

• Automatic model generation from stored procedures
• Full type safety and IntelliSense support
• .NET Core compatible
• Saves time on data layer development

Context engine for AI agents with policy-compliant enterprise knowledge. MCP-native with 23 tools, OPA policy enforcement, PII detection and EU AI Act compliance toolkit. Self-hosted, GDPR-ready.

• OPA-based access control by agent roles
• PII detection and HMAC-protected pseudonymization
• Three-stage relevance pipeline with cross-encoder reranking
• EU AI Act compliance for Articles 9-15

Offline-first PWA for amateur radio operators: QSO logging, interactive map with clustering, statistics, ADIF/CSV/JSON import & export, callsign lookup and PDF reports.

• Works entirely without internet after first load
• Interactive map with marker clustering and locator calculation
• ADIF 3.1.4, CSV and JSON import/export
• Callsign lookup via QRZ.com and HamQTH

Distributed job scheduling platform built in Rust. Croniqfile DSL, pull-based runners, React dashboard, MCP server and failure alerts - as a single binary or container, SQLite by default.

• Croniqfile DSL with calendar rules and timezone support
• Pull-based runners for independent scaling
• Dead letter queue with replay and failure alerts
• MCP server with 31 tools for AI assistants

Governance-as-Code for AI-generated infrastructure. Define, verify, and manage infrastructure policies with a declarative approach. Ensures secure and compliant AI automation.

• Policy-based infrastructure governance
• Declarative configuration approach
• Integration with AI automation
• Fully open source and self-hosted