Seven tools behind that work are open source: jig-sh, epicd, jig-skills, runledger, postgres-test-harness, runlimit, and syrup-rail. I’m taking audit work, but no new development projects in 2026.
An iOS merge puzzle. Opposite charges fuse, while matching cores merge until they annihilate. Slide cores and set up chain reactions.
A B2C CRM for call centers, combining a sales pipeline, e-sign agreements, Twilio Flex routing, a branded customer portal, and AI-driven call QA. HOCR can go live in days.
An AI interrogation mystery for iOS. Six suspects think, remember, and lie on their own. Question them by voice or text and find the killer before the room turns on you.
Zero-knowledge, end-to-end encrypted task management for teams. The browser encrypts tasks, comments, delegations, attachments, and notes before upload.
Zero-knowledge Git hosting. The client encrypts code before push and decrypts it after pull; the server stores ciphertext. HushGit staff cannot read repository contents, and a server breach exposes ciphertext rather than plaintext.
Menstrual cycle tracking for iOS. Cycle data, symptoms, and notes stay on the device by default, encrypted with AES-256-GCM. PrivaCycle has no developer-operated server. Encrypted iCloud sync, decoy mode, and a panic-erase code are available.
A multi-site landing-page engine for A/B tests, used in-house and on client engagements. One Rust service routes each request by Host header, renders the matching Tera template, assigns a sticky variant cookie, and writes events to TimescaleDB. A same-origin React admin shows experiments and results; the server runs a chi-square test for homogeneity. Declaring a winner makes its template the site’s runtime default and stops further assignment for that experiment.
├─ multi-site routing Host header → template + asset bundle
├─ variant assignment weighted, sticky per-visitor cookie
├─ conversion tracking first-party JS · cookie-validated
├─ statistical analysis chi-square · p-value · lift over control
├─ winner publication promote variant to runtime default
├─ admin console React UI · Basic Auth · same-origin API
└─ preview links signed URLs survive process restartsKeep coding agents on contract. Jig turns any repository into an operating environment for coding agents. It generates agent-facing context, a typed command contract and MCP runtime, then records command results as append-only receipts that can back completion gates. An open status-provider protocol joins repository, harness, and external inspection state. A stable local development proxy survives port changes, while a sealed project vault brokers selected secrets into child processes without putting them in the repository. jig update keeps the scaffolding current without overwriting project customizations.
├─ agent context repository map · conventions · prompt library
├─ typed contract stable commands across agents, machines, and CI
├─ MCP runtime tools expose the same repository contract
├─ receipts + gates append-only evidence · verifiable completion
├─ status providers versioned external observations · aggregate view
├─ development proxy stable local hostnames across port changes
├─ sealed vault encrypted secrets · brokered child processes
└─ template sync init · adopt · update without clobbering changesDurable Codex orchestration for dependency-safe Beads epics. Epicd claims one ready task at a time, gives it to an implementation agent, and sends the diff through an independent review and bounded repair loop. Approved work is committed locally, then a fresh verifier checks that exact revision before the task closes. SQLite preserves the lifecycle, agent sessions, findings, repair budget, and Git revisions so interrupted runs can resume. It supports direct Codex SDK threads and visible Herdr sessions, and never pushes.
├─ select dependency-safe task from the Beads graph
├─ claim atomic ownership before implementation
├─ implement persistent Codex session · scoped contract
├─ review + repair independent reviewer · bounded fix passes
├─ commit approved application tree · local only
├─ verify fresh agent checks the exact commit SHA
├─ close task closes only after verification
└─ resume SQLite state · SDK/Herdr cold handoffA marketplace of focused engineering skills for Codex. Six plugins cover Rust, Swift, and TypeScript refactoring and review; independent multi-model review; self-contained implementation plans; and evidence-backed privacy audits for zero-knowledge and end-to-end encrypted products. Each skill targets one concern rather than running a broad generic pass. The same compatible skill sources can also be installed directly into Codex or Claude Code.
├─ jig-rust refactor · architecture · async · security · SQL · tests
├─ jig-swift Swift 6 · SwiftUI/UIKit · concurrency-aware cleanup
├─ jig-typescript simplify · types · React hooks, state, APIs, tests
├─ jig-review independent Claude, Codex, and Cursor review passes
├─ jig-exec-plans write · improve · delegate checked-in ExecPlans
└─ jig-privacy-audit claims · data flow · crypto · leakage · retestingA durable PostgreSQL-backed job queue and workflow engine for Rust. Applications supply concrete handlers and a database; Runledger provides a persistent queue, lease-based workers and retries, cron schedules, and workflow DAGs with dependencies, fan-out/fan-in, results, continuation, replay, and external human or API gates. State lives entirely in PostgreSQL, so there is no separate broker to operate. A read-only terminal UI gives operators a live view of queue metrics, jobs, workflows, and definitions.
├─ runledger-core public contracts, traits, types
├─ runledger-postgres SQLx persistence · queue · DAG
├─ runledger-runtime supervisor · worker · scheduler · reaper
├─ runledger-tui read-only queue + workflow operator console
└─ runledger-test-support ephemeral PostgreSQL · scoped test utilitiesA fast, framework-neutral PostgreSQL integration-test harness for Rust. It starts a PostgreSQL 18 container or connects to an existing server, applies each distinct migration set once, caches the resulting template by fingerprint, and clones a fresh isolated database for every test. Applications keep their normal SQLx, Diesel, or tokio-postgres clients and migration entry points. Concurrent tests get separate databases, while bounded connection and cleanup work keep the suite predictable.
├─ server owned PostgreSQL 18 container or external host
├─ fingerprint content-addressed schema + migration identity
├─ template migrate each distinct schema once
├─ clone fresh isolated database per concurrent test
├─ client boundary SQLx · Diesel · tokio-postgres · custom
├─ prewarm optional bounded pool of pristine clones
└─ cleanup safe drop · backpressure · failure reportingA framework-neutral Rust library for keyed rate limiting. Runlimit provides anchored fixed windows in bounded process memory or across PostgreSQL-backed replicas, plus a process-local GCRA backend for continuously replenished quotas. Atomic multi-key checks prevent partial quota consumption, HMAC-derived subject keys keep raw identities out of storage, and shadow mode lets a policy warm up before enforcement. Optional crates add Axum/Tower admission middleware and typed HTTP rate-limit fields.
├─ runlimit-core policies · HMAC subject keys · decisions
├─ runlimit-memory bounded fixed-window + GCRA storage
├─ runlimit-postgres replica-safe SQLx/PostgreSQL backend
├─ runlimit-axum caller-controlled Axum/Tower middleware
└─ runlimit-http framework-neutral RateLimit fieldsA reusable Rust toolkit for subscription billing. Syrup Rail models enrollment, snapshotted terms, entitlements, cancellation, discounts, automatic renewal, dunning, and terminal non-payment without taking over a host application’s authentication or fulfillment. Its PostgreSQL layer provides the canonical schema and SQLx orchestration, including fail-closed transaction boundaries and replay-stable events. Optional NMI crates add a lifecycle adapter and a bounded, retry-free raw HTTP client.
├─ syrup-rail domain types · lifecycle policy · entitlements
├─ syrup-rail-postgres PostgreSQL 18 schema · SQLx orchestration
├─ syrup-rail-nmi NMI gateway · lifecycle-evidence adapter
└─ syrup-rail-nmi-client bounded, retry-free raw NMI HTTP clientAn experimental portable secrets vault exploring fresh approval for each governed action. The design lets an encrypted vault travel with a Git repository while private identities stay outside it. Governed access binds signed approvals and witness contributions to a specific item revision and action. A Linux CLI works with a self-hosted juryd witness daemon. Pre-alpha and unsuitable for real secrets; it has not had independent security review. Source-available and free to self-host under Elastic License 2.0, which restricts third-party hosted or managed services exposing a substantial set of jury’s features.
├─ portable vault encrypted artifact · versioned in Git
├─ private identity local storage outside the repository
├─ approval signed decision for an exact action
├─ witness contribution to a governed open
└─ receipt verifiable signed decision evidenceI use coding agents to write the code, but I remain responsible for the design, review, and result. Based on twenty years of engineering work, I decide what ships and what goes back through the loop.
For teams already using coding agents but getting stuck at review, scoping, or handover. I inspect the tools, prompts, evals, models, and review process, then change the weak parts and document the resulting workflow.
I build and test landing pages, run paid campaigns on Google, LinkedIn, and Meta, and report spend and results each week. Client landing pages run on LandingAtlas, my in-house A/B testing engine.
$ find frontend/ admin-panel/ -iname "*.tsx" | xargs cat | wc -l
78980
$ find crates/ -iname "*.rs" | xargs cat | wc -l
377899
$ git log --reverse --format="%ai" | head -1
2026-02-13 18:24:49 +0100 # first commit
$ date
Sat Apr 25 22:40:10 CEST 2026We bet on Banana Pancakes’ agentic development approach and got the work of five engineers in the first month — with the judgment to tell us when we were wrong. Startup speed, senior taste, zero hand-holding. Hire them before someone else does.
I’ve led software teams for twenty years. Agents changed who types the code, not who chooses the design, sets the checks, and rejects bad work. Shipping is faster; responsibility still sits with the engineer.
I use types to catch mistakes early and familiar infrastructure until a constraint rules it out.
45 minutes to understand the business, the team, and what needs to change. I’ll tell you if I’m the right shop and, if not, who is.
Scope, cost, and timeline on one page. If I’m wrong about scope, I say so before you sign.
Weekly demos, a shared Linear board, and direct answers from me on Slack. No status-update theatre, no middleman.
When the work is finished, I document it, then either leave or stay on a lighter retainer. Your call, not mine.
Use the form for product questions, short workflow audits, or the waitlist for my next development opening. I’m not taking new development projects in 2026. Write in Czech or English; I reply within one working day.