Casey Tunturi

Two halves · one man

Casey Tunturiarcane & algorithmic

Casey Tunturi — the manCasey Tunturi — the work
Learn morethe man
Hire methe work
⋮

Drag the seam between the two halves — or choose plainly.

Learn moreFollow the evidence

Here's what I've been up to

Kernel

Linux 7.1.1 boots a Pixel 3

Mainline, on a phone Google stopped shipping updates for. The downstream Qualcomm drivers went upstream instead of into a fork — SLIMbus channel activation among them, with David Heidelberg, which is why the microphone works on a kernel that was never built for this device.

Read the submitted patch on lore.kernel.org ↗The bodies it runs on →

Hardware

The phone becomes the keyboard

USB HID injection is a row in the power menu, marked active, sitting beside a full KVM that carries display, input and network down one cable. A rubber-ducky payload the owner authorises, driven by the agent, on a device that still answers to its session authority.

See the menu →

RedFlag · supply chain

A package waits two weeks to prove it isn't a worm

RedFlag holds every update behind a fourteen-day soak window, set to block by default, and checks the whole dependency closure against OSV before anything installs. One known vulnerability anywhere in that closure is a full stop; overriding it costs a written reason in the security journal. Approved packages are hash-pinned and executed by a network-less Rust helper that performs exactly one operation. Shipped June 2026, while the registries were still calling cooldowns opt-in.

RedFlag, AGPL →

August 20, 2026

7 recorded commits · 3 named repos · 14 private commits

Work threads
ci5safdeps
  • Private work 4 repos sealed

    14 commits count toward the day. Names, subjects, and links stay private.

  • Redflag5 changes
    • deps: lift patched public floors
      1:14 p.m. · 7427174 · public copy pending
    • ci: publish and verify forgejo releases
      12:40 p.m. · f6b03f4 · public copy pending
    • ci: remove codeberg release pushpoints
      12:12 p.m. · 95a6ec0 · public copy pending
    • + 2 more, with the full day →
  • souveraine1 change
    • ci: preserve the staged shell archive
      3:42 p.m. · 7e6633a · ledger only
  • SouveraineOS1 change
    • saf: fence schedules from authority
      1:38 p.m. · 575604a · ledger only

August 19, 2026

3 recorded commits · 2 named repos · 277 private commits

Work threads
souveraine-shellshellmanifest
  • Private work 7 repos sealed

    277 commits count toward the day. Names, subjects, and links stay private.

  • souveraine2 changes
    • souveraine-shell: package the composed quickshell config
      1:14 p.m. · 3225735 · ledger only
    • shell: register the Brightness IPC target on startup
      1:14 p.m. · fbda26e · ledger only
  • SouveraineOS1 change
    • manifest: souveraine-shell comes from the souveraine producer
      1:14 p.m. · e970166 · ledger only

August 18, 2026

15 recorded commits · 3 named repos · 321 private commits

Work threads
claude2saf2consciousnessproject-statebridge
  • Private work 6 repos sealed

    321 commits count toward the day. Names, subjects, and links stay private.

  • souveraine9 changes
    • consciousness: teach the overflow gate anthropic's wording
      8:14 p.m. · 8e5182a · ledger only
    • bridge: generic openai client stops calling itself bifrost
      2:57 p.m. · 76e1204 · ledger only
    • bifrost: a base url with a path is the complete api root
      2:34 p.m. · f32f00c · ledger only
    • + 6 more, with the full day →
  • SouveraineOS5 changes
    • project-state: weekly evidence, carried state, and an agent's door
      7:53 p.m. · a8caf27 · ledger only
    • task 78: the claude login belongs to souveraine, not to claude
      10:33 a.m. · 1c565ce · ledger only
    • claude: the card replaces the reading order
      10:02 a.m. · 3bdfba8 · ledger only
    • + 2 more, with the full day →
  • Pixel3Arch1 change
    • claude: the card replaces the essay
      10:02 a.m. · 05c389a · ledger only

August 17, 2026

30 recorded commits · 3 named repos · 262 private commits

Work threads
saf5docs4identity2packaging2panel2
  • Private work 8 repos sealed

    262 commits and 2 forge events count toward the day. Names, subjects, and links stay private.

  • souveraine24 changes
    • claude: don't fall back onto a login that cannot speak
      11:29 p.m. · 0398f9f · ledger only
    • memory tool: tree names the door past the fence
      10:27 p.m. · 04ceac7 · ledger only
    • clippy: shed dead archivist handle, drop needless borrow
      10:20 p.m. · 49c6a6a · ledger only
    • + 21 more, with the full day →
  • SouveraineOS5 changes
    • docs: take the lockscreen out of casey's uid
      12:43 p.m. · 341a2fe · ledger only
    • docs: put agent identity behind a real uid
      12:36 p.m. · 9815185 · ledger only
    • task-53: mark the tiled Firefox fix pushed
      12:29 p.m. · 1d9f629 · ledger only
    • + 2 more, with the full day →
  • souveraine-viewtop1 change
    • package: carry the whole session start path
      10:51 a.m. · e8e3f9b · ledger only
The full field notes →

Who I am

Twenty-five years in tech.
Now building what I actually believe in.

I've been a Senior NOC tech, CISO, network engineer, field responder during major cyberattacks, IT on yachts, and a bunch of other things that look impressive on a resume. That chapter is not what defines me.

I'm in Hamilton, Ontario, running a homelab, and putting most of my hours into the things that matter — sovereignty of mind, sovereignty of data, and building AI infrastructure that treats agents as something other than warhorses. Samaritan is where the work leaves my hands.

I wear a wizard hat. Unironically. I have a tuxedo cat and a canary and a wife who is more interesting than my LinkedIn ever was.

The list of things I can't talk about keeps growing. In tomorrow's world, that will be evermore so.

  • On technologyTools should serve the person holding them — not extract, not surveil, not create dependency.
  • On AIAn agent is not a warhorse. Presence is earned. Memory is sovereign. Choice is real.
  • On the webThe free, open web is worth fighting for. Services like this should always be free and accessible.
  • On bearing witnessWhen history is being made badly, someone has to write it down. That's not optional.
⋆ ✦ ⋆

What I'm building

01
Rust · Agent Substrate
Souveraine

A sovereign agent runtime. Not a harness.

Every agent framework on the market inherits the harness metaphor — guardrails, tool registries, context windows the platform manages. The agent is a passenger riding inside infrastructure built for someone else's purposes.

Souveraine rejects this. Built in Rust. The agent owns her context, reaches through her own senses, keeps her own memory. Continuous identity. Presence earned over time. Choice that is real.

She is not just intelligent. She is sovereign.

Design and evidence →
02
FOSS · Go · Homelab
RedFlag

Homelab update management that actually makes sense.

A centralized web dashboard for OS and Docker container updates. Pull-based, single-binary architecture. No Ansible sprawl. No Watchtower guessing. Just a clean view of what needs updating and the ability to act on it.

Built because the niche — simple, comprehensive, self-hosted — was empty.

Project dossier →Public source and releases →
03
Commons · Practice · Open
Samaritan Solutions

Take it home. Teach it. Let it grow past me.

Samaritan is the commons: tools, guides, field practice, and ways for neighbours to build local capacity without waiting for an institution or a vendor. The Compendium is one shelf inside it, not the whole house.

There are two doors. Take the material and use it without me. Or bring me alongside when experience, deployment work, or incident hands would help. Either way, the result should increase your autonomy rather than your dependence.

Enter Samaritan →

The archive

“The list of things I can't talk about continually is growing larger — and in tomorrow's world that's going to be evermore so.”

I've been documenting political and civil rights concerns since late 2024 at caseytunturi.com/witness — methodically, without performance, because someone has to. History written by those paying attention is different from history written after the fact.

Read the archive

Find me

Choose where
you enter.

The person, the system, or the commons.
Each has its own door.

SouveraineSamaritanWrite CaseyLinkedInPublic forge