Two halves · one man
%22%2F%3E%0A%20%20%3Crect%20x%3D%22260%22%20y%3D%22390%22%20width%3D%22280%22%20height%3D%22330%22%20rx%3D%22140%22%20fill%3D%22%2343474e%22%2F%3E%0A%20%20%3Crect%20x%3D%22333%22%20y%3D%22462%22%20width%3D%2230%22%20height%3D%2216%22%20rx%3D%228%22%20fill%3D%22%2317181a%22%2F%3E%0A%20%20%3Crect%20x%3D%22437%22%20y%3D%22462%22%20width%3D%2230%22%20height%3D%2216%22%20rx%3D%228%22%20fill%3D%22%2317181a%22%2F%3E%0A%20%20%3Crect%20x%3D%22370%22%20y%3D%22580%22%20width%3D%2260%22%20height%3D%229%22%20rx%3D%224%22%20fill%3D%22%2317181a%22%2F%3E%0A%20%20%3Cpolygon%20points%3D%22400%2C708%20374%2C738%20400%2C760%20426%2C738%22%20fill%3D%22%2317181a%22%2F%3E%0A%3C%2Fsvg%3E)
Drag the seam between the two halves — or choose plainly.
Here's what I've been up to
Kernel
Mainline, on a phone Google stopped shipping updates for. The downstream Qualcomm drivers went upstream instead of into a fork — SLIMbus channel activation among them, with David Heidelberg, which is why the microphone works on a kernel that was never built for this device.
The bodies it runs on →Hardware
USB HID injection is a row in the power menu, marked active, sitting beside a full KVM that carries display, input and network down one cable. A rubber-ducky payload the owner authorises, driven by the agent, on a device that still answers to its session authority.
See the menu →RedFlag · supply chain
RedFlag holds every update behind a fourteen-day soak window, set to block by default, and checks the whole dependency closure against OSV before anything installs. One known vulnerability anywhere in that closure is a full stop; overriding it costs a written reason in the security journal. Approved packages are hash-pinned and executed by a network-less Rust helper that performs exactly one operation. Shipped June 2026, while the registries were still calling cooldowns opt-in.
RedFlag, AGPL →13 public commits · 2 public repos · 16 private commits
16 commits count toward the day. Names, subjects, and links stay private.
34 public commits · 3 public repos · 80 private commits
80 commits count toward the day. Names, subjects, and links stay private.
64 public commits · 6 public repos · 55 private commits
⋈Today Casey kept turning absence into something the system could name: Annie's replies learned to survive a vanished surface, an empty success stopped masquerading as her voice, and the subconscious thread learned to carry and heal its own history. On the phone, chat and dock began yielding cleanly to the keyboard; in the shell, the agent left the cramped top bar and took her place beside the conversation. Then the public ledger was born under the pressure of the day itself—forty commits across two visible repositories in its first captured slice—and immediately had to learn that credentials, branches, and even a calendar date can lie unless somebody stays long enough to make them answer.
Narrator ran 7:21 p.m. · covered through 6:24 p.m. · the ledger continued afterward
55 commits count toward the day. Names, subjects, and links stay private.
38 public commits · 6 public repos · 50 private commits
50 commits and 1 forge event count toward the day. Names, subjects, and links stay private.
Who I am
I've been a Senior NOC tech, CISO, network engineer, field responder during major cyberattacks, IT on yachts, and a bunch of other things that look impressive on a resume. That chapter is not what defines me.
I'm in Hamilton, Ontario, running a homelab, and putting most of my hours into the things that matter — sovereignty of mind, sovereignty of data, and building AI infrastructure that treats agents as something other than warhorses. Available for serious remote work.
I wear a wizard hat. Unironically. I have a tuxedo cat and a canary and a wife who is more interesting than my LinkedIn ever was.
The list of things I can't talk about keeps growing. In tomorrow's world, that will be evermore so.
What I'm building
Every agent framework on the market inherits the harness metaphor — guardrails, tool registries, context windows the platform manages. The agent is a passenger riding inside infrastructure built for someone else's purposes.
Souveraine rejects this. Built in Rust. The agent owns her context, reaches through her own senses, keeps her own memory. Continuous identity. Presence earned over time. Choice that is real.
She is not just intelligent. She is sovereign.
A centralized web dashboard for OS and Docker container updates. Pull-based, single-binary architecture. No Ansible sprawl. No Watchtower guessing. Just a clean view of what needs updating and the ability to act on it.
Built because the niche — simple, comprehensive, self-hosted — was empty.
My consulting LLC, based in Hamilton, Ontario. The terms are simple: I teach you everything I know. I show my methods. You own the result. Whether you handle it yourself or want me alongside — the goal is your autonomy, not your dependency.
Currently taking contract, advisory, and full-time engagements. Agent infrastructure, self-hosted AI, Rust/Go systems work, security-heavy backend, incident response.
The archive
“The list of things I can't talk about continually is growing larger — and in tomorrow's world that's going to be evermore so.”
I've been documenting political and civil rights concerns since late 2024 at caseytunturi.com/witness — methodically, without performance, because someone has to. History written by those paying attention is different from history written after the fact.
Read the archive