What I build

Arbiter Security

AI-native offensive security tools, built in Rust. Two products, each exposed as an MCP server so they plug directly into agentic workflows:

• Arbiter: web-application vulnerability detection across 52 vulnerability classes.
• Aletheia: binary analysis with vulnerability detection across 14 CWE classes.

Tightrope Tracker

A live dashboard of UK economic constraint, assembled from the Office for Budget Responsibility, the Office for National Statistics, the Bank of England, and the Debt Management Office, with a public methodology and a public codebase. A public API is available. Built for Looking For Growth UK, alongside fixingbritain.com; it has featured on ITV's Peston.

Security & AI tooling

• Narsil-MCP: a 90-tool code-intelligence server (v1.0.0), published on crates.io, Homebrew, and npm.
• Forgemax: a V8 sandbox for safe LLM code execution.
• Veilguard: a clean-room Rust rebuild of a whistleblower submission system, informed by the SecureDrop disclosure.
• Sanctum: supply-chain verification tooling.
• Krait: a self-evolving agent.

Verified reasoning

A running system for chain-of-thought reasoning that a proof assistant re-checks step by step, and its first case study: a machine-checked determination of the van der Waerden number W(3,3) = 27. Papers, certificate packages, and checksums.