A generic circuit breaker implementation with configurable failure thresholds, timeout durations, and three states (closed, open, half-open). It can be extracted and reused in any TypeScript project requiring resilience against external service failures. Demonstrates non-obvious skill in state machine design and exponential backoff.

A capability envelope system that enforces authorization with delegation, reduction checking, and cost/token/concurrency limits. It is self-contained and implements a pure, synchronous, deny-by-default policy model. Could be extracted as a standalone authorization library for any application requiring fine-grained capability-based security.

A crypto-based secure random ID generation utility that produces IDs for various entity types (agents, sessions, tasks, etc.) using Web Crypto API. It is a small, isolated module that can be dropped into any Node.js or browser project requiring cryptographically secure identifiers. Demonstrates proper use of crypto primitives and entropy management.

A pattern-based AI defence engine that detects prompt injection, jailbreak attempts, and data exfiltration using regex patterns and heuristics. It is self-contained and can be extracted as a standalone security middleware for any LLM-powered application. Demonstrates non-obvious skill in adversarial pattern detection and fail-closed degradation.

A cross-worktree repository identity resolution service that maps Git worktrees to their parent repository. It is isolated and can be reused in any tool that needs to identify the canonical repository for a given working directory, even when using Git worktrees. Demonstrates deep understanding of Git internals and edge cases.

A dual-backend run store (File and InMemory) for persisting competition runs in a game theory arena. It implements a clean interface pattern that can be extracted for any application needing interchangeable storage backends. Demonstrates proper abstraction and separation of concerns.

An Ed25519-based helper manifest verification system that ensures the integrity of downloaded helper scripts. It is self-contained and can be extracted as a standalone verification library for any project that needs to cryptographically verify downloaded assets. Demonstrates proper use of digital signatures and key management.

A funnel state persistence module that uses atomic write-then-rename pattern to safely persist user state to JSON files. It is isolated and can be reused in any application requiring crash-safe file-based state storage. Demonstrates non-obvious skill in handling file system consistency without a database.