The systems, and the reasoning behind them.

corerouter — a first-party routing stack in Rust

An edge routing stack with no unauditable components — DHCP, DNS, firewall, multi-WAN failover, traffic shaping and a transactional configuration plane, all first-party, with zero third-party runtime dependencies and a total footprint of about 15 MB.

Status In service on ARM64 hardware, serving live clients — Wi-Fi, DHCP, DNS, NAT and firewall. Current scope is IPv4 edge routing.

NorthStar — end-to-end encrypted conferencing for regulated organisations

Browser-based video conferencing where the media server never holds the keys — built for organisations whose legal team needs a better answer than "trust the vendor".

Status In pilot with design partners. End-to-end encrypted two-party calling and screen share, verified across desktop and mobile browsers. Multi-party is in development and ships as secure only when its cryptography is verified.

ChatForge — team messaging you host yourself

A self-hosted messaging platform for teams whose conversations should not live on someone else’s servers — real-time and complete enough to use, small enough to audit.

Status Phase 1 shipped and tested: the real-time messaging core — conversations, replies, reactions, presence, read state and attachments — running end to end on infrastructure you control.

Carrier Subscriber Edge with Closed-Loop Assurance

A broadband network gateway design that terminates subscriber sessions at scale, keeps convergence inside a hard budget, and streams the telemetry needed to detect degradation before the support queue does.

Line-Rate Packet Processing on Commodity Hardware

A userspace forwarding pipeline that reaches line rate on standard servers — poll-mode drivers, NUMA-aware placement, and a per-packet path engineered around the cache rather than around the code.

Fail-Safe OTA for a Distributed Device Fleet

An over-the-air update system for embedded Linux devices in the field: atomic A/B switching, cryptographic provenance from boot ROM to application, and a rollout that stops itself when the fleet starts failing.

Event-Driven Telemetry Platform for Industrial Assets

An ingestion and analytics platform for high-cardinality machine data — designed around backpressure, ordering guarantees and replay, so that a slow consumer degrades the system instead of losing data.