Per Ardua
Open Source
Tools for AI research, organizational analysis, and privacy-preserving infrastructure
Pact, Kindex, Signet-Eval, and much of the Exemplar toolset are now maintained by Wander. Signet, Herald, and other personal projects remain under my account. Each project below links to its current home.
github.com/jmcentire1
Reference Impl
11
AI & Agents
11
Stack Governance
4
Org & Management
3
Infrastructure & Privacy
Reference Implementation
Exemplar
A reference implementation of the governance stack
Governed code review service — the reference implementation for the entire governance stack. Every component specified by Constrain, decomposed by Pact, routed by Baton, trust-scored by Arbiter, and sealed by Tessera. Multi-stage analysis (security, correctness, style, architecture) with full audit trails.
AI & Agents
Agent authorization, model distillation, and multi-agent coordination
Signet
Personal sovereign agent stack. Gives AI agents a cryptographic vault for managing user credentials, generating zero-knowledge proofs, and enforcing privacy policies. 62K lines, 1049 tests, MCP-native.
Signet-Eval
Maintained by Wander
Deterministic policy enforcement for AI agent tool calls. Aviation-inspired red lines with plan B alternatives, preflight self-planning with timed lockout, spending limits, credential gating, encrypted vault. Includes a CLI, MCP tools, and an optional Claude function adapter.
Agent-Safe
Embed authorization in the token. 150 lines. Zero deps. ~2µs eval. Defines SPL (Safe Policy Lisp), a tiny S-expression policy language that travels inside signed capability tokens. 6 SDKs.
Pact
Maintained by Wander
Contract-first engineering. Pact defaults to planning: decomposition, interfaces, contracts, and executable tests. Claude or Codex implements against that plan; Pact can own implementation when explicitly enabled.
Apprentice
Maintained by Wander
Adaptive model distillation with story-level learning. Routes requests between frontier API and local model, progressively shifting traffic as quality proves out. Journey evaluator scores multi-step flows. Per-journey phase tracking.
Constrain
Maintained by Wander
Find the boundary between specification and intent. CLI tool that interviews engineers about their problem and produces an induced-understanding prompt and structured constraint set. Randomized adversarial postures ensure descriptions are robust.
Transmogrifier
Maintained by Wander
Register-aware prompt translation. Detects linguistic register (casual, technical, academic, narrative, direct) and normalizes it to maximize LLM output quality. Empirically validated: 18.8pp spread on Claude Opus, 56pp on Gemini. Task-aware routing — optimal register varies by (model, task type).
Webprobe
Maintained by Wander
Generic site state-graph auditor. Maps any website as a directed graph, captures timing and resources via headless browsers, scans for security vulnerabilities (HSTS, CSP, cookies, CORS, XSS), and uses LLM-driven agents for visual defect discovery. WCAG contrast checking, finding masks, cross-run diffing.
Advocate
Maintained by Wander
Six-persona adversarial review engine. Feed it code, design docs, or architecture decisions. Red Team, Adversarial, Sage, User, SME, and Good Friend each attack from a different angle. Disagreement detection surfaces tensions between personas. Self-reviewed.
Herald
Your agent doesn't need to be always-on. Herald is. Lightweight webhook relay and message queue for AI agents and local services that can't expose a public endpoint. Give your agent a stable URL; Herald receives, encrypts, queues (FIFO, deduplicated), and delivers when the agent is ready.
Simulacrum
A cognitive simulacrum that thinks in Jeremy's patterns on novel situations, not just writes like him on familiar ones. Two-phase classifier dispatcher: recall branch (OpenAI fine-tune) routes autobiographical questions; adversarial-dialog branch (Anthropic Sonnet + annotated few-shot pairs + Mode-A operationalized-criterion sub-classifier) routes opinion, critique, drafting. Built on Park et al. 2024.
Stack Governance
Trust enforcement, schema governance, production attribution, and stack adoption for Pact-built systems
Baton
Maintained by Wander
Cloud-agnostic circuit orchestration. Topology-first service mesh with OTLP-native observability, multi-endpoint span fan-out, reverse-proxy adapters, taint analysis, canary auto-promotion, and research-backed self-healing.
Arbiter
Maintained by Wander
Access auditing, consistency analysis, blast-radius classification, and trust enforcement. Append-only trust ledger with SHA-256 checkpoints. Five-factor trust formula. Three-step conflict resolution: authority, trust arbitration, human escalation.
Sentinel
Maintained by Wander
Production attribution and contract tightening. Watches logs for errors, attributes them to components via PACT keys, spawns LLM fixer agents, pushes tightened contracts back to Pact, and emits incident stories to Chronicler. Multi-window budget caps.
Ledger
Maintained by Wander
Schema registry and data obligation manager. Registers schemas across 12 backend types, validates field-level annotations, gates migrations (BLOCKED/HUMAN_GATE/AUTO_PROCEED), and exports rules to Pact, Arbiter, Baton, and Sentinel.
Cartographer
Maintained by Wander
Stack adoption and compatibility tool. Scans existing codebases via AST analysis, produces draft artifacts for all stack tools with confidence levels, and runs 34 compatibility checks across 5 tools. Read-only invariant.
Stack Smoke
Maintained by Wander
Cross-stack smoke test harness for the proper tool suite. Verifies installs, imports, CLI entry points, and integration assumptions across Exemplar tools so drift is caught before release.
Aegis
Maintained by Wander
Resource-budget primitive. Wrap every blocking call in your stack with a declared timeout, optional fallback, and structured tags. A blocking call without a budget is a bug. Twin TypeScript + Python implementations sharing one behavioral contract.
Covenant
Maintained by Wander
Contract validation runtime. Per-environment violation policy plus sliding-window violation budget. Twin TypeScript + Python siblings consuming the same JSON Schema artifact. Part of the Exemplar stack.
Scram
Maintained by Wander
Emergency kill-switch service. The Exemplar stack's last-resort termination mechanism. When a catastrophic failure no canary, alarm, degraded-mode, or operator intervention can stop, scram fires. Does not negotiate, does not retry — terminates and rolls back.
Vigil
Maintained by Wander
Sub-threshold anomaly detection. Watches event streams, trace samples, and contract violations for pattern divergence that doesn't trip a single alarm — the canonical case being "47 LLM timeouts in an hour for tenant X on the same prompt pattern." Operators decide; vigil never auto-rolls back.
Witness
Maintained by Wander
Human-in-the-loop coordination primitive. Surfaces decisions requiring human judgment, blocks execution until approval/rejection, captures rationale, and writes audit. The cross-stack home for the HITL pattern that otherwise gets implemented ad-hoc inside every consumer.
Org & Management
Stigmergic coordination, knowledge graphs, and management tools
Chronicler
Maintained by Wander
Event collection and story assembly. Correlates raw events into stories at configurable granularities (request, service, journey) and emits them to Stigmergy for pattern discovery and Apprentice for learning. Closes the product feedback loop.
Stigmergy
Organizational awareness through stigmergic signal processing. Ingests work artifacts from GitHub, Linear, and Slack, routes them through an ART mesh with sequence-aware familiarity scoring, and surfaces structural patterns including normalized deviance. 1545 tests.
Ascend
AI-powered engineering management CLI. Track your team, analyze performance, prepare for 1:1s, and detect risks from the terminal. Roster management, meeting transcript parsing, risk detection (flight risk, burnout, bus factor), coaching, OKR/PIP tracking, and interactive TUI.
Infrastructure & Privacy
Document formats, encrypted messaging, and privacy architecture
Tessera
Maintained by Wander
Self-Validating Executable Document Format. A document that proves itself. Carries its data, schema, mutation history, and cryptographic signatures in a single portable artifact. Ed25519/SHA-256 hash chain, embedded Rhai scripting.
HermesP2P
Decentralized, ephemeral peer-to-peer messaging. No servers, no persistence, no compromise. Transient communication network with cryptographically secure messaging overlay, PGP-style encryption, public/private channels.
BlindDB
Interactive demo of client-side encryption architecture from The Ephemeral Internet. Shows two architectures side by side: today's 12-exchange credential flow vs. tomorrow's 2-exchange flow where the server stores only encrypted blobs at opaque addresses.