gusitllc
Repositories list
88 repositories
luca-community
Public- Dunning enforcement as an O(1) status-row flip that every spend surface fail-closes against at its own runtime gate — instantaneous, exactly reversible, race-fr…
- A rate limit whose currency is a query-time SQL aggregation over the same idempotent metered-usage table that bills the customer — one tamper-consistent source …
- A single-transaction billing invariant in which the usage-telemetry INSERT is itself the idempotency gate for the money movement, with bidirectional consistency…
- Vendor-description NIC election plus a boot-persistent convergence task terminated by external gateway reachability, yielding a provably single-homed management…
- A uniform verify-before-work phase contract whose node-unreachable heal selects the remediation — not a retry — from a two-dimensional out-of-band sensor pair (…
- Cred-ref job dispatch, VPN-verified heartbeats, and heal-hooks-as-synthetic-steps for destructive bare-metal operations inside customer networks with zero secre…
- A fault-recovery state machine that detects a wedged out-of-band disk-erase subsystem, unsticks it by resetting the management controller, and closes the loop w…
- A dated public prior-art disclosure of the inject-verify-clean-disk-0-park-and-build-gate chain for headless bare-metal re-imaging over out-of-band management.
- A passive media-fetch side channel that detects OS-image apply completion and drives out-of-band eject, boot-override clear, and restart — with zero code inside…
- Capability-by-provisioning: turning a human security-review checkpoint into a runtime type-level invariant whose dangerous paths are provably unexecutable until…
- Human-forwarded vendor console screenshots reduced to an idempotent, entity-keyed, per-seat daily utilization time series by a vision-language model.
- A periodic pipeline that reconciles raw autonomous-agent session transcripts against the project-of-record set to surface work that emerged rather than was assi…
- A defensive publication: rating each usage event at emit so a metering ledger becomes immutable and tamper-evident by database construction, not by audit loggin…
- Hash-chained single-writer authorship ledger with honesty-graded timestamp receipts and a zero-trust, offline, portable verification package
- Server-authoritative, exactly-once, fail-safe billing for a resource that lives only on the user's device — the server holds neither its plaintext nor its ciphe…
- A fail-closed, three-valued (PASS/REJECT/ERROR) deploy admission function that proves ordering safety from the source commit graph at deploy time, using in-clus…
- A fail-closed continuous-delivery train that merges a branch only when an out-of-band AI review persona and an AI test persona have each recorded a pass verdict…
- Proving a baked container image already carries live hot-patched code before deleting ConfigMap subPath overlays — a three-way, per-class, bidirectionally-lossl…
- A TTL-stamped deploy-lock intent record reconciled against observed edge-route state, with a shared idempotent restore verb driven from three independent layers…
- A unified deploy control loop that runs the cold image pull while traffic still serves, gates the maintenance flip on a DaemonSet image-present barrier, and der…
- A deploy-time, reversible admission fence derived from live volume-attachment state that makes a Multi-Attach deadlock impossible during a Recreate rollout of a…
- A deployment rollout wait that decouples deadline expiry from failure — returning complete / real-failure-signal / hard-timeout-with-no-signal — so a long cold …
- Auto-discounting stale change-requests by review-commit OID with fail-closed unknown-SHA handling, for multi-agent (non-returning AI reviewer) merge automation.
- Use-time file-projected tokens, an env-exclusion threat model for the code-writing AI as an insider, per-operation URL splicing, a pure fail-closed tenant×repo …
- Tolerate-healthy-drift post-deploy reconciliation with an in-cluster authority record and a deploy-in-progress suspend handshake for multi-writer continuous del…
- A single email ingress that yields byte-identical IMAP-store fidelity AND a normalized agent event feed, correlated by a deterministic thread key so persona rep…
- A fail-closed trust chain that binds an out-of-band signed-URL credential to in-band telephony protocol state, closing the unauthenticated media-stream toll-fra…
- A GET-only content overlay in which each stored row's data provenance selects the serve-time sanitization and Content-Security-Policy tier, with AI authorship a…
- A pure-function visualization architecture in which every rendered property is a deterministic projection of append-only operational records — giving provable s…
ProTip! When viewing an organization's repositories, you can use the
props. filter to filter by custom property.