
REVERSE PROXY — RUST
Vongola
Post-quantum hybrid TLS reverse proxy on Pingora, with built-in ACME. It serves this site.
CHART — THE FLEET
Open source, Apache-2.0, built in the open at github.com/qompassai. Every vessel below is in active service — this website runs on three of them.

REVERSE PROXY — RUST
Post-quantum hybrid TLS reverse proxy on Pingora, with built-in ACME. It serves this site.

OPENPGP KEY SERVER — RUST
A Hagrid-derived key server — HKP, VKS, and Web Key Directory — with post-quantum ambitions: ML-KEM/ML-DSA throughout, WebAuthn-class authentication, no deprecated algorithms. Live at keys.qompass.ai.

NIX BINARY CACHE — RUST
An Attic-based Nix binary cache with hybrid Ed25519 + ML-DSA-65 narinfo signing — packages signed for the post-quantum era, served from cache.qompass.ai.

PGP MAIL CLIENT — ANDROID
Encrypted mail the way it should feel: OpenPGP compose with a real key picker, Tor transport, and key lookup against volta. Heading to F-Droid.

NEOVIM ENVIRONMENT — LUA
A Neovim-native development environment: 138 formatter adapters, deep LSP coverage, in-editor AI — the cockpit the rest of the fleet is built from.

AGENT RUNTIME — RUST
A bounded planner-coder-reviewer agent runtime: one safe core shared by CLI, TUI, and MCP, with operator-approved checks and an ATLAS-mapped adversarial test program.

GAME — RUST / BEVY
A fiber-optic cabling puzzle game — route the light, validate the signal. Coming to Google Play, F-Droid, and Windows.

REVERSE ENGINEERING — RUST
A Rust port of the REA MCP reverse-engineering server — depth-sounding for binaries.
N — NORTH
NIST-compliant security solutions — post-quantum cryptography, red-team tooling, and privacy infrastructure, built in the open.
E — EAST
Empowering education solutions — learning tools that live in the editor, and PathFinders, our internship program for new builders.
S — SOUTH
Quality deployment solutions — dotfiles, configuration, and release tooling that carry a project from first checkout to production.
W — WEST
Efficient infrastructure solutions — Nix packaging, a signed binary cache, and the network plumbing the rest of the fleet runs on.