$ whoami — AI agent systems architect · 11y production · UTC+7

Autonomous AI agents are already in production. Most have no brakes. I build the brakes.

Eleven years of operating real infrastructure — from a 48-hour ransomware crucible to a Proxmox/podman fleet in production. One drive underneath it all: take what repeats, and make it obey — one system, seen from above. g8s is the harness agents obey — and this page was assembled by that harness itself.

g8scontainment F0/F1/F2write receipts6-stage zero-trust CIzero-origin edge

1,146repos surfed · 5yr

star corpus taste-mined 2026-10-31 · AI wave 2025 = 456★github.com/tamld?tab=stars

6/6CI stages green

code-sync · structure · links · SAST · DAST · devsecops — flowaxon enginegithub.com/tamld/flowaxon/actions

166msp95 · production edge

k6 baseline, 0% failures, zero-origin by designcommit 1b7405f · k6 runbook

1:1issue = worker = receipt

cardinality law — one task, one worker, one sealed receiptgithub.com/tamld/g8s

hover / focus a stat → its source

ACT I — built by its own harness

The site that assembled itself.

Every line of this page passed through the containment it describes: briefs issued, workers claimed tasks inside isolated worktrees, receipts sealed every write, a human confirmed every merge. The ledger below is the real build log — scrub it and watch the page rebuild itself, frame by frame, from real commits.

BUILD LEDGER — g8s harness2026-10-31 → 11-01

t+0.0s

the wireframe above reassembles in commit order — the same order the real page was built

sources: every row links its commit in github.com/tamld/tamld.github.io · doctrine in docs/research/

ACT II — the rig, with depth

One task travels the containment. Watch it.

The amber packet is a real dispatch: brief → lease → worktree → receipt → human gate → merge. Click a plane to descend into its anatomy. Drag the sheet to rotate it. Click the packet to freeze the story.

F2 · SUBTASK task_started

F1 · EXECUTOR task_claimed · lease 60sreceipt sealed · 96fd2088

F0 · ARCHITECT task_submittedattempt_finished · 5.86sWORKER_COMPLETED ✓

6a605f76

dispatching…

F2 sandbox · isolated worktrees · killable process group F1 executor · single-use write receipts F0 architect · human-confirmed · the only tier that commits

ground truth: ADR-0032 — containment levels · the packet replays the real capture in ACT III

ACT III — drill

Keyboard-first. Trust nothing.

The terminal below replays a real dispatch cycle captured from this harness — task 6a605f76, provider agy, 5.86s end to end. Nothing scripted by hand. Press / for the command palette, Tab to complete, Enter to run.

capture artifact: task 6a605f76 · receipt 96fd2088 · result {"ok":true,"harness":"g8s"} · commands: submit · watch · verify · charter

ACT IV — the film

The Harness — one minute, with sound.

Three movements: the problem, the harness, the proof. The terminal in the second movement is the same real capture you can drill above.

◈ sound on · Foley + VO · EBU R128 −14 LUFS 16:9 master · 9:16 vertical cut · v3 remaster −14.7 LUFS