flowaxon v4

Autonomous AI agents are already in production. Most have no brakes. I build the brakes.

$ whoami — AI agent systems architect · 11y production · UTC+7

Eleven years of operating real infrastructure — from a 48-hour ransomware crucible to a Proxmox/podman fleet in production. One drive underneath it all: take what repeats, and make it obey — one system, seen from above. g8s is the engine agents obey; Aegis is the console humans command.

g8s Aegis 6-stage zero-trust CI SLSA attested EN-first
1,146
repos surfed
github.com/tamld?tab=stars ↗
6/6
CI stages verified
run #41189766268 link ↗
864 KB
RSS prod memory
(measured 2026-10-31)
1:1
issue=worker=receipt
github.com/tamld/g8s ↗

Two governance planes, one invariant boundary

g8s "The engine agents obey"
  • agent-facing: containment rings F2⊆F1⊆F0
  • single-use path-scoped write receipts
  • fail-closed worktree isolation
  • durable SQLite controlplane
Aegis "The console humans command"
  • human-facing: runtime interception & blast doors
  • HITL approvals
  • AST-level mutation guards
  • proportional governance

From shell scripts to agent containment harnesses

2016 2021 2025
2016 company floor

"cmd scripts kill repetition → automation mindset born"

2021 the doctrine

"top-down vision, then lateral — homelab becomes one governed system"

2025 the harness

"g8s unifies agent chaos under receipts and rings"

Three eras of deterministic execution

Act I · The 48-Hour Crucible — Distributed Command Under Crisis

operator-attested · essay pending

2016 nationwide retail ransomware outbreak (100+ endpoints crippled at Thien Nam Hoa). Decomposed recovery into 3 parallel operational squads (Foundation / ERP-POS / Identity Verification) with pre-built automation scripts, recovering 100+ nodes in 48 hours with zero Monday morning retail downtime.

T+00:00 Squad: Incident Command 0 / 100+ recovered
Nationwide retail ransomware outbreak detected across 100+ endpoints. Air-gap isolation initiated. Automated triage underway.

Act II · The Arithmetic of Determinism — Kaizen & Single-Source Infrastructure

run #41189766268 link ↗

Enterprise virtualization, MikroTik RouterOS Single DHCP Authority, Dual-Plane Observability ([LAN] vs [WAN]), and Zero-WAN Exposure. The Automation Equation: "1 manual click takes 3 seconds. 1 automated script takes 3 hours. 100 flawed clicks cost 3 years."

FIG 01 // CONSTELLATION-RIG PRODUCTION DEPLOYMENT & HARNESS BENCH
RSS 864KB • TLS 1.3 mTLS • 6/6 CI GREEN
DEPLOYMENT MAP OF THE MACHINE SERVING THIS PAGE TOPOLOGY SSoT · ZERO PROBABILISTIC NOISE 01 // EDGE CLOUDFLARE WAF Strict TLS · HSTS Preload TLS 1.3 · mTLS origin 02 // INGRESS TRAEFIK v3 Reverse Proxy · mTLS 3 vhosts 03 // FLEET PROXMOX · PODMAN Production Container production container 04 // ENGINE GO ENGINE Static Binary · HTTP/2 864 KB RSS 05 // HARNESS g8s · AEGIS Agent Ring · AST Gates 6-stage pipeline green TRAVERSAL: CLOUDFLARE EDGE ➔ TRAEFIK v3 ➔ PROXMOX PODMAN ➔ GO ENGINE ⇄ g8s/AEGIS (src: manifest.json + run #41189766268)
CLICK ANY BLOCK · OR TYPE /DRILL 100% OPERATIONAL
TARGETS:
[INIT] Constellation Rig SSoT initialized · 5 deployment entities mapped.
[READY] Click any block above or run /drill [target] in terminal.

Act III · The Symbiotic Frontier — Deterministic Harnesses for Autonomous AI

g8s & Aegis. F0/F1/F2 exponential containment rings + S0..S3 orthogonal control strata + HMAC-SHA256 Telegram 2FA runtime interception.

F0 Brain → F1·a Lease Claim → F1·b Scoped Write → F1·c WriteReceipt → Seal & Done
$ g8s submit —brief: research-packet-N
lease claimed (CAS) · worktree isolated
F1 writing … receipt-scoped paths only
receipt sealed · id 0x8f7d2e4a · paths 1 · ttl 3600s
$ watch --milestone worker-complete … done

Continuous horizon curation & star trajectory

183
2022
186
2023
106
2024
456
2025
212
2026
ai 114 agents 81 docker 68 claude-code 49 cli 50 linux 46 golang 36 mcp 26
github.com/tamld stars, fetched 2026-10-31, n=1,146 — github.com/tamld?tab=stars ↗

Autonomous agent systems in production

g8s v0.21 · 21+ releases
github.com/tamld/g8s ↗
Aegis 0 unreviewed mutations
github.com/tamld/aegis ↗
The constellation 6/6 stages green
github.com/tamld/flowaxon ↗

Architectural walkthrough & dynamic containment

LIVE · 5s LOOP · 676 KB

FlowAxon in 32 Seconds — Rendered from Live Captures

full promo · EN · 3.2 MB VP9 · Remotion render from production screenshots

Deterministic systems engineered for production

You bring chaos, I return a system

Where disparate tools and brittle handoffs fail under load, I engineer single-authority control planes that bring deterministic order. Every component is bounded, observable, and governed from a unified vantage point.

Agents you can bet production on

Probabilistic models belong behind deterministic harnesses with strict capability rings and fail-closed isolation. I build containment architectures so autonomous workers execute safely in production without risking infrastructure.

Systems that prove themselves

Claims without mechanical verification are liability. Every pipeline, policy, and state transition in my systems generates tamper-evident receipts and cryptographic audit trails before touching disk.

"I am the person who cannot watch something repeat twice without building the system that ends it. Cmd scripts became a homelab doctrine; the doctrine became a harness for AI agents. Same screw, three turns — and I'm not done turning it."
Essays & Systems Doctrine
  • The 48-Hour Crucible: Distributed Command and Recovery Under Crisis outline
  • The Arithmetic of Determinism: Kaizen, Single-Authority Ingress, and Dual-Plane Systems outline
  • Containment Rings and WriteReceipts: Deterministic Harnesses for Autonomous AI Agents outline