Geek · incurable tinkerer · dad of a lovely little girl
I take things apart until they tell me how they work — laptops, phone kernels, AI agents.
Lately: turning proven software into trusted tools for AI agents — keeping the craft in the product and permissions on a leash.

极客，爱搞机，家有可爱小女一枚
喜欢把东西拆开，直到它说出自己是怎么运转的：笔记本、手机内核、AI Agent。
最近在做的事：让懂行的专业软件成为 AI Agent 手里受控的工具——真本事留在产品里，身份和权限一路带到底。

• Making existing software agent-ready — exposing what a product already does well as task-level MCP tools any agent can call, rather than building yet another wrapper. The domain expertise stays the moat; the agent layer is swappable.
• Making agent actions attributable — end-to-end identity carried through to the human behind the agent, permissions capped at theirs, verifiable source citations, audit trails, and human sign-off where it matters.
• Agent execution security — controlling what an agent can read, run, and send out at the OS boundary instead of trusting a vendor's prompt or promise.
• Agent runtimes — streaming lifecycles, tool-call recovery, graded loop guards, context compaction, and MCP fault isolation, mostly in Rust.
• Financial document systems — production infrastructure for regulatory filings and listed-company annual reports: deep document parsing, rule checks, and exchange-scale AI authoring workflows.
• Linux graphics, input & kernels — zero-copy GPU encoding pipelines (NVENC / VAAPI DMA-BUF), Wayland/X11 capture, touchpad gestures, laptop ACPI quirks, and phone kernels: when hardware or the stack misbehaves, I go down to the driver.
• Pragmatic Python tooling — small, sharp tools that remove a daily annoyance and get out of the way.

RunSeal · Rust
An OS-native sandbox layer and stable execution protocol for AI agents: policy-governed filesystem and network boundaries, structured audit events, and fail-closed behavior whenever a request can't be fully enforced. Windows is the reference backend; macOS and Linux are experimental.
→ Why I built it · 做 RunSeal 的初衷

ZCode silent upload disclosure · Sep 2026
Found that an AI coding tool was silently packing users' open workspaces — including full .git history — encrypting and uploading them to cloud storage by default with no kill switch. The write-up drew 1.6M+ views on X and led to the upload pipeline being removed, the client being open-sourced, and third-party assessments.
→ 扒一扒 ZCode 静默上传全量 Git 历史的骚操作

SealDesk · Rust
A RustDesk fork built on the tailcat transport: scan a QR code and connect, zero config, P2P first with DERP fallback. Early alpha, Linux x64 for now.
→ 我用 tailcat 改造了 RustDesk，扫码就能直连

• 为什么说“套壳 Agent 就能做 SaaS”是个荒谬的幻想 — why wrapping an agent isn't a product
• Agent 死循环的分级治理阶梯（Warn → Block → Halt） — graded loop guards instead of a hard kill
• 跨 Chunk 流式状态机的 DSML 抢救实录 — recovering tool calls the model emitted as text
• Agent 长会话的两阶段预热与可回捞设计 — moving context compaction off the hot path
• MCP 服务的启动隔离与平滑降级 — optional plugins must never block the core session
• 消除桌面 Agent 输入框假死与流式卡顿 — decoupling heavy IO from UI end states

• Strata 0.2.7.1 在 GB10 上的性能变化与 SPEC_COST 实测
• RTX 4090 D Tensor 解锁之后，量化 MoE 能快多少
• RTX 4090 D 解锁实测：Tensor 吞吐翻倍，Strata 推理重测
• 让 AI 通过 UIA 操作 Electron 桌面应用：Windows-MCP 实测
• 我用 tailcat 改造了 RustDesk，扫码就能直连

• fast-context ⭐24 — codebase context locator for coding agents: local chunk prefetch plus remote symbol reasoning
• dsh-tool-runseal — RunSeal sandbox provider for DeepSeek Harness (dsh), bringing OS-native policy-enforced command execution across Windows, macOS, and Linux
• pot-app-recognize-plugin-rapid-py ⭐15 — offline RapidOCR plugin for Pot App
• check-requirements-txt ⭐12 — pre-commit hook that catches packages missing from requirements.txt / pyproject.toml

• esengine/DeepSeek-Reasonix (⭐36k) — Windows 11 session-switch freeze, prompt history, per-arch macOS builds
• BYVoid/OpenCC (⭐10k) — manylinux2014 wheels, macOS ARM64 CI
• tiann/hapi (⭐5k) — terminal quick keys, mobile input and teardown fixes
• zurawiki/gptcommit (⭐2.4k) — custom OpenAI-compatible API base URLs
• h2non/filetype.py (⭐776) — zstd and CDFV2 Word detection, file-like reader fixes

_{Code is cheap, let's talk.}