Damián BúhoCurriculum Vitae

The Projectfile specification describes “projectfile”, a simple hierarchical file about a project. It can be YAML, TOML or JSON. There is a CLI tool that hides formats from you, reads and writes keys and supports includes, interpolation and other interesting stuff.

• 600+ distinct checks
• Fact/rule engine: you can override everything and create your own rules declaratively
• Page-specific and site-specific checks
• A11Y, SEO, GEO, Lighthouse
• Validations for every used format
• Even uncompressed images!
• Well-known files, TLS, HTTP Headers, Semantic Markup
• Can and should be self-hosted

Accepts 16 report formats and sends them to stdout or an OpenTelemetry collector as logs.

• CAA IODEF incident reports
• Cross-Origin-Embedder-Policy and Cross-Origin-Opener-Policy reports
• Browser crash and Deprecation reports
• Legacy CSP report-uri, HPKP pin validation failure and Expect-CT reports
• Content Security Policy and Document Policy reports
• Permissions Policy and Subresource Integrity reports
• Browser intervention and Network Error Logging reports
• SMTP TLS reports

• Validates 20+ different kinds of ignore files
• Automatically fixes errors that could be fixed deterministically
• Informs about dead rules

B19 is a set of conventions and slightly opinionated tools, with Ubuntu as its foundation and around 100 images built on it. Healthchecks, tests, benchmarks, reports, commands, bootstraps, everything is pre-set and extremely extendable. Perfect for creating in-house manageable image inventories.

Uwindaji can automatically find facts about intelligence targets, keep them tamper-proof, maintain provenance, monitor developments.

You specify a person or organization, you get a report from multiple distributed tools that work together. Every domain, email, phone number and address triggers “specialist” services (non-LLM), which enrich them and share findings between themselves. You can analyze it manually or use it with agents as MCP/CLI (LLMs love to play spies).

Currently this system monitors and prevents sanctions compliance violations.

Doomsday Clock Exporter regularly fetches the current Seconds to Midnight value from the Bulletin of the Atomic Scientists and makes it available to your Prometheus. You can set up automations like “cancel all my cloud subscriptions if the value drops below 30 seconds”.

Or just keep it as a reminder that nothing really matters.