ES: Ingeniero de sistemas. Rust y C++ sobre Linux: concurrencia lock-free, allocators, io_uring, eBPF/XDP, seccomp e IPC. Cada repo publica sus números y la máquina donde se midieron; los de Cortex-9 enlazan a su auditoría, pase o no.
EN: Systems engineer. Rust and C++ on Linux: lock-free concurrency, allocators, io_uring, eBPF/XDP, seccomp and IPC. Every repo publishes its numbers and the machine they were measured on; the Cortex-9 ones link to their audit, pass or fail.
federicobaez.com · X @Cortex9Sur · LinkedIn
Rust y C++ con loom, Miri y sanitizers en CI. / Rust and C++ with loom, Miri and sanitizers in CI.
| Repo | Lenguaje / Language | Descripción / Description | CI |
|---|---|---|---|
| lockfree-mpmc | Rust | Bounded lock-free MPMC queue (Vyukov); loom + Miri; Criterion vs crossbeam/std. |  |
| arena-slab-cpp | C++ | C++20 arena + slab allocators with ASan/TSan/fuzz and honest benches vs malloc/jemalloc. |  |
| spsc-c11 | C | Lock-free single-producer/single-consumer ring in C11: cached indices, batching, TSan-verified with a negative control, x86-64 and AArch64 CI |  |
| intrusive-list-cpp | C++ | Header-only C++20 intrusive doubly linked list: allocation-free push/pop/splice, stable sort, safe and auto-unlink hooks, multi-list tags |  |
| crc32c-portable | C++ | CRC-32C in C++20: slicing-by-8, SSE4.2 and ARMv8 CRC backends with runtime dispatch, combine(), fuzzed and sanitized |  |
| bptree-wal | Rust | On-disk B+tree with a redo WAL of page images: atomic transactions, checkpoints, and recovery tested against truncation, bit flips and real SIGKILL |  |
| mmap-wal-log | Rust | Append-only log on a memory-mapped file: CRC32C per record, torn-tail recovery, salvage reader, SIGKILL-tested |  |
| tiny-jit-x64 | C++ | Minimal x86-64 JIT for integer expressions: hand-emitted machine code, W^X pages, differential tests against an interpreter |  |
| ffi-cbindgen-demo | Rust | O(1) LRU cache in Rust exposed to C and C++ via cbindgen: panic-safe C ABI, ownership rules, RAII wrapper, ASan/UBSan + Miri. |  |
Sin runtime async ni crates de red; CI sin red externa (loopback y respuestas grabadas). / No async runtime or networking crates; CI without external network (loopback and recorded responses).
| Repo | Lenguaje / Language | Descripción / Description | CI |
|---|---|---|---|
| uring-http | Rust | Minimal HTTP/1.1 server in Rust on raw io_uring, no async runtime. Tested with Miri and ASan. |  |
| dns-stub-rs | Rust | Stub DNS resolver for A/AAAA: strict UDP response matching, TCP fallback, CNAME chains, positive and negative TTL cache; std only |  |
seccomp y Landlock probados contra el kernel real en CI. / seccomp and Landlock tested against the real kernel in CI.
| Repo | Lenguaje / Language | Descripción / Description | CI |
|---|---|---|---|
| seccomp-trace-diff | Rust | Analyze and diff seccomp-bpf filters (x86_64): reachable actions per syscall, arch/x32 bypass checks, CI regression gate. Verified against the Linux kernel. |  |
| landlock-smoke | Rust | Landlock LSM over raw syscalls: sandboxing exec wrapper and a kernel self-test matrix (fs, REFER, TRUNCATE, TCP, IPC scopes) |  |
| proc-maps-guard | Rust | Audits /proc//maps for W^X violations, executable anonymous memory, memfd/deleted code and aliased write+exec mappings |  |
Firmware bare-metal en QEMU y código freestanding para Cortex-M. / Bare-metal firmware on QEMU and freestanding code for Cortex-M.
| Repo | Lenguaje / Language | Descripción / Description | CI |
|---|---|---|---|
| qemu-riscv32-uart | C | Bare-metal RV32 firmware for QEMU virt: own startup, NS16550A UART driver, CLINT timer interrupts, trap handling, exit codes for CI. |  |
| qemu-cortex-m-blink | C | Bare-metal Cortex-M3 firmware: Morse SOS on the LM3S6965 LED from SysTick, self-checking in QEMU with a semihosting exit code |  |
| cobs-frame | C | COBS + CRC-16 framing for serial links in freestanding C99: streaming receiver, 11 canonical vectors, fuzzed, 600 B on Cortex-M0 |  |
Cada fila enlaza al estado de su auditoría o verificación; "no auditado" significa exactamente eso. / Each row links to its audit or verification status; "not audited" means exactly that.
| Repo | Lenguaje / Language | Descripción / Description | CI | Estado / Status |
|---|---|---|---|---|
| cortex9-shm-ring-bus | Rust | Lock-free SPSC ring over /dev/shm (Rust) with C/C++/Go/Python clients. |  |
No auditado de forma independiente / Not independently audited — BENCH.md |
| cortex9-memoria-unificada | C++ | C++20 tiered GPU/RAM/disk memory manager. | — | Auditado: pasa el umbral #5 (B+) / Audited: passes threshold #5 (B+) — AUDIT-valor.md |
| cortex9-elf-zk-loader | Rust | Signed-only ELF loader + seccomp supervisor (Rust). | — | Auditado FAIL: 122/143 (85.3 %) vs 100 %; v0.3 no auditado / Audited FAIL; v0.3 not audited — AUDIT-valor.md |
| cortex9-xdp-semantic-firewall | Python | XDP semantic firewall for MCP/gRPC payloads (eBPF + Rust/aya). | — | Auditado: no alcanza su umbral de valor / Audited: fails its value threshold — AUDIT-valor.md |
| cortex9-jitter-exfil | Rust | Timing-jitter covert-channel detector on SSL writes (Rust). |  |
Valor no auditado / Value not audited — VALOR.md |
| cortex9-sched-entropia | Rust | sched_ext (eBPF + Rust) scheduler weighting threads by prompt entropy. |  |
Valor no auditado / Value not audited — LIMITES.md |
| cortex9-snapshots-enjambre | Rust | Memory snapshot/restore for a swarm of agent processes (Rust). |  |
Auditado: no alcanza su umbral en general / Audited: fails its threshold overall — AUDIT-valor.md |
| cortex9-fwm-x11-rust | Rust | X11 window manager grouping windows by title/class/OCR affinity (Rust). |  |
Valor no auditado / Value not audited |
| cortex9-termica-predictiva | C | C daemon predicting CPU temperature to cap frequency before heavy tasks. | — | Control de hardware no verificado / Hardware control not verified — VERIFICACION.md |
| cortex9-poincare-fs | Rust | Read-only FUSE filesystem with Poincaré-ball embeddings (Rust). |  |
Auditado: valor no demostrado / Audited: value not demonstrated — AUDIT.md |
| cortex9-raft-sim | Rust | Raft (election, replication, snapshots) under deterministic simulation: seeded drops/reorders/partitions/crashes + Porcupine-style linearizability checker. Rust, zero deps. |  |
Valor no auditado / Value not audited |
| cortex9-lsm-engine | Rust | LSM-tree storage engine in Rust: WAL, memtable, SSTables with bloom filters, leveled compaction; crash-tested at every write point |  |
Valor no auditado / Value not audited |
| cortex9-wal-btree | Rust | Crash-consistent B+tree on a redo WAL with fsync discipline; crashed at every write point with torn writes; proptest vs BTreeMap. Rust. |  |
Valor no auditado / Value not audited |
| cortex9-wasm-vm | WebAssembly | WebAssembly 1.0 (MVP) interpreter in Rust: decoder, validator, stack machine; passes the official wg-1.0 spec tests, fuzzed with cargo-fuzz |  |
Valor no auditado / Value not audited |
| cortex9-epoch-gc | Rust | Epoch-based memory reclamation + lock-free hash map (Harris-Michael) in Rust, checked with loom, Miri and ThreadSanitizer. Part of Cortex-9. |  |
Valor no auditado / Value not audited |
Servidores MCP escritos desde cero (Python stdlib y Rust), validados entre sí por mcp-crosscheck. / MCP servers written from scratch (Python stdlib and Rust), cross-validated by mcp-crosscheck.
| Repo | Lenguaje / Language | Descripción / Description | CI |
|---|---|---|---|
| mcp-server-rs | Rust | Servidor MCP en Rust sin SDK oficial: JSON-RPC 2.0, stdio y Streamable HTTP, herramienta de ejemplo en sandbox seccomp (Linux). |  |
| mcp-base | Python | Minimal MCP server from scratch in Python stdlib: JSON-RPC 2.0, stdio/HTTP, HS256 bearer auth, SQLite memory, hash-chained audit log. |  |
| mcp-auth-hardened | Python | MCP server with hardened (simplified) auth in Python stdlib: scopes, refresh rotation, revocation, kid rotation, hand-written RS256. |  |
| mcp-memory-first | Python | Memory-centric MCP server in Python stdlib: crash-safe, versioned, searchable memory with snapshots. |  |
| mcp-resource-heavy | Python | MCP server around resources and prompts in Python stdlib: subscriptions over stdio/SSE, cursor pagination, completion. |  |
| mcp-crosscheck | Python | Black-box cross-validation of the mcp-family servers over real stdio/HTTP processes. Python stdlib. |  |
| Repo | Lenguaje / Language | Descripción / Description | CI |
|---|---|---|---|
| bench-verify | Rust | Re-run a benchmark claim N times; median + bootstrap CI; PASS/FAIL vs TOML threshold (JSON). |  |
| repo-forge | Rust | Rust CLI: husky commit lint + hook, identity check, history leak scan, Rust/C++ scaffolds, gh CI status and profile README rendering |  |
| crate-audit-checklist | Rust | Reproducible Rust crate review checklist: tests, clippy, fmt, cargo-audit, unsafe SAFETY hygiene, metadata and Miri, scored JSON report with a schema |  |
Tablas generadas con / Tables generated with repo-forge profile render (config). Licencia Apache-2.0 en todos los repos de arriba / Apache-2.0 on every repo above.