Skip to content
View jbrahy's full-sized avatar
💭
Lead, follow or get out of the way.
💭
Lead, follow or get out of the way.
33 followers · 78 following

Achievements

Achievement: Pair Extraordinairex3Achievement: YOLOAchievement: QuickdrawAchievement: Public SponsorAchievement: Pull Sharkx3

Achievements

Achievement: Pair Extraordinairex3Achievement: YOLOAchievement: QuickdrawAchievement: Public SponsorAchievement: Pull Sharkx3

Highlights

Organizations

@inboxmedia @reach-x

Block or report jbrahy

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
jbrahy/README.md

John Brahy

Long Beach, CA. I build systems software and the businesses around it: an operating system kernel, a coding agent, an antivirus product with its own licensing and billing service, and the iOS and macOS apps in between.

Open to new work. Reach me at john@brahy.com.

What I am building

Project What it is Stack
BraiNIX A capability-based, security-first microkernel built to serve LLM inference to remote clients. Written end to end in no_std Rust, targeting Apple Silicon. W^X, KPTI, measured boot, synchronous IPC. Every security invariant is named and individually checkable. Rust (no_std), aarch64
GopherMind A single-binary AI coding agent for the terminal, pointed at any OpenAI-compatible model you control. Path containment, a shell deny-list, and an approval gate on every mutating action. Go, Charm TUI
NexGuard A hash-based antivirus CLI and background watcher, plus the Go service that sells the premium tier: accounts, Stripe checkout, license issuance and revocation, per-IP rate limiting. Go, MySQL, Stripe
HuShield A community-driven spam call and text filter for iOS with no accounts and no PII. Device identity is an Apple App Attest key and nothing else. Verified end to end on real hardware. Go, MySQL, Swift
mfa TOTP codes on the macOS desktop: Dock app, global hotkey, webcam importer for Google Authenticator transfers. RFC 6238 and 4226 implemented against the published vectors. Secrets stay in the login keychain. Rust, AppKit via objc2
Markup A native desktop Markdown editor: split-pane editing with live preview, no backend and no network calls. Tauri 2, React, TypeScript

How I work

Every one of those repositories carries its design spec and its plan alongside the code, and each README says plainly what the project does not do yet. NexGuard's detection is hash-only and says so. BraiNIX boots a hardened microkernel but does not serve inference yet and says so. HuShield lists which behaviours are verified on real hardware and which are still unproven. I would rather ship a documented boundary than an implied capability.

Working in

Rust · Go · TypeScript / React · Swift · PHP · Python · MySQL · Tauri · AWS

Elsewhere

Pinned Loading

  1. BraiNIXOS BraiNIXOS Public

    A security-first, capability-based microkernel written end to end in Rust (no_std), built to serve LLM inference securely to remote network clients. Apple Silicon (aarch64), zero external dependenc…

    Rust 1 1

  2. gophermind.com gophermind.com Public

    🐹 A tiny, hackable AI coding agent for your terminal — a single Go binary pointed at your own OpenAI-compatible LLM. Safety built in, no cloud lock-in.

    Go 1

  3. desktop-mfa desktop-mfa Public

    TOTP codes on the macOS desktop: Dock app, global hotkey, secrets in the login keychain.

    Rust

  4. markup markup Public

    A native desktop Markdown editor: split-pane editing with live preview, built with Tauri 2, React 19, and CodeMirror 6. Single binary, no backend, no network calls.

    TypeScript

  5. Hushield/hushield Hushield/hushield Public

    Community-driven, privacy-first spam call and text filter for iOS. No accounts, no PII — identity is an Apple App Attest key only. Go + MySQL backend, native Swift client.

    Go 3

  6. nexguard nexguard Public

    A hash-based antivirus CLI and background watcher for macOS, Linux, and Windows, plus the Go service that sells the premium tier: accounts, Stripe billing, license issuance, rate limiting.

    Go 6