Theme
Text size

I build operating systems, compilers, and the security tooling around them.

  1. Applications Venoly ecosystem Neoarc game engine
  2. Libraries SmartCachePP SmartRateLimiter
  3. Toolchain SCSA
  4. Operating systems AstraOS StrixOS emexOS
  5. Firmware SRC
Where each project sits in the stack. Names link to the entries below.

AstraOS is a hybrid-kernel operating system for x86 and x86_64: 252 source files, written over eight months. SCSA, an assembler with its own VM and cryptographic code signing, took four days. StrixOS is written entirely in StrixLang, a language I designed.

Security runs through all of it. I've done offensive security for more than eight years, and it shows in how I design: access control, memory safety and recovery paths are settled when the architecture is drawn, not added afterwards.

Selected work

Systems, tools and libraries built from scratch. Each entry links to its repository on GitHub.

  1. AstraOS (GitHub, opens in a new tab)

    Modular hybrid-kernel OS

    Complete OS from scratch targeting x86 and x86_64. Hybrid kernel architecture, security-first design, advanced memory management, a multitasking scheduler, a TCP/IP stack and a custom file system. 252 modular files over eight months of development.

    Operating system

    C, x86, kernel, security-first

  2. StrixOS (GitHub, opens in a new tab)

    An OS in a self-designed language

    Self-contained, fully modular OS written entirely in StrixLang. Runs directly on hardware or in virtualised environments, with no external dependencies.

    Operating system

    StrixLang, bare metal, custom language

  3. SCSA (GitHub, opens in a new tab)

    Super Compiling Security Assembler

    C-based assembler with a VM runtime for secure code execution, a multi-pass compiler, networking for distributed compilation, cryptographic code signing and automatic updates. Built in four days.

    Toolchain

    C, compiler, VM, security

  4. SRC (GitHub, opens in a new tab)

    Security Recovery Core

    Firmware recovery system that runs before BIOS/UEFI. Automatic firmware backup and recovery, protection against permanent bricking, secure validation and USB-based recovery.

    Firmware

    C, firmware, pre-boot

  5. SmartCachePP (GitHub, opens in a new tab)

    High-performance C++ cache

    Modular caching library with LRU eviction, metrics tracking, optional disk persistence, async cleanup, thread safety and configurable eviction policies.

    Library

    C++, performance, thread-safe

  6. SmartRateLimiter (GitHub, opens in a new tab)

    Modular Node.js rate limiter

    Pluggable rate limiter with in-memory and Redis backends, configurable algorithms, route-specific limits, DDoS protection and throughput optimisation.

    Library

    JavaScript, Node.js, Redis

  7. emexOS (GitHub, opens in a new tab)

    Community-driven OS

    The emexOS repository: a community-driven project with an active Discord, regular contributions, documentation and contributor guidelines.

    Operating system

    C, GPL-3.0, community

  8. 28 more repositories (GitHub, opens in a new tab)

    github.com/D3LTA2033

    The Venoly ecosystem, the Neoarc game engine, an SCSA VS Code extension, a universal config loader, Archcraft tools and twenty-plus more.

    Applications and tools

    35 repositories in total

Kernel notes

How the main subsystems fit together: process, memory, file system, drivers, networking, security, IPC and system calls.

Process management

Lifecycle model
NEW → READY → RUNNING → BLOCKED → TERMINATED, with scheduler-driven transitions.
Scheduling
CFS fundamentals combined with real-time classes and context-switch control for predictable latency.
Implementation
Process descriptors, run queues, fairness tuning and starvation prevention.

Memory management

Virtual memory
User/kernel split, paging, and the x86_64 multi-level page-table walk.
Allocators
Buddy and slab-style approaches, aligned with custom predictive allocation patterns.
Security
Secure free and sanitisation patterns, plus integrity checks to reduce the risk of corruption.

File systems

VFS architecture
A unified interface over ext4, NTFS and Btrfs-style backends, built on inode and file abstractions.
Core objects
inode, dentry, file_operations and the path-resolution layers.
In practice
Journaling-ready, modular file system handling integrated into complete OS architectures.

Device drivers

Character drivers
open, read, write and release flows, mutex-protected buffers, and safe copying to and from user space.
Block drivers
Request-queue processing, transfer scheduling and sector-level data movement.
Device lifecycle
An init, probe, register and release discipline with robust cleanup paths.

Networking

Stack
Application, transport, network, link and physical layers, with the full packet path.
Structures
socket, sock, sk_buff and net_device internals, used for throughput and observability tuning.
Related work
Custom protocol and distributed-systems projects build on the same low-level knowledge.

Security

Access control
DAC, MAC and POSIX capability boundaries, enforced through hooks.
LSM
Inode, file, task and socket hooks, and the SELinux-style flow of a policy decision.
Design stance
Security is part of the architecture from the start, not bolted on later.

IPC and synchronisation

IPC
Pipes, sockets, message queues, shared memory and semaphores.
Synchronisation
Spinlocks, mutexes, semaphores and RCU, for correctness under concurrency.
Outcome
Deterministic behaviour across processes, with race conditions under control.

System calls

Boundary
The user-to-kernel transition through the syscall entry path and dispatch-table routing.
Handlers
open, read and write style flows, including file-descriptor validation, permission checks and VFS operations.
Safety
Access checks and copy_to_user / copy_from_user patterns for controlled data transfer.

Areas of work

What the projects above draw on.

OS architecture

Full boot-to-userspace stacks, built from the machine-code level up: security, scheduling, memory and networking together.

  • Hybrid kernel architecture design
  • Memory management (NUMA, predictive allocation)
  • ML-optimised process scheduling
  • Custom file systems with journaling
  • TCP/IP stack from scratch
  • Capability-based security model

Compilers and language design

A complete compiler pipeline: a custom domain language with an integrated runtime, type inference and multi-target code generation.

  • Lexical analysis and LALR(1) parsing
  • Hindley-Milner type inference
  • Multi-pass optimisation
  • Register allocation by graph colouring
  • Custom Domain Language (CDL)
  • LLVM IR integration

Offensive security

More than eight years of red-team work across the attack lifecycle, from recon to post-exploitation.

  • Vulnerability research
  • Custom exploit development
  • APT simulation and detection evasion
  • Binary analysis and reverse engineering
  • Protocol-level attack research
  • Custom C2 frameworks

Defensive engineering

Security-first system design: anti-cheat architecture, hardened infrastructure, zero-trust implementation, and automated detection and response.

  • Anti-cheat system design
  • Zero-trust architecture
  • ML-driven threat detection
  • Response automation (SOAR)
  • CFI, ASLR and stack protection
  • Intrusion detection systems

Cloud infrastructure

Multi-cloud architecture on AWS, Azure and GCP, with GitOps pipelines, Kubernetes orchestration and cost optimisation.

  • Multi-cloud resource provisioning
  • GitOps CI/CD automation
  • Kubernetes on EKS, AKS and GKE
  • Infrastructure as code with Terraform

Distributed systems

Consensus and fault-tolerant architectures, with distributed storage.

  • Raft consensus implementation
  • Consistent hashing and sharding
  • Distributed cache coherence
  • Eventual consistency patterns
  • Read repair and anti-entropy
  • Byzantine fault tolerance

Languages

C, C++, Assembly (x86 and ARM), Rust, Python, Go, TypeScript, Java, C#, Bash and PowerShell, LLVM IR, and StrixLang, the language I designed.

Contact

GitHub and Discord are the two places to reach me.

Engagements

  • Security architecture consulting
  • Anti-cheat system design
  • OS and compiler engineering
  • Technical leadership and team building
  • Security tool development
  • Red team engagements
  • Code review and architecture assessment