Work
Most of what I build is published under one of two organizations. Source for both lives on gitbay.
1. krz
krz builds native apps and self-hosted, privacy-respecting frontends. Local-first data, few dependencies, no ads, no tracking. Source: gitbay.org/krz.
1.1. Apps
- Hutch: a native iOS client for SourceHut.
- Domain Dig: DNS, TLS, email security and ownership for any domain.
- Day by Day: an educational iOS app with learning games for young children.
- Moonrise: the sky tonight, the solar system, the Sun and launches.
- orgstar: an Org mode editor and agenda for Mac, iPhone and iPad.
- gitbay: a native iOS client for gitbay.
1.2. Tools
- orgo: the org-mode static site generator that builds this site.
- nfogen: generates scene-style NFO files.
- SkunkyArt: a privacy frontend for DeviantArt that works without JavaScript.
krz also hosts public frontends and tools: krz.sh/services.
1.3. Writing about krz
- Announcing Hutch: An iOS Client for Sourcehut
- Small Wins on the App Store
- Forking SkunkyArt
- I Built My Own Org-Mode Static Site Generator
- Generating Scene-Style NFO Files in 2026
2. Audit Labs
Audit Labs makes open-source tools for audit evidence: collect it from real systems, seal it tamper-evident, map it to SOC 2, ISO 27001 and NIST controls, and measure how much of a framework it covers. The tools are written for auditors. Source: gitbay.org/audit-labs.
- audit-tools: scripts that collect evidence from cloud platforms, GitHub, databases and operating systems.
- evidence-seal: tamper-evident seals and chain of custody for evidence packages.
- audit-report: turns evidence into control-mapped reports.
- control-coverage: scores evidence against a framework's full control catalog.
- gh-attest: a self-hosted GitHub App that records security settings as evidence.
The walkthrough runs the whole chain end to end.