Product engineer in Skopje. I build things where the guarantee is enforced by code or tooling, not by an instruction someone has to remember: the model chooses, code computes.
- sagaflow (npm): an embedded saga engine for TypeScript with zero dependencies. Workflows undo themselves, leave a record and announce themselves once. A TLA+ model of it found five defects, each documented with what closed it.
- load-planner-mcp: an OR-Tools CP-SAT solver behind an MCP server. The explain tool takes one opaque id, so the model can narrate a result but cannot originate a number, and a verifier rejects any figure the solver did not produce.
- biological-ui-arch (npm): 35 lint rules that enforce a tiered UI architecture at the linter, where it cannot be skipped.
- verify-arch (npm): a whole-graph gate for Medusa 2.x that catches the cross-file mistakes a per-file linter cannot see, such as modules that silently overwrite each other.
- 2ndm1nd-runtime: a local-first capture app and daily consolidation job for a personal vault on macOS. There is no model in the capture path, by architecture.
Also published: playwright-visual-diff-manifest, a manifest-driven visual regression harness, and geonosis, an agent-engineering toolchain (npm only; its source is private).
- npm-check-updates: #1662, merged.
- Void by Cloudflare: #440, merged.
- Cloudflare docs: #34386, open, with a minimal reproduction.




