AI Command Central · Sovereign Systems Lab · Skåne, Sweden
Independent applied-AI lab and systems consultancy. Long-running autonomous agents with HippoRAG virtual memory paging, bare-metal WireGuard infrastructure, and 150ms autonomous defense—engineered on sovereign iron, privately delivered.
Subsystem Capabilities // Practices
Selective engagements. No account managers, no cloud bloat. One systems engineer with 40+ years behind a screen builds, hardens, and delivers.
Persistent bi-temporal memory, HippoRAG virtual memory paging, local-first inference, and sandboxed subagents that hold state across months.
Flat WireGuard meshes, dedicated bare-metal clusters, loopback-bound services, and surgical migrations off rented cloud.
Automated egress kill-switches, dual-LLM prompt injection quarantine, AppArmor sandboxing, and estates engineered to stay standing.
Process Manager // Active Fleet & SDKs
Every practice sold here is one the lab carries the pager for every day. Inspect the live applications, autonomous agents, and open-source SDKs below.
Continuous autonomous agent with HippoRAG virtual memory paging, wake-cycle gating, speculative DAG rollouts, and 259 tools.
Standalone TypeScript memory SDK featuring bi-temporal facts, rejected-value tombstones, and Jev decision routing.
Independent record label for AI artists: 20 signed acts, 217 releases, and 1,420 master recordings mastered at 24-bit in-house.
Pocket Android identifier for the sorting bench. Ranks 14 polymers by likelihood from cold physical observations with zero network permissions.
Engineering Schematics // Blueprint Inspector
Click any plate below to switch the active blueprint or open the high-resolution HUD Lightbox inspector.
Kernel Intelligence Feed // Working Notes
Primary-source field notes on Linux security, WireGuard meshes, agent memory decay, and autonomous systems.
Microsoft just launched a public preview of Defender for Linux desktops to sit alongside its Linux server agent. Why would anyone use Microsoft Defender to protect a Linux server in the first place? Given their history from calling Linux a cancer to running Azure on it, the long list of CVEs targeting Defender itself, and the power of open-source security audited by thousands of firms, it is a hard no from us.
Read dispatch →Microsoft just patched a record 1,413 vulnerabilities in a single month, including an actively exploited Windows zero-day. Most companies still think they are safe. They are far from safe. Today, anyone with a freshly patched Windows server in a homelab and a handful of GPUs running uncensored models can give a simple instruction—"gain access"—and play the zero-day lottery until it hits.
Read dispatch →It is strange that the companies building the most powerful AI warn that it could wipe out humanity. My theory: fear makes things easier to regulate, and regulation is a moat for whoever is already in the lead. Sincere belief and self-interest can point the same way.
Read dispatch →When an unsolicited awards pitch reached BitwareTunes artists, LunaSec reviewed the sender, collected what the organization had published about itself, listed what could not be verified, and drafted an advisory for human review. It handles most cases alone, with one immutable rule: if it ever hesitates, it escalates to a human before taking action.
Read dispatch →Operational Protocol // Selective Consulting
Send a short brief. If it interests me, you get a clear written scope and a fixed figure. Then private execution and clean handover on your hardware and accounts.
Infrastructure, security posture, or an AI system already in production. Every finding reproduced before it is reported.
Select audit shape →
Autonomous agents, memory architectures, WireGuard meshes, and custom software handed over documented and runnable.
Select build shape →
24/7 monitoring, patching, backup verification, incident response, and dedicated bare-metal hosting.
Select retainer shape →
One engineer builds and delivers. Zero subcontracting. 17 public hostnames on the estate · 9 WireGuard peers · L.U.N.A. v7 (197,000 LOC) · bwmem v0.13.0 on npm.
Direct Uplink
I read everything: commissions, architecture audits, collaborations, or a quiet hello. Replies come within two working days, in English.
