Notes on building a private company OS.
Essays on local-first software, zero-knowledge architecture, and giving an AI real work, without your secrets.
n8n shipped a CVSS 9.9 RCE through expression eval. The lodos workflow engine can't have that bug, there's no evaluator anywhere to inject into, and a build-time grep keeps it that way.Read article 
Most secret managers expose getSecret(name), and the plaintext lands in the AI's transcript. The lodos schema makes that exchange structurally unanswerable, the AI cannot see a secret's value, and the build enforces it.Read article 
Most company wikis rot the moment you stop tending them. The Karpathy LLM-wiki pattern turns a knowledge base into something your AI keeps alive. Here's how.Read article 
The cloud became the default home for everything you own. Local-first flips that back: your data lives on your device, works offline, and answers only to you.Read article 
The runtime secret-injection pattern that lets lodos charge a customer with your Stripe key, while the key never enters the AI model's context.Read article