Architecture & Techniques

32 named contributions across 15 projects. Inventions, architecture patterns, techniques, and production engineering. Honest classification — we don't call architecture an invention.

Audit the source — github.com/cochranblock

Standing On — Giants That Predate Me

Nothing here is wholly mine. Every named contribution below sits on decades of public-domain, copyleft, and open work. This section scales as I learn more prior art. If I'm missing somebody who deserves credit, tell me and I'll add them. No gatekeeping.

Patron Saints of Solo Shipping

Fabrice Bellard — QEMU, FFmpeg, TinyCC, QuickJS, BPG, LTE-in-software. The gold standard of one human shipping civilization-scale tools. Every small-is-possible argument I make traces back to him.

Justine Tunney — Cosmopolitan libc, APE (Actually Portable Executable), Redbean. Single-binary-runs-everywhere is her thesis, I'm running it in Rust. Public-domain / ISC licensing lineage.

Bruce Perens — BusyBox (1996). Every embedded Linux box in the world has his work. Proved single-binary-is-enough decades before the cloud forgot.

Daniel J. Bernstein (DJB) — qmail, djbdns, NaCl, curve25519. Dedicated crypto to the public domain before it was legal to export. My zero-cloud stance is downstream of his discipline.

Unix + Systems Foundations

Ken Thompson + Dennis Ritchie — Unix. The pipe (|). The philosophy of small tools composed together. Everything I ship is a variation.

Rob Pike — Plan 9, Go, Unix philosophy evangelism. Go's single-binary default influenced my Rust-single-binary default.

Nicholas Marriott — tmux creator. tmuxisfree literally cannot exist without tmux. Whole sponge mesh pattern lives on top of his session/pane/window substrate.

Linus Torvalds — Linux, git. Git enables Timeline of Invention; every commit is a free legally-notarized timestamp courtesy of Linus.

Van Jacobson — TCP congestion control + exponential backoff (1988). Sponge mesh retry timing is his work with jitter bolted on.

Crypto + Signed Artifact Lineage

Phil Zimmermann — PGP (1991). Individual cryptographic sovereignty. Detached-signature pattern lives in NanoSign.

BLAKE3 team — Jack O'Connor, Jean-Philippe Aumasson, Samuel Neves, Zooko Wilcox-O'Hearn. The hash NanoSign uses. I'm a user, they did the math.

Cypherpunks — 1990s collective. Established "write code, ship it, cryptography is a civic right." My 36-byte signed safetensors is their 2026 echo.

Sigstore team (Linux Foundation, Google) — modern signed-artifact infrastructure. NanoSign is a smaller counter-proposal; without their work I wouldn't know what I was counter-proposing against.

Licensing

Richard Stallman — GPL, FSF (1980s+). I don't copyleft. But "software is civic infrastructure" is downstream of his framing whether you like him or not.

Jamie Wilkinson — Unlicense creator. Influenced early licensing decisions.

Sam Hocevar — WTFPL creator. Same spirit, different wording.

Creative Commons team — Lawrence Lessig, Aaron Swartz, others. CC0 influenced early work. Licensing has since moved to All Rights Reserved.

Distributed Systems + Retry Patterns

Avizienis et al. — N-version programming (1985). Triple Sims is a 3-version-programming descendant, sized for dev tooling instead of avionics.

Brent Chun — pssh / parallel SSH (2003). C2 swarm orchestration rhymes with pssh; I added per-node tokenized commands on top.

Vint Cerf + Robert Kahn + Scott Burleigh — Delay Tolerant Networking, CCSDS Bundle Protocol, Interplanetary Internet. Sponge mesh broadcast across rate-limited panes maps 1:1 to their spacecraft network protocol.

Space Shuttle AP-101 team (IBM Federal Systems, 1970s-80s) — primary/backup flight computer comparison. Triple-deterministic-or-merge is their pattern applied to CI.

AI + Mixture of Experts + Agents

Jacobs, Jordan, Nowlan, Hinton — original Mixture of Experts paper (1991). My pixel-forge MoE cascade is a straight descendant of their gating network idea.

Noam Shazeer et al. — Sparsely-Gated MoE (2017). Modern revival that made MoE production-scale.

Yao et al. — ReAct framework (2022). Reasoning + Acting loop. Kova's agentic tool loop is ReAct with local-signed-LLM + 13 tools.

Policy note: acknowledgments in this section are limited to academic prior art and papers. Unverified open-weights runtimes and projects that load unsigned models are explicitly not listed as Company influences — KNOXAI certifies models; we do not build on the unverified substrate we exist to audit.

Design Patterns + Classical CS

Gang of Four — Gamma, Helm, Johnson, Vlissides (1994). Adapter pattern powers my multi-tunnel abstraction. They wrote it, I applied it to tunnels.

John Boyd — OODA loop, military C2 theory. The mental model behind C2 swarm orchestration is his.

Doug Engelbart — "bootstrapping" (1962). Self-converging flywheel is his intellectual grandchild.

Eric Wong — Unicorn (Ruby, 2009). First PID-relay pattern for zero-downtime restart I know of. Gemini Man is this pattern with the binary as its own supervisor.

Contemporary Fellow Travelers

People currently pushing adjacent red pills, whose work informs mine without being prior-art in the patent sense:

Mitko Vasilev — own your AI stack end-to-end. Same gospel, local-AI chapter.

DHH (David Heinemeier Hansson) — "We're leaving the cloud" series. Business-side case study for my Zero-Cloud Architecture pitch.

George Hotz — tinygrad, anti-CUDA. Hardware sovereignty. any-gpu is adjacent.

Bryan Cantrill — Oxide Computer Company. Rack-scale sovereign infrastructure. I'm the solo-founder tier of his thesis.

Nicolas Chaillan — former USAF CSO. Sovereign velocity inside DoD. His 2021 resignation letter articulated the problem I'm solving for SBIR-tier shops.

Drew DeVault — SourceHut, AGPL purist, anti-cloud. Principled opponent on licensing. Debate with him sharpens my argument.

Corey Quinn — Duckbill Group. Cloud cost critique. I respect the lane and don't claim his title.

Cory Doctorow — enshittification theorist. Consumer-side framing for the same fight I wage on the developer side.

Inventions — No Known Prior Art

Fish Tank Starfield

Project: cochranblock · Date: April 8, 2026 · Commit: 11c115f

GPU-zero-cost animated starfield using a static CSS mask with punched-out star holes over a screen-sized background-position loop. Standard approach: oversized element (200% viewport) with transform: translate3d — allocates 4x GPU memory. Fish Tank approach: element is 100% viewport, gradient is larger via background-size: 200%, animation is background-position only — compositor-only, no GPU texture reallocation.

Result: 72fps, 0.0000 CLS, 176ms first paint. Works on every Android phone. 1/4 the GPU memory.

Origin: Scrolling fish tank decoration from an Arizona garage sale, circa 2006-2010.

P13 Compression Mapping

Project: kova · Date: March 2026

Every function, type, and field in the codebase is tokenized to a compressed identifier: f0-fN (functions), t0-tN (types), s0-sN (fields). AI context consumption drops 75% — local models with 8K context windows can do work that previously required 100K+ cloud models. 368/368 symbols compressed in production.

Why it's novel: Codebases are compressed for humans (short names) or machines (minification). Nobody tokenizes for AI context budget. This is a new axis of compression.

NanoSign Model Integrity

Project: pixel-forge · Date: April 2026

36-byte BLAKE3 signature embedded in every AI model file (.safetensors). Verified at load time before any inference. Unsigned or tampered models are rejected. The signature travels with the file — no certificate authority, no network call, no infrastructure.

Why it's novel: Model signing exists (Sigstore, Notary). But those require infrastructure — registries, certificate chains, network access. NanoSign is 36 bytes appended to the file. Verify with one hash. Works air-gapped.

Sponge Mesh Broadcast

Project: kova / tmuxisfree · Date: April 2026

Rate-limit-aware broadcast across 28 concurrent AI agent sessions. Fast first pass sends to all panes. Collect failures (rate-limited panes). Retry with exponential backoff (10s, 20s, 30s, 40s, 50s). The mesh absorbs rate limits like a sponge — soaks up the failures and wrings them out on retry.

Why it's novel: Load balancers retry failed requests. But this retries failed AI agent dispatches across a tmux fleet with per-pane cooldowns and rate-limit detection via string matching on pane output. Nobody orchestrates AI agents through tmux panes with a retry mesh.

Architecture Patterns — Original Combinations of Known Techniques

Zero-Cloud Single-Binary Architecture

Project: entire portfolio · Date: 2026

One Rust binary embeds HTTP server, database (sled), routing, templates, static assets, compression, and TLS config. Deploy is a streaming pipe: ssh bt 'cat binary' | ssh gd 'cat > .new && mv .new binary'. No container, no orchestrator, no config file, no asset directory. The binary IS the infrastructure.

Prior art: Single binaries exist (Caddy, BusyBox). Pipe deploys are Unix fundamentals. The architecture is the combination: binary with everything embedded + streaming pipe deploy + self-managing PID relay + zero external dependencies. We haven't found this exact stack elsewhere.

Gemini Man Pattern

Project: rogue-repo · Date: March 2026

Zero-downtime binary self-replacement. New binary starts, reads old PID from lockfile, sends SIGTERM to old process, binds the port via SO_REUSEPORT, writes its own PID. The old process dies gracefully. The new one takes over. No service manager, no systemctl, no container orchestration.

Prior art: Unicorn (Ruby, 2009) does PID relay. Nginx does master-worker handoff. What's different: those need an external supervisor. This binary manages its own lifecycle — the binary IS the supervisor.

Named after: the 2019 film Gemini Man.

Self-Converging Flywheel

Project: entire portfolio · Date: April 2026

A development architecture where each cycle reduces external AI dependency. Stage 1: development-only scaffolding against unverified models (never in production path). Stage 2: tools run locally against signed, verified models only. Stage 3: system trains on its own data. Stage 4: system tests itself. Stage 5: system deploys itself. Stage 6: system discovers its own work. Production inference paths accept signed models only — the development scaffolding is dismantled before any shipping binary is cut.

Prior art: Self-improving AI is a research concept. What's different: a concrete 6-stage convergence with working code at each stage, not a paper. Named ratchets (techniques that permanently reduce dependency) with commit-level provenance.

Current stage: 2 of 6. Stages 3-6 partially implemented.

P26 Moonshot Frame — Civilizational-Stakes Review

Project: every repo · Date: April 2026 · Canonical template: MOONSHOT_FRAME.md

A review protocol applied before every merge, push, and deploy. Asks one question: "If this code / pitch / document were the foundation of a civilizational-scale outcome, would it still hold up?" The target outcome shifts with context (spacecraft, FCA audit, hostile evaluator, forensic investigator), but the five forces are universal: typed where possible, bounded where unbounded, observable where silent, explainable where obvious, reviewer-friendly where shortcut-friendly.

In action: Openbooks JSON parser v1 (string split on "date":", silent failures, no pagination) failed Moonshot Frame. v2 (typed GhCommitEnvelope / GhCommit / GhSignature, typed FetchError, RFC 5988 Link pagination, 20-page safety cap, committer.date not backdate-able, visible errors via eprintln) passed. Same pattern applies to any wire format: telemetry, safetensors, CCSDS frames, AI tool calls.

Prior art: Code review checklists exist. DO-178C review criteria exist. Aerospace and automotive qualification processes exist. What's different: a single-question frame that scales from a one-line commit to a twenty-page proposal, with deterministic trigger ("good enough for me" is the trigger to apply), public template, and a shield badge repos can earn. Pairs with NanoSign + Timeline of Invention as the Cochran Block quality stack.

Apply when: the current version feels "good enough for me." That phrase is the trigger. Apply double under time pressure — that's when regret compounds.

P27 Diamond Rust Binary Architecture — Continuous Compression Discipline

Project: every Rust repo · Date: April 2026 · Profile template: diamond-profile.toml

Carbon + sustained pressure + geologic time = diamond. Code + sustained compiler pressure + release discipline = diamond binary. Every build is a compression opportunity. Every release is another pressure pass. A binary that stops shrinking has stopped learning. A binary that grows without justification failed a merge.

Two profiles, one discipline. P27 ships in two variants because a laptop binary serving requests has a different pressure target than a CubeSat binary flying on-orbit.

[profile.diamond] — speed-Diamond for laptops, servers, request-serving binaries: opt-level=3, lto="fat", codegen-units=1, strip=true, panic="abort", overflow-checks=false, debug=false, incremental=false. Binary grows 10-30%, hot paths run 15-30% faster. Build: cargo build --profile=diamond.

[profile.diamond-edge] — size-Diamond for phones, edge compute, LoRa mesh nodes, embedded, spacecraft, on-device AI: same settings except opt-level="s". Binary shrinks 10-25%, hot paths slightly slower (still fast because LTO is still fat). Build: cargo build --profile=diamond-edge.

Rule of thumb: if the binary ships to more than ~10 machines, lean size-Diamond. If it serves more than ~10 req/sec on a single machine, lean speed-Diamond. Optional post-build: upx --best --lzma for 50-70% more compression on binaries destined for non-AV-scanned distribution.

Geology of the stack:

  • Interpreted scripts → wood (flammable, bulky)
  • C/C++ with runtime deps → coal (burns hot, cracks under load)
  • Containerized stacks → sandbags piled up (looks solid, falls over)
  • Bare Rust binaries → graphite (cleaner than coal, still soft)
  • Rust + P27 discipline → diamond (crystalline, dense, sealed)

Geology report per release: record binary size to binary-sizes.log every release. Binary should shrink or stay flat over cycles. Growth requires justification. The log IS the pressure curve.

Prior art: binary-size optimization is a decades-old concern (1980s embedded systems, demoscene 4K/64K intros, BusyBox, sqlite single-file amalgamation). What's different: a named Rust-specific discipline, continuous rather than one-shot, with a geology metaphor that maps carbon-to-diamond onto Rust's compilation pipeline, a shipped profile template anyone can paste, and a shield repos earn by proving the geology log.

Does not collide with Caltagirone's Diamond Model of Intrusion Analysis (2013) — his Diamond is about how attacks work (Adversary / Capability / Infrastructure / Victim). Ours is about how binaries compress. Different domains, both happen to use the word.

Techniques — Original Application of Existing Concepts

Triple Sims

Project: exopack · Date: March 2026

Run the full test suite 3 times. All 3 must produce identical results. Not "it passed" — "it passed identically three times." Catches flaky tests, race conditions, non-deterministic behavior, and timing-dependent bugs that pass once but fail under load.

Prior art: Flaky test detection exists. Running tests N times exists. What's different: triple-deterministic as a hard merge gate, not a diagnostic. If it can't pass 3 times identically, it doesn't merge.

Deployed: 6+ production projects via exopack test augmentation.

MoE Cascade Pipeline (Cinder → Quench → Anvil)

Project: pixel-forge

Three diffusion models at increasing fidelity. Cinder (1.09M params) runs on anything. Quench (5.83M) needs a GPU. Anvil (16.9M) needs a good GPU. Mixture-of-Experts routing picks the right model for available hardware. Original application of MoE to tiered pixel art diffusion.

Agentic Tool Loop with Context Compaction

Project: kova

LLM calls 13 tools (read/write/edit/bash/glob/grep/review) in an autonomous loop until the task is done. At 80% context budget, the agent summarizes its own prior work to free tokens. The compaction is LLM-powered, not truncation — key decisions survive.

Multi-Tunnel Abstraction

Project: approuter

One reverse proxy API that abstracts Cloudflare Tunnels, ngrok, Tailscale Funnel, Bore, and localtunnel. Swap tunnel providers without changing application code. Adapter pattern applied to tunnel infrastructure.

C2 Swarm Orchestration

Project: kova

Distributed build/test/deploy across 4 worker nodes via SSH with tokenized command protocol (c1-c9 for node ops, x0-x9 for cargo, g0-g9 for git). Nodes work in parallel, output streams with per-node prefix. Military C2 concepts applied to software development.

Production Engineering — Solid Work, Not Inventions

Good engineering that shipped real products. Not claiming novelty — claiming execution.

Pure Rust ISO 8583rogue-repo — Financial message builder without C bindings
Single-Binary ESIGN Waiveroakilydokily — 7-year retention, gzip archive, one executable
Zero-JavaScript Architectureoakilydokily — Server-rendered HTML, no client JS
DoDI 5505.02 Rule Enginewhyyoulying — 8 fraud detection rules mapped to DoD regs
GAGAS Referral Exportwhyyoulying — Audit standard output format
Sub-ms Call Screeningcall-shield — 22 spam + 14 legit patterns, 360KB binary
RSSI/Battery/Hop Mesh Routingghost-fabric — Multi-factor LoRa node scoring
Phone-as-Web-Serverpocket-server — Serve a website from an Android phone
Load-Balanced Gov Scoutwhobelooking — 8 federal APIs with rate-limit rotation
Any-GPU Tensor Engineany-gpu — One WGSL codebase, 4 GPU vendors
Visitor Fingerprint Pipelinewhobelooking — CF → rDNS → /24 neighbor scan
Test Binary Augmentationexopack — Same binary for prod + test, feature-gated
Visual Regression Orchestratorexopack — Screenshot comparison for CSS changes
Per-User Theme Editorronin-sites — JSON theme engine with live preview
30-Second Voice-to-Stickerwowasticker — Dictation to sticker in the drive-through
Hybrid Class Conditioningpixel-forge — 10 super-categories + 12 binary tags
Provenance Docs Frameworkprovenance-docs — TOI + POA as reusable template
Auto App Registrationapprouter — Products self-register with the reverse proxy

Total: 4 inventions, 3 architecture patterns, 5 techniques, 18 production engineering contributions across 15 Rust projects. All with commit-level provenance in each project's Timeline of Invention.

View All Source Code Capability Statement