Tiny Binaries
But can it run on a potato?...
Your entire portfolio — 22 pages, search engine, source code viewer, analytics dashboard, DCAA audit, govdocs — in an app smaller than a selfie.
Every binary. Measured. No Docker, no runtime, no cloud. One file per product. These are ARM aarch64 release builds compiled with opt-level='s', LTO, codegen-units=1, panic='abort', strip=true. Pure Rust.
Binary Size Leaderboard
| # | Project | Binary Size | Notes |
| 1 | call-shield | 48 KB | Zero deps, on-device call screening |
| 2 | aptnomo | 312 KB | Autonomous APT threat hunter — auto-kills cryptominers |
| 3 | exopack | 313 KB | Test framework — zero external test deps |
| 4 | provenance-docs | 328 KB | Docs + validation tooling |
| 5 | whyyoulying | 505 KB | Fraud detection engine |
| 6 | pocket-server | 1.01 MB | Static site server — your site on your phone |
| 7 | any-gpu | 1.5 MB | GPU tensor engine — AMD/NVIDIA/Intel/Apple via wgpu (bench example) |
| 8 | illbethejudgeofthat | 2.5 MB | Legal form builder + exhibit book |
| 9 | ronin-sites | 4.0 MB | Multi-tenant shop platform |
| 10 | cochranblock | 8.4 MB | This site — right now, serving this page |
| 11 | pixel-forge | 9.2 MB | AI sprite generator + diffusion models |
| 12 | kova | ~51.5 MB | Augment engine + local LLM inference |
Efficiency — KB per Function
Binary size divided by function count. Lower is tighter.
| # | Project | Functions | Types | LOC | Binary | KB/fn |
| 1 | pocket-server | 13 | 2 | 593 | 16 KB | 1 KB/fn |
| 2 | exopack | 32 | 7 | 1,559 | 313 KB | 9 KB/fn |
| 3 | whyyoulying | 21 | 21 | 1,870 | 505 KB | 23 KB/fn |
| 4 | pixel-forge | 184 | 37 | 11,032 | 9.2 MB | 51 KB/fn |
| 5 | illbethejudgeofthat | 40 | 44 | 6,208 | 2.5 MB | 63 KB/fn |
| 6 | cochranblock | 55 | 7 | 3,404 | 8.4 MB | 156 KB/fn |
Build Profile
Cargo.toml — release profile used across all projects
[profile.release] opt-level = 's' # size-optimized, keeps performance lto = true # link-time optimization — whole-program codegen-units = 1 # single codegen unit — best optimization panic = 'abort' # no unwinding overhead strip = true # remove debug symbols
No Docker. No container layers. No runtime interpreter. No JIT. The binary IS the app. Copy the file, run it, done.
Why This Matters
A 48 KB binary has a smaller attack surface than a Docker hello-world image (13 MB). A 8.4 MB binary replaces a cloud stack that downloads 500+ MB of node_modules. Every byte in these binaries was compiled from source — no vendored blobs, no pre-built shared libraries, no mystery code.
For federal procurement: SBOM is complete at build time. Every dependency is pinned in Cargo.lock. The binary is deterministic — same source, same output. Supply chain integrity by construction.