eBPF-Based Process Tracer
Muon is a high-performance, localised observability tool designed to bring instruction-level kernel tracing to the everyday developer's terminal.
Build notes +
- Built a Linux kernel-space process tracer in Go using eBPF, capturing syscall events across entire process trees with kernel-space PID filtering via eBPF hashtags.
- Zero-copy overhead on file and memory syscall workloads (416 on baseline), with exec-heavy workloads at 12.7% overhead — compared to perf trace's 67.5% and strace's 140%.
- Validated across 7 filtered apps with CPU frequency locked and scale-isolated — zero event losses.
- Designed asynchronous single-binary installation. No agents, no kernel modules, no configuration; attaches to any running process via PID in under one second.
Minimal OCI Container Runtime
A container runtime in ~1,200 lines of Go with no container libraries — just raw syscalls, man pages, and the OCI spec. Runs real Alpine containers end-to-end.
Build notes +
- Built an OCI container runtime from scratch (~1.2k LOC): six namespaces, spec-driven mounts, pivot_root isolation, and a full create/start/kill/delete lifecycle.
- Supervising init (PID 1) catches and forwards signals to the container process, since the kernel silently discards unhandled signals sent to namespace init.
- Trustworthy state via a parent/init readiness-pipe handshake and atomic write-then-rename state files.
- ~5 ms cold starts over 30 runs with locked CPU frequency and pinned cores, backed by a 125-test suite ~1.75x the size of the runtime itself.
Cryptographic File Vault
A CLI tool that secures sensitive files using AES-256-GCM envelope encryption. It deterministically generates the master encryption key and data encryption policies using Shamir's Secret Sharing (SSS) to ensure zero knowledge offline storage.
Build notes +
- Encrypted Google Tink for memory-safe data wrapping of massive files.
- Built a custom Shamir's Secret Sharing math engine from scratch to handle key sharding.
- Designed a custom binary metadata header (HRX2) for secure key reconstruction and seamless file encryption.
Programming Language
A custom interpreted programming language built from scratch in Python to understand language design fundamentals.
Build notes +
- Control Flow & Loops: Supports if/else/elif, while, and for loops.
- Functions: Added first-class support for named and anonymous functions.
- Types & Logic: Added stronger comparators and custom booleans (redefining to 'fact' and 'cap').