Proof of work · continuously maintained

Build Record

Everything below is work that has actually been built and shipped, with each system described by what it does and where it runs. It changes when the systems do: new work is added and retired work is removed.

Public and deployed work is shown in full. Private systems are described at an architecture level — no secrets, hostnames, or credentials.

Flagship Systems

The two systems that carry the most weight: the agent infrastructure and the product it is proven against.

Control Plane

Private — architecture-level detail only
private · Go / Postgres / React 19

A self-hosted AI orchestration stack, now split into standalone repos: the Mesh kernel (a Go/Postgres scheduler and authority), a Chrome MV3 browser bridge, a multi-agent runtime, and a React operator console, routing work across Claude, Codex, Gemini, and Antigravity CLI runners.

  • Merge-queue lander: lease → rebase → verify-gate → land, with an atomic verified-head check and gated auto-apply.
  • Counsel-of-models: multi-model dispatch with a consensus record for high-stakes decisions; Ed25519 JWT component auth.
  • Personal Event Log: observations, attention windows, voice commands, and screen captions correlated in Postgres views.

Sitelayer

layer.bid →
in production (pilot) · React 19 / Postgres 18 / XState

A full bid-to-closeout construction-operations platform for exterior cladding contractors, hardened from prototype to a DigitalOcean platform in production with its first contractor customer.

  • Blueprint takeoff canvas on a ported PDFium renderer, plus AI-assisted quantity takeoff.
  • Deterministic workflow state machines (billing, estimates, payroll, crews, QBO sync) on a leased Postgres outbox queue.
  • Row-level security, QuickBooks OAuth with HMAC webhooks, and immutable-image CI/CD.

The Rest, by Capability

Agent infrastructure, products, the attention substrate, ontology research, and the fleet backbone.

Agent Infrastructure

The control plane, deliberately decomposed into standalone, versioned repos in a May 2026 extraction + governance pass.

console-ui

private

Operator dashboard grown 0 → 48 tab views (~21k lines TSX): dispatch, fleet telemetry, kanban with live polling, research, quota ledger, ontology. Full TypeScript-strict rollout + boundary-doc enforcement.

agent-cli

private

The extracted multi-agent runtime: steerer fan-out, a pane-wakeup watchdog that detects and unsticks frozen tmux panes, a 10-hook lifecycle framework, OTLP telemetry, and account-credential multiplexing.

browser-bridge-sidecar

semi-public

Standalone Fastify sidecar bridging a Chrome MV3 extension to mesh: tab-lease APIs, a capture-modal pipeline with HMAC ingest, per-dispatch research witnesses, and a 16-row version compatibility matrix.

fleet-ops

semi-public

Fleet deploy + topology orchestration: canonical topology for a 6-box fleet, an 11-repo release-train catalog, ordered 4-phase deploys, health monitoring with failover, and a portable package planner.

operator-types

public

Shared TypeScript contracts (capture envelope, observation events, HMAC headers) consumed by 9 repos — a single source of truth for cross-component data shapes.

Also: llm-accounts, capture, emacs-context, operator-sdk, research-pipeline.

Products

Public and self-hosted product surfaces beyond the flagship platform.

live

This site and taylorsando.com, plus 10 Canvas/WebGL ecosystem simulations, each on its own subdomain.

Chess Trainer

private · Tailscale

Self-hosted chess trainer built in 18 days: a pool of 4 warm Stockfish processes, multi-model LLM move coaching with an LRU cache, an adaptive Lichess-puzzle picker, and a sandboxed systemd service.

chat-pool

private

Self-hosted multi-user AI chat for a small trusted group (LibreChat + LiteLLM behind Cloudflare Access) with per-user spend caps and a subscription-ledger / route-decision API.

Attention & Observability

A Personal Event Log substrate that correlates what the operator says, sees, and does into one queryable stream.

voice-tools

private

Always-on speech-to-text daemon writing HMAC-signed observations to mesh, an attention-window rendezvous protocol with a race-safe generation guard, and a voice-command reactor that fires local handlers.

screen-capture

private

Continuous multi-monitor capture with dual HLS hot/cold tracks, focus tracking, a host-local API, and a nightly AI archive-captioner running on a local GPU.

sando-tracker

private

Physical-space tracking that fuses UWB positioning, IMU head orientation, and webcam face detection to infer which monitor has the operator's attention and drive window focus.

Research & Ontology

The vocabulary and belief layer that keeps the rest of the work coherent as it changes.

org

private

The operator knowledge substrate: a goal registry, a four-layer decision hierarchy, structured briefs for 8 sub-projects, and a research flywheel that turns open questions into reviewed syntheses.

digital-ontology

private

A 149-document corpus defining a layered ontology of digital life, with a typed four-rung abstraction backbone, a CLI slice-validator, and a formal olog fragment typing the event pipeline.

Tooling & Fleet Backbone

The infrastructure that makes a one-person, agent-assisted fleet operable.

dotfiles

private

GNU-stow dotfile management: profile-isolation-aware agent hooks, steerer autolaunch, capture/whisper systemd units, git push guards, and cross-agent session markers — the operational backbone of the whole fleet.

spacemacs-config

private

Custom Spacemacs layers for mesh integration: org-link types for mesh and proof surfaces, shell lifecycle event forwarding, attention-window binding, and a live key-coach HUD.

misc-plugin

private

A clean, security-conscious first-party Chrome extension (playback speed, voice-repair EQ, per-site hotkeys, per-machine identity) with zero external network calls.

How this record is kept

Each entry describes what a system does and where it runs today. Retired projects come off this page when they are retired rather than lingering as history. Cloned or forked repositories with no original engineering, and private repositories holding financial records or scraping tools, are left out entirely.