Available for hire

RJ Lopez
— Builder-Operator

I build local-first tools I can operate, verify, and recover.

Former cleanroom tech → self-taught Linux builder.

5 proof points Linux-first local-first Android/Kotlin Tauri Python Tailscale YubiKey

Operating principle

I do not treat AI output as truth. I treat it as a claim. A claim has to survive verification: deterministic scoring, local execution, repeatable tests, receipts, logs, human approval, and recovery paths.

VERITAS is the rule behind the work: local-first systems, deterministic validation, no unnecessary network dependency, human approval at irreversible steps, and documented failure modes.

Open-source proof

Upstream contributor to Linux desktop compatibility and Pop!_OS workflow fixes, with review-friendly PR discipline and reproducible verification notes.

Origin

The Clause of Chaos

January 2025

In December I herniated my back at work. In January, stuck at home trying to make money and stay useful, I started writing fiction designed to teach frontier models how to reason through verification instead of vibes.

The first real character was Arthur Keane, a Practical Magic Commission inspector walking into a floating castle and immediately checking landing-zone markings, containment leakage, load-bearing structures, documentation, and emergency descent systems. The wizard assures him everything is fine. Arthur's answer is the whole point:

"I'll need to verify compliance myself."

That became my operating principle: AI output is not truth until it survives verification. Everything I have built since follows that line.

How it shows up

Breakaway uses deterministic scoring and SHA-256 sealed proof.

Shell Trials validates commands inside a simulated learning environment.

Omega SMC records operation receipts instead of trusting invisible state.

coders-bible stays local, offline, and inspectable.

YubiKey/Tailscale turns recovery paths into part of the system, not an afterthought.

Breakaway Protocol — Proof I can ship

Zero-dependency credential engine, deterministic scoring, SHA-256 sealed, 2nd place VibeJam

Breakaway Protocol credential showing SHA-256 hash

SHA-256 sealed VibeJam #2

What it proves

public product instinct, frontend polish, deterministic credentialing, and a clean story strangers can understand quickly.

Failure mode

handles tampering via SHA-256 seal — any edit invalidates hash

Shell Trials — Proof I can teach systems

Terminal RPG that teaches Linux by doing, not reading

What it proves

Python, simulated shell behavior, educational design, command-line fluency, and learning deeply enough to teach it.

Failure mode

invalid commands don't crash — parser guides with why <cmd>

Omega SMC — Proof I can operate infrastructure

Android mesh command center for a private Tailscale operator network

Omega SMC Mission Control Android screen showing healthy mesh status and mission feed

actual phone-side view mesh healthy mission receipts

What it proves

Android/Kotlin, Room, Tailscale-aware infrastructure, local AI fallback, secure execution design, audit logging, and real operational ownership.

Failure mode

high-risk actions use proposal, preview, and queue semantics instead of arbitrary shell execution; phone-side mesh checks prevent desktop-only false confidence.

coders-bible-desktop — Proof I can package

Offline Tauri knowledge engine with 67,000+ fragments, zero cloud dependency

67k+

fragments

API calls

100%

offline

Tauri Rust SQLite local-first

What it proves

desktop packaging, local-first architecture, search UX, offline distribution, and deterministic no-network constraints.

Failure mode

works fully offline, no API keys to leak

YubiKey/FIDO2 + Tailscale Mesh — Proof I understand failure modes

Hardened Linux auth and recovery setup with tailnet-only SSH and closed inbound ports

# operator mesh — public inbound closed
 ┌─────────────┐   YubiKey + PAM    ┌──────────────┐
 │   laptop    │ ─────────────────► │ tailscale0   │
 │  recovery   │  ssh via tailnet   │  100.x.y.z   │
 └──────┬──────┘                    └──────┬───────┘
        │                                  │
        │  MagicDNS workflow                 │
        │  ufw: deny incoming                │
        │                                  ▼
        │                           ┌──────────────┐
        └──────────────────────────►│  Linux host  │
                                    │  FIDO2 login │
                                    │  SSH: tailnet│
                                    │  no public SSH│
                                    └──────────────┘

What it proves

PAM, Linux authentication, ufw, SSH hardening, Tailscale, MagicDNS workflows, recovery planning, and documentation.

Failure mode

no public SSH exposure; recovery paths rely on known tailnet devices and hardware-backed auth instead of broad password fallback.

Light Bridge / VERITAS Wallet v3.7

Hardware custody architecture concept, not presented as a shipped product.

Included as future architecture: dual-domain isolation, IR bridge thinking, e-ink verification, and hardwired confirmation controls. The value is the threat model and physical-isolation discipline, while the shipped proof points stay focused on working software and infrastructure I personally operate.

Interactive schematic

Click IR beams, hover photovoltaic cells, and test the kinetic gate.

Open full view

ASCII fallback sketch

====================================== PHYSICAL ENCLOSURE (TITANIUM CHASSIS) ======================================
|                                                                                                                 |
|   +---------------------------------------+               +---------------------------------------+             |
|   |            COMMAND DOMAIN             |               |            CUSTODY DOMAIN             |             |
|   |         (External Interface)          |               |             (Secure Element)          |             |
|   |                                       |               |                                       |             |
|   |  +---------------------------------+  |               |  +---------------------------------+  |             |
|   |  | Primary Power Input / Regulators |  |               |  | Isolated Photovoltaic Cell Array|  |             |
|   |  +---------------------------------+  |               |  +---------------------------------+  |             |
|   |                  |                    |               |                  ^                    |             |
|   |                  v                    |               |                  |                    |             |
|   |  +---------------------------------+  |   PHYSICAL    |                  | [Photons Only]     |             |
|   |  | Laser / LED Power Driver Array  |--|---AIR-GAP ----|------------------+                    |             |
|   |  +---------------------------------+  |   CHANNEL     |                                       |             |
|   |                                       |   (Milled     |                                       |             |
|   |  +---------------------------------+  |  Isolation    |  +---------------------------------+  |             |
|   |  | User Interface MCU / Parser     |  |   Slots)      |  | Secure Cryptographic Core      |  |             |
|   |  +---------------------------------+  |               |  +---------------------------------+  |             |
|   |                  |                    |               |                  ^                    |             |
|   |                  v                    |               |                  | [Local Bus]        |             |
|   |  +---------------------------------+  |               |  +---------------------------------+  |             |
|   |  | TX Infrared LED (Manchester)    |--|--[IR Beam]--> |  | RX Photodiode Receiver          |  |             |
|   |  +---------------------------------+  |               |  +---------------------------------+  |             |
|   |                                       |               |                  |                    |             |
|   |  +---------------------------------+  |               |                  v                    |             |
|   |  | RX Photodiode Receiver          | <=-[IR Beam]-----|--| TX Infrared LED (Manchester)    |  |             |
|   |  +---------------------------------+  |               |  +---------------------------------+  |             |
|   |                  ^                    |               |                  |                    |             |
|   |                  | [Local Bus]        |               |                  v                    |             |
|   |  +---------------------------------+  |               |  +---------------------------------+  |             |
|   |  | Static E-Ink Display Screen      |  |               |  | EPHEMERAL COURIER MODULE       |  |             |
|   |  +---------------------------------+  |               |  | (Volatile SRAM Scratchpad)      |  |             |
|   |                                       |               |  +---------------------------------+  |             |
|   |  +---------------------------------+  |               |                  ^                    |             |
|   |  | Kinetic NFC Loop Mechanical Gate |  |               |                  | [Boolean Relay]    |             |
|   |  | (Spring-Loaded Break Switch)    |  |               |  +---------------------------------+  |             |
|   |  +---------------------------------+  |               |  | Physical Tactile Confirm Switch |  |             |
|   |                                       |               |  +---------------------------------+  |             |
|   +---------------------------------------+               +---------------------------------------+             |
|                                                                                                                 |
===================================================================================================================