GitHub — Pigfox Open-Source Repositories

Repo Quarantine — Run an untrusted repository inside a disposable VirtualBox VM, so whatever the code does stays in a sandbox you throw away.

llm-evalkit — Evaluation harness for structured LLM outputs. Predictions are pre-registered and hashed together with the graders and the cases, so neither can be changed once a result has been seen; grading is deterministic functions only, and every case runs k times with all outputs kept.

EVM Wallet Generator — Generates EVM (Ethereum-compatible) wallet keypairs.

xlog — Structured logger. slog-backed, byte-stable output, 100% test coverage.

rust-wasm-calc — A fully-featured calculator built with Rust and WebAssembly, demonstrating comprehensive unit testing, high test coverage, and production-ready error handling.

rust-p2p-n-nodes — A Rust P2P example with N nodes communicating over TCP.

mmr-log — An append-only Merkle Mountain Range commitment log on Solana devnet whose account stays 1040 bytes at any length. Specification first, no_std crate, native program, CLI, and a measured compute-unit benchmark.

rust-load-tester — A fast, configurable HTTP endpoint load testing tool written in Rust. Designed for API and service testing with precise control over concurrency, duration, request counts, headers, authentication, and JSON payloads. Built on Tokio, Reqwest, and async Rust.

rust-lifetime-lab — Three Rust programs that deliberately do not compile, their Go equivalents that do, and a cargo xtask that runs both toolchains and records what each one said as JSON.

rust-move-lab — Three Rust programs that will not compile because a value was moved, a Go program that runs and shares the array instead, and a cargo xtask that captures the compiler's rejections and the program's own output as JSON.

rust-borrow-lab — Two Rust programs the borrow checker refuses, a third it accepts because the borrow ended at its last use, a Go program that runs all three shapes, and a cargo xtask that records which targets were refused and reads the accepted one's source off disk.

rust-send-sync-lab — Two Rust programs refused at a thread boundary, a third accepted once the types carry the guarantee, a Go program with a deliberate data race, and a cargo xtask that captures the race detector's report and normalizes the goroutine ids and addresses that differ on every run.

langdag-lab — Three LLM conversation trees built by driving the langdag library against mock providers with no database file and no network, canonicalized so two runs produce the same bytes, and a verify step that re-captures and byte-compares them against what is committed.

etl-lab — A stateless ETL pipeline that rebuilds its whole mapping graph from nothing every cycle and discards it again, with a seeded synthetic feed so any run reproduces exactly, a virtual clock so the suite never sleeps, and a coverage gate that is an equality at 100% rather than a floor.

slack-ai-lab — A Socket Mode Slack bot in Go that answers mentions with one Anthropic call, with both ends behind interfaces — the event source and the model — so the whole thing runs under test with no token, no socket and no network. Point it at your own workspace with two environment variables.

paginate — Pagination math and template-ready data for Go.

mcp-metered — Commercial scaffolding for a Model Context Protocol server: authentication, per-call metering against a pluggable credit store, rate limiting, and cost ceilings.

eth-bridge-go — A Go library and CLI for moving ETH across the OP Stack Standard Bridge. Same-chain transfers run on any EVM chain; deposits and withdrawals run between any L1 and any OP Stack L2 anchored to it, with bridge and portal addresses discovered from the chains at runtime rather than hardcoded. Verified live against Ethereum Sepolia ↔ OP Sepolia and Ethereum Sepolia ↔ Base Sepolia. Withdrawals cover the initiation leg and persist prove parameters; prove and finalize are not implemented.

sgp4-go — SGP4/SDP4 analytical orbit propagator in Go, with the element-set formats that feed it.

bench-lab — A multi-model evaluation harness: a fixed, versioned task suite graded entirely by code, with cost, latency and accuracy measured against predictions committed before the run.

cosmos-light-go — Replays Cosmos consensus and state proofs offline, from chain data captured once and frozen.

jsonld-go — Emits a site's shared schema.org identity — Organization, Person, WebSite, WebPage — as sibling JSON-LD scripts rather than one nested graph. Standard library only.

outstand-go — Standard-library-only Go client for the Outstand social-posting API. Verifies webhook signatures with a constant-time HMAC-SHA256 comparison and unmarshals the body only after it passes, decodes posts through a strict allowlist so the vendor's embedded per-network OAuth tokens are never lifted out, and carries per-app fan-out policy.

kafka-lab — A Kafka backpressure lab: throttle the consumer below the producer, watch lag climb, then open it back up and watch it drain.

rag-lab — A retrieval pipeline that runs on a laptop with no API key: local embeddings, pgvector, and a committed corpus of 93 pages. Publishes a graded retrieval result — 16 of 20 questions answered from the right page — with the question set locked before grading and all four failures shown rather than summarized.

render-env-sync — Keep local .env files and Render service configuration in step, without ever issuing the API call that deletes the difference.

rwa-tokenization-demo — Real-world asset tokenization with KYC-gated transfers on Base Sepolia.

zk-kyc-pass — Privacy-preserving KYC for tokenized assets — Groth16 credential proofs on Base Sepolia.

gas-optimization — The same contract written twice, unoptimized and optimized, raced against each other on Base Sepolia with real gas figures.

interest-rate-model — A kinked DeFi lending rate curve on Base Sepolia with every parameter immutable — eight invariants fuzzed by Foundry, Echidna and Medusa at 100% coverage.

mmr-verifier — The Solidity half of mmr-log: verifies the same Merkle Mountain Range proofs on Base Sepolia, held to the Rust reference by a differential gate that runs it over Foundry FFI.

oracle-health-explorer — Reads live Chainlink Data Feeds on Base Sepolia and names what is wrong with them — stale, non-positive, incomplete, future-dated or unreachable — with per-feed immutable thresholds and nine properties fuzzed by three engines.

zk-escrow — Upgradeable escrow settled by a zero-knowledge proof of delivery, with an AI arbiter ruling on disputes — on Base Sepolia.

ai-parametric-insurance — Parametric insurance on Base Sepolia whose claims are adjudicated by independent language models signing from separate keys, with the evidence hash committed before any verdict exists and the model, prompt and evidence hashes published on chain with each one.

deposit-dispute — A rental security deposit split per line item on Base Sepolia, where three pinned models spanning more than one vendor answer only whether the landlord established each deduction and never name an amount — the schedule is fixed at deployment and the contract computes the split and its cap.

solidity-pipeline — The verification standard every contract above is held to: build, test, 100% coverage, static analysis, and two property fuzzers against one shared invariant file.