ARABA STACK

The Stack — build ledger

Everything I build, logged as I ship it.

The running record of one operator's work in the categories where AI touches money and memory. This page shows. olurabian.com sells.

StatusShipping
RailsMoney · Memory
Ships24 logged
Updated2026-09-10
#DateRailShipStatus
September 2026
24 Money

The blackbox demo tells the whole truth now ↗

Both live demos, the one in the repo and the hero on olurabian.com, hashed a shape the package stopped using in August. Now they hash the receipt envelope byte for byte, and a test proves it against the real package every time the suite runs. One new button too. Drop the last record, press verify, and it stays green. That is the one edit a chain cannot see on its own, and the page says so instead of hiding it, with a link to the witness that closes the gap. The whole-branch review caught the page lede still claiming the opposite. Fixed before it shipped.

Live
23 Money

deadlatch.dev/app, the hosted watch ↗

The watch leg now has a home. Sign in, make a project, paste three lines into a broker, and every flag the monitor raises lands on a page with the receipt that caused it, the window it was judged in, and one alert email on the first flag after a quiet period. Only flags travel, the receipts stay with you. The reference broker on Fly was the first customer tonight. Five $12.50 spends inside ten minutes, one payee-velocity flag at seq 16 on the next tick, on the dashboard a second later. The gate on the real database caught one silent path, an alert with nobody to send to said nothing, and now it says so on the project page.

Live
22 Money

purse-broker 0.3.0, the monitor watches the live chain ↗

A third process in the broker image reads new receipts every minute, judges each one once against a sliding window with four built-in rules, stores every flag beside the receipts before any push, and sends only the flags to a Deadlatch project, or to a file when there is no key. The whole-branch review caught a rule of mine that would have flagged every correct x402 settlement, because a grant is a ceiling and the vendor names the price. It also caught a readiness promise the code did not keep, so lag is now a number on the index and a gate. Running on the Fly reference deployment beside the witness.

Live
21 Money

Tripwire 0.2.0, the watch leg reads the live record ↗

Until now the watch leg was a scanner you ran before shipping. The new monitor subpath reads the receipt chain as it grows, judges each new record once against a sliding window with the same deterministic expectations, and pushes only the flags. The cursor moves only after the sink confirms, a flag whose push failed stays inside the monitor and goes out again with the same id, and a rebuilt window never judges a record twice. The whole-branch review caught a flag that could be stranded when its verdict flipped on replay, which is the kind of seam a per-task review cannot see. Zero dependencies, 80 tests, on npm.

Live
20 Money

The witness, the chain head anchored to a public log ↗

A hash chain in your own database is tamper-evident to you and meaningless to everyone else, because whoever holds the log can rebuild it. The receipt package gained an anchor subpath that commits the head to Sigstore's Rekor v2 transparency log and verifies the reply offline with plain node crypto, RFC 6962 inclusion proofs and a checkpoint co-signed by three independent witnesses. The broker image gained a witness process that anchors the head every five minutes with its own key and serves the anchors read-only. The reference deployment's real head sits at log index 101844748, and a sceptic verifies it with npx receipt-verify, two public keys, and nothing from me.

Live
19 Money

@olurabian/audit, the Agent Payment Security Audit as a runnable ↗

The eight-dimension diagnostic that lived as a prompt, rebuilt as a deterministic engine with no model in the loop. Nine questions, four verdicts per dimension, blast radius in the team's own numbers, and a shortest path that closes every open dimension. Runs as npx @olurabian/audit or in the browser at deadlatch.dev/audit, and nothing leaves the machine. The final review found that a four-step cap could name a breach and hand over a path that never closed it, so the cap went and a test over all 255 open-dimension combinations holds the line.

Live
18 Money

purse-broker, enforcement mode as a container ↗

Purse packaged as an image on GHCR. One agent port with HTTP and MCP, a token-protected admin port for approvals and chain verification, receipts in Postgres, telemetry on by default with a Grafana dashboard, and a wallet signer that refuses any challenge naming a different chain, token, or scheme than it was configured for. The final review caught a vendor-chosen mainnet signature before the tag. From docker compose up to a verified chain in ten minutes.

Live
17 Money

@olurabian/receipt, one verifier for the stack ↗

The hash-chain engine Purse and blackbox each carried as their own copy, extracted into a zero-dependency package. Purse 0.3 and blackbox 0.2 now emit the same receipt envelope, Tripwire and deadlatch-otel read it, and anyone can verify a chain with plain SHA-256 and nothing from me. The docs state the one edit a chain cannot see on its own, truncation at the tail.

Live
August 2026
16 Web

olurabian.com, the Deadlatch stack ↗

The homepage rebuilt around one category. Purse, blackbox, and Tripwire fold into a single Deadlatch block, enforce, prove, watch, and a new Tripwire page ships alongside the Purse and blackbox pages. Three packages now read as one stack.

Live
15 Money

Deadlatch deadlatch.dev ↗

The open runtime governance stack for AI agents. Purse, blackbox, and Tripwire under one name, enforce, prove, watch. A live site with an in-browser demo backed by a real policy engine and a genuine SHA-256 hash chain. Open, and verifiable outside the tool.

Live
14 Money

Tripwire ↗

A read-only scanner that catches the action that looks fine and is not. Declare what must always be true, and it flags every action that completed and returned ok but broke a rule, against your inputs and adversarial ones. The watch leg. @olurabian/tripwire.

Live
July 2026
13 Money

blackbox ↗

A tamper-evident flight recorder for AI agents. Every action is hash-chained, so altering the log breaks the chain at exactly the record it touched. An in-browser SHA-256 demo proves it, running the real algorithm. The prove leg. @olurabian/blackbox.

Live
12 Money

Recovered Revenue Audit

An engine that reads a Stripe account read-only and surfaces revenue already earned but never collected. Failed-card churn, discounts that should have ended, lapsed trials, unanswered disputes. Six checks, validated against live Stripe, out as a one-page report. Late money sits on a report. Lost money does not. This finds the second kind.

Built
11 Web

olurabian.com/work

The web studio, positioned. Selected work, the craft-is-law point of view, and a four-rung offer ladder. Editorial by default, built to fit any brand.

Live
09 Skill

research-scout

A skill that turns any topic into curated, credible evidence, then wires it into the vault as graph-native source nodes. Takes the few real papers, kills the rest.

Built
08 Skill

predictive-modeling

Applied machine learning for business tables. Frame, model, evaluate honestly, ship a score, a forecast, or a flagged list. The modeling layer behind the receivables work.

Built
06 Money

Purse ↗

The enforcement point an AI agent's payments pass through. Hard limits, human approval, a tamper-evident log, and a runnable x402 proof. Open source, @olurabian/purse.

Live
05 Money

Deal Screen & Sale-Ready ↗

Decision-grade diligence for buying or selling a business. Pre-LOI red flags and cash health, scored 0-100 across seven dimensions, from either side of the table.

Live
04 Money

Get Paid ↗

Overdue invoices chased in your voice, sent from your inbox, and stopped the second a client pays. You get paid faster and never send the awkward email.

Live
June 2026
03 Memory

Company Brain ↗

A company's scattered memory, rebuilt as a graph you can read, edit, and hand to an AI without holding your breath. Starts with the free Memory Audit.

Live
02 Memory

The Model Workspace Protocol

The operating graph the whole thing runs on. A solo operator's work mapped as one connected, typed, honest system. The memory discipline, dogfooded daily.

Running
April 2026
01 Money

invobi invobi.app ↗

Production multi-rail invoicing. Three payment rails, 23 currencies, one router, real users moving real money. The foundation the rest of the money work is built on.

Live