RobertAugustinus

Cryptography · Systems · Coding

I build things at the bottom of the stack — post-quantum cryptography, verified compilers, identity that doesn't retain anything. Forty years in, still mostly interested in what happens below the abstraction. CTO at Eoncore; I write Kryptonomicon about algorithms that are dead but haven't been told yet.

Writing

2026-10 The key was four A browser-trusted CA had keys you could guess in milliseconds. What the same mistake looks like inside the EU identity wallet.
2026-09 Your Claude code deny list is not a security boundary Why ~/.claude/settings.json is not good enough as a security boundary and you should isolate Claude code completely.
2026-06 Homoiconic critical software Macros as compiler passes, expansion as audit trail.

Building

Identifiedidentified.app
Document-backed identity verification. The platform learns that you're verified and nothing else.
RootwerkATProto
Professional identity you actually own, as signed records in your own PDS.
EoncorePQC
Post-quantum readiness: cryptographic inventory, migration, formally verified toolchains.