Skip to content
View cjchanh's full-sized avatar

Block or report cjchanh

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
cjchanh/README.md

CJ Chanhnourack

Founder of Centennial Defense Systems in Colorado Springs. I build audit-first software for tool-using AI systems.

The current wedge is governed agent-action evidence: make an action request, evaluate policy, allow or block it, record the decision, and let another person recompute the record.

Start here: Deponent

Deponent is the public Python kernel.

python3 -m venv /tmp/deponent-eval
source /tmp/deponent-eval/bin/activate
python -m pip install deponent==0.1.1
python -c "import pathlib,tempfile; from deponent import Cell; root=tempfile.mkdtemp(); target=pathlib.Path(root,'blocked-example'); target.mkdir(); c=Cell(root,use_jail=False); print(c.act('write_file',{'path':'n.txt','content':'hi'}).output); print(c.act('run_cmd',{'cmd':'rm -rf ./blocked-example'}).output); print('target preserved:',target.exists()); print(c.verify())"
python -m deponent.badge verify --kernel deponent

Expected behavior: the write is allowed, the relative-path destructive fixture is blocked, target preserved: True confirms the disposable directory remains, and the two-entry ledger chain verifies. The fixture targets only a new subdirectory inside the temporary workspace, so a gate failure cannot target the host root.

Related public work

What I will and will not claim

  • Research prototypes, not security accreditations.
  • Tamper-evident records, not tamper-proof systems.
  • Public runnable evidence, not customers, deployment, awards, or production accreditation.
  • Internal tests are not third-party validation.

I am looking for skeptical technical reruns. A useful response says whether the problem is real, whether the output would help, and what control is missing.

Contact: contact@centennialdefense.systems

Pinned Loading

  1. deponent deponent Public

    A governed sovereign agent kernel — make any local AI agent testify. Deny-by-default gate, macOS Seatbelt jail, tamper-evident hash-chained ledger, verifiable receipts. Apache-2.0, zero deps.

    Python 1

  2. gak-conformance-standard gak-conformance-standard Public

    A vendor-neutral, mechanically testable standard for governed agent kernels — 13 executable clauses, reproducible conformance receipts. Score any kernel against it, not just the reference.

    Python 1

  3. sworn sworn Public

    Deterministic, fail-closed AI code governance. Every commit is sworn.

    Python

  4. mildoc-lint mildoc-lint Public

    Local-first document assurance linter for defense-adjacent administrative, CUI, O-SMEAC, naval correspondence, and NAMP/CSEC readiness records.

    Python 2

  5. map-ruler map-ruler Public

    Open spatial measurements that testify — roof/fence/driveway with scale chain + sealed receipts (CDS)

    Python

  6. sovereign-home-starter sovereign-home-starter Public

    Local-first, zero-subscription home stack: private AI assistant + sitrep, Frigate camera NVR with alerts, Tailscale, hardening audit, Reticulum node. Drop into Claude Code.

    Python 2