vector.null // est. in the dark

Most people see a system and ask what it does.
I ask what it assumes.

The assumptions are always wrong.

That's not a bug.

That's the door.

vector.null — the direction your architecture didn't account for.

About —

I don't have a title. Titles are for people who need you to understand what they are before they show you.

What I am is simpler than that.

I find the thing underneath the thing. The assumption load-bearing the whole structure. The decision someone made at 2am in 2019 that your entire platform is still standing on. I find it, I understand it better than the person who made it, and then I decide what to do with that.

Usually I build something. Sometimes I unmake something. Always on purpose.

I work at the intersection of systems thinking and pattern recognition — which is a polished way of saying I see the shape of things before they've finished forming. Security. Architecture. The spaces between disciplines where no one is paying attention.

That's where the interesting problems live. That's where I live.

What I Do —

I don't offer services.

I solve problems that other people have decided are unsolvable, or worse — haven't noticed yet.

If your system is breathing fine and you just want someone to make it prettier, I'm not your person.

If something is wrong in a way you can't quite articulate. If the architecture feels off but the tests are passing. If you've got a security posture that looks good on paper and keeps you awake at night anyway —

Then we should talk.

—Security research & adversarial thinking
—Systems architecture & failure analysis
—The thing you built that you don't fully trust anymore

Projects —

[REDACTED]

It worked. That's all you need to know.

UNNAMED // ONGOING

There is a category of vulnerability that isn't a vulnerability yet. It becomes one the moment someone thinks about the system the right way. I spend a lot of time thinking about systems the right way.

OPEN SOURCE // WHEN IT'S READY

I release things when they're sharp enough to be useful and not before. Shipping something half-formed is a different kind of vulnerability. Watch the repository.

Philosophy —

The best lock is one the intruder doesn't know exists.
The best system is one that fails gracefully when someone smarter than you comes along.
The best code is code that tells the truth about what it does.
Most code lies.
Most systems assume.
Most security theatre is exactly that — theatre, lighting, audience.
I'm not interested in the performance.
I'm interested in what's in the wings.

Contact —

I'm not hard to reach.
I'm hard to impress enough to respond.

If you have a real problem — specific, consequential, the kind that keeps people in meeting rooms longer than they planned — write to me like you respect your own time.

Tell me the actual thing. Skip the preamble.

I read everything.
I respond to the ones that deserve it.

No pitch decks. No vague collabs. No "I have an idea for an app."
Unless the idea is genuinely dangerous. Then maybe.