Edition six The Fault
Built to hold.
Open to inspection.
01 / Selected work
The studio, the independent products, and the evidence. New client work is paused while I keep Nova’s systems upright.
01 / Independent studio · 2024–26
Every client build now lives at Kastro: travel, commerce, machinery, automation. The business moved out so this site could stay a portfolio.
Kastro’s public website · September 2026.
Visit KastroAll my side projects now live here. Tools, experiments, and work in progress.
02 / Sovereign messaging · 0.4.2 BETA
End-to-end encrypted messaging with a server-independent core. Works over the internet, LoRa, or a USB stick in a coat pocket.
Komms’ public website · September 2026.
Visit Komms03 / Domain trust · Live
SPF, DKIM, DMARC, BIMI and report parsing: evidence that your domain isn't trivially spoofable.
dmark’s public website · September 2026.
Visit dmark02 / Andri
Andri Pétur Hafþórsson: security engineer, sysadmin, resident tech wizard in Reykjavík. I keep systems standing under load, under audit, and under a Saturday night.
Currently sysadmin at Nova. On the side: independent products, field notes, and Kastro’s public archive.
The person and the service record ↗
Firewall, DNS, deploy pipeline and the hero headline. Fewer handoffs, fewer places for the truth to go missing.
Logs somebody actually reads. Access you can revoke at 16:55 on a Friday. Unglamorous. Load-bearing. Deeply unsexy. Works.
Keep the interesting risk in the parts that don't page you at 03:00, then write down what broke where people can read it.
Long-form notes on security, AI systems, privacy, and the operational details that decide whether any of them work.
The LiteLLM vulnerability chain is not just another proxy bug. AI gateways sit between users, models, provider keys, stored credentials, and prompt logs. Treat them like production security infrastructure.
KPMG pulled an AI usage report after apparent hallucinations. EFF keeps finding fake staff quoted by AI slop sites. The fix is boring: citations, owners, and a human who checks the receipts.
EDRi says the EU AI Omnibus would delay high-risk AI safeguards and reduce public transparency. That is not boring Brussels plumbing. It is where accountability disappears.
