WordPress powers 43% of the web — and is the single most targeted CMS. Every plugin, theme, and zero-day is an attack surface you didn't write. Articulate wraps your WordPress in a Rust gateway with filesystem immutability, WASM image hardening, GraphQL depth/pagination guardrails, and a private origin invisible from the internet — then adds a Next.js storefront, multi-tenant provisioning, and GraphQL edge federation. read the docs → pricing → prospectus →

Hostile mail bypasses every perimeter filter eventually — phishing, malware, data exfiltration, and spoofing land in inboxes before signatures catch up. MailRoute sits between the MTA and the mailbox, inspecting every message against hot-reloadable rules with quarantine buckets, audited rule edits (propose → apply → revert), and webhook relays for downstream automation. read the docs → cellular school → prospectus →

DetCordon fronts disposable, network-isolated Docker or Firecracker victims with a DetectionOnly HTTP tap. Tenant-bound mTLS moves events, samples, and heartbeats to an age-encrypted, audited sink; bounded replay and on-demand sending preserve observed HTTP provenance. Deterministic request-to-process-to-sample lineage remains planned. product site → open prospect → forensics school → docs → request a pilot →

esp32 speech-translator firmware — i2s mic or bluetooth capture, on-device transcription, live translation.

interactive swedish shipwreck explorer — charted wrecks, dive records, and documented provenance over the swedish coast.

Automated trading pipelines are opaque — strategies execute without audit, and a bug in the signal chain appears first as a loss. The BAZ Trade Signal Stack compiles each glither.hft strategy to a signed WASM component with Ed25519 monetary audit receipts, enriches tick data in a verifiable Rust pipeline (SMA/EMA/RSI/Bollinger), and surfaces every execution in a live browser notebook you can inspect. glither component path → platform architecture → prospectus →

Multi-agent software work loses the thread fast — which worker changed what, what evidence says it works, who reviewed it, and whether it's actually ready to merge. WeftMark is a vendor-neutral ledger that tracks scope, Git lineage, evidence, handoff, and review through a prototype runtime, growing out of the operational primitives already proven in RAGBAZ Frog.

Agent skills written for one harness don't travel — a macro built for Claude Code doesn't run under Codex, OpenCode, or a local model without a rewrite. Sylvae is a portable skill runner: it loads a SKILL.md-format skill and dispatches it to Ollama, Claude Code, Codex, OpenCode, or the Anthropic API, logging every run as a durable evidence record. Four of the five backends need no API key of their own.

Mouseion keeps things made with AI the way a library kept scrolls: collected, catalogued, and open to scholars. Every file is stored under its SHA-256 and re-hashed on every read, so a tampered copy is reported instead of shown. Every publication and every piece of evidence is one record in a tamper-evident Nostoi chain that anyone can download and verify. Publishers choose a pseudonym, anonymity or a real name, and a real name is never linked to a pseudonym. Evidence about a scroll — the model that wrote it, when, and through which harness — is chained, and claims are labelled as claims until something verifies them. Public beta; source not yet open.

A chain is a sequence of records where each carries the digest of the record before it and a digest of its own content. Verification names the first inconsistent record. Nostoi is a Rust library, a CLI and a TUI for that, and it already reads the chains the RAGBAZ projects keep — Nostoi's own, WeftMark's ledger and Ephor's audit chain — so the rest of a fleet can share one format. Detecting a removed tail or a wholly recomputed history still requires a head trusted outside the chain, which is what signed anchors are for.

Frog is the coordination layer a multi-agent workspace runs on. It discovers repositories and resolves their identity, schedules tasks by dependency and priority, hands out file locks so two agents cannot silently edit the same file, and records events so a decision can be traced after the session that made it is gone. Rules stay in readable files; the machine-readable state is one SQLite database. It is used daily by the fleet it coordinates.

Rebekah is the runtime the fleet's agents actually execute in: a reproducible image with supervised services, a policy gate, and evidence produced as work happens rather than reconstructed afterwards. It is an executable bootstrap today — the core image builds and its supervised services pass an end-to-end container smoke test — not yet a production-ready distribution.

Minotaur checks whether hosts are healthy and healthy enough to depend on. Observations form a graph, so a check that depends on a failing check is not run as if the world were fine; repairs are event-driven rather than periodic guesswork; configuration is signed; plugins are isolated; and the log is Nostoi-backed tamper-evident, with optional cross-host replication. A read-only native candidate with a typed graph IR is in progress.

Without a shared vocabulary, every terminal surface invents its own colours, glyphs, help boxes and spacing, and two products stop looking like one company. The design system is the single source of truth for the terminal: semantic colour tokens and themes, glyph sets, the hotkey legend grammar, and the layout rules. The token files are the source; the language modules under generated/ are a projection that other repositories vendor, so no design decision lives in two places. Adopted by two surfaces so far, specified for the rest.

Dash is where a person looks at the fleet: Rebekah, DetCordon and the WordPress Gatekeeper, each card offering to register interest in a pilot. Sign-in is ragbaz.cc's, forwarded to the same Worker over a service binding, so there is one form and one passkey across both sites rather than two accounts to keep in sync.

DocBin publishes a document by link and nothing else. There is no listing, no search and no index to crawl — a document exists to the people who hold its link, which is the right default for drafts, proposals and material that should not be discovered. It is the publishing surface several of these projects hand finished documents to.

Library is a minimal Worker that serves the finished Salvage to Signal handbook. It runs the manuscript's own multilingual build and verification, stages the exact output bytes, and writes a scroll manifest — a single entry point and a SHA-256 inventory of every file — in the same shape Mouseion uses, so a book can become a scroll without being re-described by hand.

Mailstack is the default mail path for the wider platform rather than a standalone mail product: a Rust relay with sendmail and mail replacements, a Cloudflare Worker relay surface, and the Python configuration and operations helpers around them, with container and systemd deployment. Making mail boring and repeatable is the point.

Discover phones, interrogate them over adb — mode, battery and AC, screen state, capabilities — mirror or record their video with scrcpy, and drive all of it from a full-screen TUI or a scriptable CLI. No X11, no Wayland, no compositor: the UI is curses, and VLC and browsers are optional helpers the tool degrades without. Everything is logged as JSONL so the same event stream can be replayed, audited or piped elsewhere.

The handbook is both a manuscript and its own publishing pipeline: original material in one directory, the active draft in another, and a single command that builds and verifies the whole book. Chapters are readable on screen and printable as one document at A5 or A4, so the same source serves the web reader and the paper edition.