Selected work
durable-sh
Single-file bash library for environments that kill short-lived processes: inherited signal immunity, atomic writes, parent-shell retries, git lock recovery. 18/18 tests, tagged releases.
mcp-audit-toolkit
Audits MCP servers the way a client actually talks to them: credential-fingerprint leak scanning, stdio health probes, and the two failure classes that silently break MCP tools on Linux.
PROXY-JOURNAL
Portable development journal for LLM sessions — identity, memory and progress logs that move between models with integrity checks, so a new session never starts from a blank slate.
ci-repro
Gradle CI reference: build, artifact, release, dependency-submission and CodeQL workflows with REUSE-compliant license headers — used to reproduce Android builds off-device.
Writing
Signal 36: the Android profiler that kills your shell scripts
A 15% random failure rate on git, python3 and rpm turned out to be traced_perf sending BIONIC_SIGNAL_PROFILER. Measured kill rates, the one-line fix, and what is still unexplained.
Building Android apps on an ARM64 phone
Google's Linux SDK tools are x86-64 only. Here is the aapt2 override, the compileSdk 37 hand-install, and the Gradle traps that cost the most time.
About
I work on practical tools for AI-assisted development and Android: durable agent memory, clear security boundaries, reproducible builds, and small fixes backed by tests. I separate working prototypes from shipped features, and I mark what I have not verified.
My daily test environment is Android 16 on an aarch64 openSUSE Tumbleweed proot terminal with ADB and Shizuku — which exposes platform assumptions that desktop-only builds miss.
Elsewhere
- github.com/digivasserver-ai — code and releases
- X / Twitter
- digivas.server@gmail.com — security reports, collaboration