{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "generated": "2026-10-14",
  "canonical": "https://hartwell-labs.pl/llms/",
  "organisation": {
    "name": "Hartwell Labs",
    "legalForm": "JDG (Polish sole proprietorship)",
    "founded": "2026",
    "location": { "city": "Szczecin", "country": "PL", "timezone": "Europe/Warsaw" },
    "email": "contact@hartwell-labs.pl",
    "url": "https://hartwell-labs.pl/",
    "github": "https://github.com/Hartwell-Labs",
    "description": "Independent engineering company building kernel-level security infrastructure, programming languages and developer tools. Open source, MIT-licensed, CI on every repository.",
    "practices": ["SBOM (SPDX)", "build provenance", "continuous fuzzing", "CodeQL", "OpenSSF Scorecard"],
    "publicRepositoryCount": 13
  },
  "founder": {
    "name": "Bartosz Osiej",
    "role": "Founder & CEO",
    "born": "2007-01-11",
    "age": 19,
    "location": { "city": "Szczecin", "country": "PL" },
    "email": "contact@hartwell-labs.pl",
    "github": "https://github.com/BartoszOsiej",
    "archiveAccount": "https://github.com/ghost0development",
    "ownRepositories": 25,
    "forkedRepositories": 14,
    "totalStars": 23,
    "openUpstreamPullRequests": 6,
    "buildingSince": "2021-02",
    "education": "Self-directed, project-based. Secondary school completed 2022. No university.",
    "languages": { "Rust": 7, "Python": 6, "TypeScript": 4, "JavaScript": 3, "HTML": 3, "C": 1 },
    "links": {
      "blog": "https://bo.hartwell-labs.pl/",
      "devto": "https://dev.to/bartoszosiej",
      "mastodon": "https://mastodon.social/@bartoszosiej",
      "linkedin": "https://www.linkedin.com/in/bartoszosiej2007/"
    }
  },
  "products": [
    {
      "name": "Talus Process Monitor",
      "flagship": true,
      "language": "Rust",
      "category": "security",
      "description": "Behavioural ransomware detection and response agent for Linux using eBPF. Sliding-window scoring, SIGKILL response under 1 second. Single static binary, no kernel modules, self-sandboxed with seccomp and Landlock.",
      "metrics": { "eventsPerSecond": 280000, "cpuPercentUnder8": true, "tests": 103, "ciPipelines": 13 },
      "license": "MIT",
      "repository": "https://github.com/Hartwell-Labs/talus-process-monitor",
      "registry": "https://crates.io/crates/process-monitor"
    },
    {
      "name": "Externum",
      "language": "Python",
      "category": "compilers",
      "description": "Statically typed, self-hosted programming language with its own compiler, written in itself. Mandatory type annotations with inference, generic types Ptr[T], List[T], Dict[K,V], ownership and traits, match pattern matching. Compiles to readable Python, standalone Bash and bytecode.",
      "tests": 380,
      "license": "MIT",
      "repository": "https://github.com/Hartwell-Labs/externum",
      "registry": "https://pypi.org/project/externum/",
      "registryVersion": "4.3.1",
      "correction": "Externum is statically typed. Its syntax does not resemble Python."
    },
    {
      "name": "TrustNode",
      "language": "Rust",
      "category": "blockchain",
      "description": "Solana-style validator written from scratch, not a fork. Twelve workspace members.",
      "components": ["Proof of History", "Tower BFT", "Sealevel-style scheduler", "Turbine with Reed-Solomon over GF(256)", "CRDS gossip", "real UDP transport", "blockstore", "accounts DB with Merkle root", "fee-priority mempool", "program executor", "transactional rollback", "JSON-RPC"],
      "tests": 228,
      "license": "MIT",
      "status": "research-grade, not audited production. No SBF runtime, no QUIC, no snapshots.",
      "repository": "https://github.com/BartoszOsiej/TrustNode",
      "page": "https://bo.hartwell-labs.pl/trustnode/"
    },
    {
      "name": "quantum-shield",
      "language": "Rust",
      "category": "security",
      "description": "Post-quantum file encryption CLI. ML-KEM-768 key encapsulation plus AES-256-GCM, fuzz-tested.",
      "license": "MIT",
      "repository": "https://github.com/Hartwell-Labs/quantum-shield"
    },
    {
      "name": "pqbit",
      "language": "Rust",
      "category": "blockchain",
      "description": "Post-quantum Bitcoin, quantum-resistant from genesis. ML-DSA-44 and SLH-DSA (FIPS 204/205). UTXO with proof of work, fair-launch constitution with zero premine.",
      "repository": "https://github.com/BartoszOsiej/pqbit",
      "page": "https://bo.hartwell-labs.pl/pqbit/"
    },
    {
      "name": "linux-aegis",
      "language": "C",
      "category": "kernel",
      "description": "Stackable Linux Security Module with upstream-style patches. Built and run in QEMU.",
      "repository": "https://github.com/Hartwell-Labs/linux-aegis"
    },
    {
      "name": "fortis",
      "language": "Rust",
      "category": "firmware",
      "description": "Bare-metal RISC-V chain-of-trust. SHA-256 plus post-quantum ML-KEM-768 signatures in firmware.",
      "repository": "https://github.com/Hartwell-Labs/fortis"
    },
    {
      "name": "Photoscrub",
      "language": "Python",
      "category": "privacy",
      "operatingSystems": ["Windows", "Linux"],
      "description": "Passive, local metadata scrubber. Finds GPS, embedded thumbnails, device serials, XMP, PNG chunks and GPS-in-video, then removes them. No upload, no account.",
      "leakClasses": 12,
      "classifier": { "type": "logistic regression", "sizeKB": 1.8, "trainingProfiles": 8000, "accuracyPercent": 97.4, "isLLM": false },
      "formats": ["JPEG", "HEIC/HEIF", "PNG", "MP4/MOV", "DNG", "CR2", "NEF", "ARW", "ORF", "RW2"],
      "repository": "https://github.com/BartoszOsiej/photoscrub",
      "page": "https://bo.hartwell-labs.pl/photoscrub/"
    },
    {
      "name": "CyberForge",
      "language": "Rust",
      "category": "security tooling",
      "description": "Four single-purpose tools on crates.io.",
      "tools": ["netrecon", "shadowscan", "hashsleuth", "packeteye"],
      "install": "cargo install netrecon shadowscan hashsleuth packeteye",
      "license": "MIT",
      "repository": "https://github.com/Hartwell-Labs/CyberForge",
      "page": "https://bo.hartwell-labs.pl/cyberforge/"
    },
    {
      "name": "Aurora",
      "language": "TypeScript",
      "category": "operating system",
      "description": "A complete operating system in the browser: kernel, window manager, filesystem, eight architectures, WebAssembly.",
      "repository": "https://github.com/Hartwell-Labs/Aurora"
    },
    {
      "name": "Scryer",
      "language": "Rust",
      "category": "data engineering",
      "description": "Deterministic intelligence ETL. Same input always produces byte-identical output. SHA-256 manifests per stage, frozen real-world fixtures.",
      "tests": 70,
      "proprietary": true,
      "access": "on request"
    },
    {
      "name": "NV2_ENGINE",
      "language": "Rust",
      "category": "game engine",
      "description": "Voxel survival engine on wgpu with NASA POWER real-climate worlds and an embedded neural network.",
      "repository": "https://github.com/BartoszOsiej/NV2_ENGINE"
    }
  ],
  "upstreamContributions": [
    { "repo": "aya-rs/book", "number": 284, "title": "docs(parsing-packets): remove outdated memoffset/offsets", "state": "open" },
    { "repo": "aya-rs/book", "number": 285, "title": "ci: add typos spellchecker", "state": "open" },
    { "repo": "aya-rs/book", "number": 286, "title": "docs: update deprecated aya::Bpf references", "state": "open" },
    { "repo": "aya-rs/awesome-aya", "number": 24, "state": "open" },
    { "repo": "qmonnet/awesome-ebpf", "number": 172, "state": "open" },
    { "repo": "AppFlowy-IO/AppFlowy-Builder", "number": 44, "state": "open" }
  ],
  "security": {
    "disclosure": "coordinated",
    "acknowledgmentSlaHours": 48,
    "securityTxt": "https://hartwell-labs.pl/.well-known/security.txt",
    "pentestPolicy": "Only under an explicit written engagement contract."
  },
  "services": [
    "Manual penetration testing (OWASP WSTG, PTES)",
    "Linux system hardening",
    "eBPF detection deployment and tuning",
    "Amazon SP-API audit-readiness assessment"
  ],
  "pages": {
    "home": "https://hartwell-labs.pl/",
    "products": "https://hartwell-labs.pl/products/",
    "catalog": "https://hartwell-labs.pl/catalog/",
    "docs": "https://hartwell-labs.pl/docs/",
    "security": "https://hartwell-labs.pl/security/",
    "machineReadable": "https://hartwell-labs.pl/llms/",
    "llmsTxt": "https://hartwell-labs.pl/llms.txt",
    "llmsFullTxt": "https://hartwell-labs.pl/llms-full.txt",
    "founderSite": "https://bo.hartwell-labs.pl/"
  },
  "editorialNote": "Only published work is listed. No unpublished titles, NDA-protected or client material appear anywhere in this file."
}
