Hi, I’m Ivan Golovach.

Turns grocery receipts into item records people can review and correct. Household sharing uses sealed, authenticated records and carries deletion markers through sync so an older copy doesn’t bring a deleted item back.

Food and symptom records that can move between iPhone and web and become a readable export for a doctor. Recent web work fixes a stale tab overwriting another tab’s diary entries while preserving intentional deletions.

An assistant that carries permitted memories across text, voice, image, and web conversations. Changes can be exercised in an isolated Lambda canary, with runtime probes and a pinned version to roll back to.

Work on parsing agent histories and reconciling token, cache, and cost accounting. Recent work keeps known token usage in submissions when a model’s price is missing, with an explicit signal that the cost is incomplete.

Work on model routing, staged inference, and llama.cpp integration. Recent work ties mapped model data cleanup to the final retained tensor load, so a later backend context can still read the weights it needs.

Radish’s sealed records, sync, deletion markers, and QR pairing in standalone Swift packages. The privacy and sync mechanisms can be inspected and tested independently of the private app and its data.

Independent Rust and TypeScript implementations of the same signed record format. A conformance suite checks that both produce identical bytes, so a record’s meaning and verification don’t depend on which implementation wrote it.

An MCP payment flow that binds a purchase to the requested operation before payment. Idempotent retries and signed receipts let the caller retry an interrupted request without fulfilling the same purchase twice.

Deterministic simulations for exploring a deep-time archive mission, with uncertainty and failure assumptions made explicit. Checksum-guarded artifacts connect each result to the inputs and evidence needed to reproduce it.

A former CitrusGate service, no longer offered. The research pipeline turned deal evidence into decision briefs, with cost limits and human approval. Versioned runs preserved the history behind each brief, while private evidence stayed separate from public output.

A mail engine with human approval, send limits, and reply and unsubscribe guards. When a send’s outcome is uncertain, reconciliation checks what happened before deciding whether another attempt is safe.