RPCShield is a static analysis tool to detect dependency relations (fail-close/fail-open) between microservices.
Reference architecture for fail-open, witness-only evidence systems with independent verification and public settlement.
Pi-hole–style DNS sinkhole on the ESP32-S3 — fail-open, DoT fail-closed, OTA rollback. MIT.
Real-time authorization decisions measured under injected failure: timeouts, caching, graceful degradation and a kill switch, measured rather than asserted. Whether a timeout bounds the tail, what fail-open versus fail-closed costs once both errors are priced, and whether webhook-driven decisioning is idempotent under replay.
SYSTEM-ARCHITECTURE-PROJECT-02 RateGuard : A horizontally scalable API Gateway demonstrating distributed systems concepts. Implements Token Bucket rate limiting via Atomic Redis Lua scripts, fail-open resiliency, and NGINX Docker DNS resolution.
Operational security controls with forensic guarantees
Detector failures become recorded gaps, never synthetic clean results. Zero dependencies.
A client-agnostic, multi-stage rate limiting policy engine for TypeScript, powered by @upstash/ratelimit.
Defensive publication: two-stage RAG ranker whose LLM rerank stage fails open to a deterministic base.
Block network ads and trackers by running a DNS sinkhole on an ESP32-S3 microcontroller.
To associate your repository with the fail-open topic, visit your repo's landing page and select "manage topics."