Skip to content
View velvetmonkey's full-sized avatar

Highlights

  • Pro

Block or report velvetmonkey

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
velvetmonkey/README.md
Ben Cassie — useful tools, checkable claims.

I build tools for AI-agent approvals and distributed state, then make their evidence easier to inspect. Architect working across data platforms, APIs, formal methods and AI research.

Apps · Demos · Research · About

Start with the apps

Approve the exact tool call. Keep the receipt.

A local MCP approval gate for Claude Code. Inspect the proposed call, approve it at most once, and get a signed decision receipt. Seal refuses calls that drift from what you approved. It is a gate, not a sandbox.

Get started → · Source

Check a receipt in your browser · Review the evidence with the CLI

Make local edits. Bring replicas back together.

A Rust CRDT core with language bindings for merging distributed state. Explore counters and set membership, save and restart replicas, then exchange their state. You bring the transport and application schema.

Open the Lab → · Docs · Source

Start with Rust or TypeScript. Source builds; main is unreleased.

The Seal family: seal gates calls; seal-check checks supported receipts locally in your browser; seal-assurance-kit makes the kernel's evidence runnable from a CLI. Separate tools let you inspect the product's claims from outside it, with shared kernel and format dependencies still in scope. Checking a receipt does not establish that the recorded tool effect happened.

Also in the toolbox: collision-check finds counterexamples to observational claims within a declared finite or sampled space. Roundtable coordinates AI CLI assistants through a local MCP server.

Try it, see it, break it

Open a demo What to explore
SafeMesh Lab → Make independent edits, exchange state and watch replicas merge. Runs the Rust core through WASM.
Seal receipt checker → Paste a supported receipt and inspect the result locally. Start with the example receipts.
Coordination Kernel → Explore a numerical illustration of Kuramoto synchronisation, with theorem conditions and counterfactuals. The simulator itself is not verified.
Hebbian–Kuramoto playground → Change topology, coupling and perturbations in an interactive research demo.

Prefer a terminal? Follow Seal's approval walkthrough or SafeMesh's partition-and-heal example.

Research

Alongside the apps I keep a machine-checked Lean 4 proof corpus on optimisation, learning, dynamics and distributed systems. It has its own index, with the repositories, theorem statements and current status: Lean index →. More about me and the research is on my website.

Experiments that can say no

Witness Lab tests whether local witness information helps neural models on synthetic tasks. Most of the broad hypotheses did not survive. The remaining positive result is narrowly scoped; the retrospective explains what held up and what did not.

What “checked” means here

Claims need receipts. Lean proofs concern their stated models. Tests, finite conformance checks, numerical demos and deployed software each have a different scope. I keep those distinctions visible, including what remains assumed or unfinished.

For the apps, start with Seal's guarantees and non-guarantees and SafeMesh's proof boundary.

About

I'm Ben Cassie, velvetmonkey. My background is in ESG data platforms and API architecture; my current work brings practical tools, AI research and formal methods together.

Website · ORCID · @thevelvetmonke

Pinned Loading

  1. seal seal Public

    A local MCP approval gate for Claude Code: exact-call prompts, at-most-once approval, drift refusal, and signed decision receipts. Seal is a gate, not a sandbox.

    JavaScript

  2. safemesh safemesh Public

    Lean 4 proofs behind five CRDTs (G-Set, G-Counter, PN-Counter, OR-Set, RGA/Text) in no_std Rust, with C ABI, WASM/TypeScript and Python surfaces. You bring the transport. Open source under Apache-2.0.

    Rust

  3. attention-lean attention-lean Public

    Lean 4 / Mathlib formalisation of hard and soft attention expressivity over finite Boolean cubes: exact head-count bounds proved to the kernel, carried from argmax to softmax at the Boolean-output …

    Lean