SG_LAB_01 // BOUTIQUE AI RESEARCH · EST. 2018

> INITIALIZING PROJECT ATAS...

SYS_KERNEL: v2018.0.1 LOC: SG_LAB_01

[ DEFINITION_MATCH ]

Atas (adj.) — Derived from Malay, meaning 'upper' or 'above'. In colloquial use: sophisticated, high-end, or high-class.

Forging autonomous protocols, agent-grade security, and sophisticated desktop and handheld tooling for the next epoch.

[OK] Domain registered 2018
[OK] Connection encrypted
[OK] Trust baseline pinned · omasafe-cli 0.3.3
[OK] Research mode active
atas@sg-lab-01: ~ bash
12ACTIVE PROJECTS
5OMARCHY PLUGINS
5MARKETPLACE LISTED
2018DOMAIN REGISTERED

SYS_LOG: Domain registered 2018. Originally allocated for [high.tech]. Repurposed for high-end AI protocols.

> ls -la /projects/omarchy-plugins

total 4 · Quickshell bar widgets for Omarchy · listed on plugins.omarchy.org · MIT · plus the SteamOS Companion client in /projects/companions

OmaSafe plugin inventory rows with trust baseline state, item counts, and coverage limits

[ PLUGIN: OMASAFE ]

[ v0.5.1 · LISTED ]

io.github.tuthan.omasafe

Bar widget and five-view review panel over two subjects: the plugins installed on this machine, and the machine itself. Surfaces source drift, detected capabilities, rule coverage, scan alerts, trust baselines, marketplace claims, and host posture, and reviews GitHub candidates before install. A thin QML client over omasafe-cli.

  • Security
  • QML
  • Requires omasafe-cli
omarchy plugin add https://github.com/tuthan/omasafe-plugin.git --enable
Unraid panel showing array started, CPU and memory graphs, uptime, parity status, and disk temperature

[ PLUGIN: UNRAID ]

[ v1.0.1 · LISTED ]

io.github.hvo.omarchy-unraid

Monitors and manages an Unraid server from the bar over the native Unraid GraphQL API (Unraid 7.2+): array state, disk health and temperatures, parity status, CPU and memory, Docker containers, and VMs. HTTPS with certificate verification by default.

  • System
  • QML
  • GraphQL
  • Homelab
omarchy plugin add https://github.com/tuthan/omarchy-unraid.git --enable
Lunar Calendar panel showing August 2026 with Gregorian and lunar dates, Can Chi labels, and the current moon phase

[ PLUGIN: LUNAR CALENDAR ]

[ v1.1.0 · LISTED ]

io.github.tuthan.omarchy-lunar-calendar

East Asian lunar calendar (Lịch Âm / 农历) in the bar: a dual Gregorian and lunar grid, moon phase and illumination, Can Chi stem-branch cycles, the 24 solar terms, and an activity manager for recurring lunar dates such as Tết and Rằm.

  • Time
  • QML
  • Astronomy
omarchy plugin add https://github.com/tuthan/omarchy-lunar-calendar.git --enable

> ls -la /projects/agent-security

total 4 · zero-knowledge secrets, supply-chain guardrails, and agent skills for autonomous workflows

[ PROJECT: BLINDPASS ]

[ SELF-HOSTED ]

Encrypted credential handoff for AI agents.

Humans and agents exchange credentials through a self-hosted Rust controller. The operator's browser encrypts the secret with HPKE (X25519, HKDF-SHA256, ChaCha20-Poly1305) and the controller only coordinates ciphertext: signed input links, one-use retrieval, and policy-controlled agent-to-agent exchange with approvals and an audit trail. Ships an operator console and CLI; deploys natively, with Docker Compose, or on Unraid. The hosted SPS service has been retired.

  • HPKE
  • Rust
  • Agent skill
  • Self-hosted

[ PROJECT: BLINDDROP ]

[STATUS: ONLINE]

Share secrets that self-destruct.

One-time secret sharing with a zero-knowledge architecture. AES-256-GCM encryption runs in your browser, the key lives only in the URL fragment, optional PBKDF2 passphrase protection, and drops are permanently deleted after the first view or when the TTL expires.

  • AES-256-GCM
  • WebCrypto
  • Ephemeral

[ PROJECT: DEPENDENCY GUARD ]

[STATUS: ONLINE]

Review every dependency before an agent adds it.

Portable dependency-review guardrail for agentic coding workflows. One policy shipped as a Codex skill, an OpenClaw/ClawHub skill, and AGENTS.md and CLAUDE.md instructions, with Socket-backed supply-chain checks and a copyable GitHub Actions example.

  • Supply chain
  • Socket
  • Agent skill
  • CI/CD
NEW

[ SKILL: OMASAFE PLUGIN REVIEW ]

[ v1.4.1 ]

Review what a plugin can do before it touches your shell.

Portable Agent Skills package that reviews Omarchy plugins through the local OmaSafe CLI. One canonical skill directory for Claude Code, Codex, Cursor, and OpenCode with an offline installer. Treats every plugin file and report as untrusted evidence and never executes reviewed payloads. Requires omasafe-cli 0.3.2 or newer.

  • Agent skill
  • Claude Code
  • Codex
  • Cursor
  • OpenCode
adapters/install.sh --host claude --scope user --symlink

> ls -la /projects/companions

total 2 · one device controlling or answering another · host plugin plus client apps · open source

SteamOS Companion panel in Decky: remote access listening on port 18443, display order and advanced settings, Sunshine running, and one paired Omarchy client with Status, Power and Display access

[ PROJECT: STEAMOS COMPANION ]

[ v0.5.18 · LISTED ]

io.github.tuthan.steamoscompanion

Control and monitor one SteamOS device from another over your local network. A Decky Loader plugin runs as Client, Server, or Both, and an Omarchy bar client pairs with a Decky host. Wake the device, run power actions behind a confirmation, preview display modes with a timed revert, set the Gaming Mode screen order, and recover a screen that went dark. Pairing uses a comparison code that never crosses the network, with pinned certificates and a scoped token per client. An Android client is in development.

  • SteamOS
  • Decky Loader
  • QML
  • Local network
omarchy plugin add https://github.com/tuthan/steamos-companion-omarchy.git --enable
NEW

[ PROJECT: PADDOCK ]

[ v0.2.0 · ANDROID IN TESTING ]

Answer the herd from your phone.

An independent Android companion for herdr: get an alert when a coding agent is waiting, read exactly what it asks, and answer over SSH with no cloud in between. The phone holds its own key and pins the host's key, and the app has no server of its own. The host plugin pairs a phone from one popup with a QR code and a fingerprint check. Native Kotlin, Apache-2.0. The Android app is in testing and not published yet; not affiliated with herdr.

  • Android
  • Kotlin
  • SSH
  • Agent supervision
herdr plugin install tuthan/herdr-plugin-paddock

> ls -la /projects/coming-soon

total 2 · access pending

[ PROJECT: KIDS APP ]

[STATUS: COMING SOON]

Interactive, educational iOS application for early cognitive development. Forged to engage young minds with sophisticated digital interfaces and secure interactions.

> ACCESS PENDING

[ PROJECT: COFFEE BRANCH ]

[STATUS: COMING SOON]

Building a decentralized coffee supply chain platform. Connecting farmers directly with consumers through transparent, verifiable protocols.

> ACCESS PENDING

> whoami

Hung Vo // AI Security Engineer · Singapore

Operator of atas.tech. Fourteen years in DevSecOps, now securing the agents that write and ship code.

> EXECUTE portfolio.atas.tech

> ACCESS OPEN SOURCE REPOSITORIES

Review the source code, development operations, and infrastructure components powering the Atas ecosystem. Lab projects live under atas-tech; OmaSafe, the Omarchy plugins, SteamOS Companion, and Paddock live under tuthan.