Boris Brodski · Open Source · since 2007
Open source
Everything open-source lives under one roof at openbrod.org — 7-Zip-JBinding since 2007, Redmine plugins, the xtextcasts.org screencasts, and Torhaus, the secure host for untrusted AI agents.
openbrod.org — the umbrella for all projects, with documentation and releases.
7-Zip-JBinding — Java access to the 7-Zip algorithms; in production worldwide since 2007.
Torhaus — a secure host for untrusted AI agents; in development.
Redmine plugins and xtextcasts.org — tooling and teaching.
openbrod.org
All my open-source work is collected at openbrod.org — project pages, documentation, release notes and the roadmap for each. GitHub is at github.com/borisbrodski.
The projects
7-Zip-JBinding is the long-runner: a Java binding for the 7-Zip compression algorithms, founded in November 2007 and maintained ever since, with native builds for Windows, Linux and macOS in 32 and 64 bit plus ARM. Around ten thousand downloads a month on Maven Central.
Torhaus is the newest: a framework that runs any AI agent harness in kernel-enforced compartments with default-deny egress, a credential broker and a tamper-evident audit log — built on the assumption that the model itself may be hostile. Apache-2.0, early development.
Redmine plugins — workflow integration with Git and Gerrit, data-exchange plugins, and the audits of other people’s plugins that come with running Redmine in production.
xtextcasts.org — screencasts on Xtext and language engineering.
How I work in the open
Reproducible builds, a test suite on every supported platform, release notes that say what changed, and issues answered. Contributions welcome on all of them.
Relevant work
-
Torhaus — a secure host for untrusted AI agents
Apache-licensed framework in early development; the umbrella for the agent-security work.
- Threat model built from the 2026 trojaned-open-weights findings (Cohere/Qwen 3.8, "Model-as-a-Trojan")
- Compartments (Zwinger) with data classification, typed one-way channels (Schleuse), a broker that never lets a credential reach the model
- Egress gateway, MCP/tool proxy and model proxy as the single, policy-checked path out
PythongVisorFirecrackerKubernetesOPAeBPFMCP
-
7-Zip-JBinding — Java binding for the 7-Zip compression algorithms
Founded in 2007 and maintained since — a JNI binding that gives Java the full 7-Zip algorithm set behind an archive-format-independent API. Password-protected and multi-part archives, Windows/Linux/macOS on 32 and 64 bit plus ARM, a test suite that runs on every target. Around ten thousand downloads a month on Maven Central.
C++JNIJavaC++ metaprogrammingCMakeCTestJUnitGCC
-
Redmine plugin suite — development, audit, operation
Maintenance of a large set of Redmine plugins and audits of third-party open-source plugins before production use.
- Plugin for bidirectional data exchange with external systems
- Audit of open-source plugins before deployment
- Containerised operation (Podman), backup and anonymisation pipeline
RubyRuby on RailsRedminePostgreSQLDockerPodmanResticJMeter
-
Redmine, Git and Gerrit integration for feature-driven development
Redmine/Git/Gerrit workflow plugin.
RubyRuby on RailsRedmineGitGerrit
Skills in this direction
Web
- ★★★★★ Ruby on Rails / Redmine 2010–
Infrastructure
- ★★★★★ Git / Gerrit 2009–
- ★★★★★ Neovim 2011–
Talks & writing
- ongoing xtextcasts.org — Screencasts on Xtext and language engineering · xtextcasts.org