What G8KEPR Is, in Plain English
The security startup I build on nights and weekends, explained without the jargon: what it guards, how it does it, and where it runs.
Building G8KEPR · Note 1 ↗The G8KEPR notebook
G8KEPR.
Notes and updates on G8KEPR.
23published notes
Project updates, decisions, and progress in one place.
The update What changed Next stepsProject notes
Newest first · 1 / 2
Four Checkpoints on One Request: The G8KEPR Pillars
API security, MCP security, an AI gateway and a verification engine, one at a time: what each one looks at and what it's there to catch.
Building G8KEPR · Note 2 ↗
MCP Tool Poisoning, and Why G8KEPR Fingerprints Every Tool
What MCP is, how a tool's own description can be turned against the model reading it, and why a hash that's re-checked on every call is such a useful tripwire.
Building G8KEPR · Note 3 ↗
No LLM-as-Judge: Why G8KEPR Uses Regex and Classical ML
A lot of AI security tools ask another AI model to grade the first one. G8KEPR doesn't. Here's why, what it costs, and what the published numbers do and don't mean.
Building G8KEPR · Note 4 ↗
Why It Runs in Your VPC (and Nothing Leaves)
G8KEPR is self-hosted by design: deployed with Helm or Terraform, sitting in your request path, sending zero bytes out and charging nothing per token. Here's the reasoning.
Building G8KEPR · Note 5 ↗
Building a Security Startup by Myself
One founder, a Delaware C-Corp, evenings and weekends, and a codebase with more lines of tests than lines of code. Here's what that ratio says about how I build.
Building G8KEPR · Note 6 ↗
From Do-Everything Platform to Correlation Engine
G8KEPR started as an AI security platform that tried to do everything. In September 2026 I narrowed it to the one thing that's actually different, and kept most of what I'd built.
Building G8KEPR · Note 7 ↗
Open Source for About a Day
On September 9 I decided G8KEPR would be open source under Apache-2.0. On September 10 I changed my mind. Both days had good arguments.
Building G8KEPR · Note 8 ↗
A Scorecard Instead of a Vanity Metric
How I keep score on G8KEPR with a feature scorecard graded 0 to 10, why it leaves out anything about clients or partners, and the P0-P4 lists that decide what I work on next.
Building G8KEPR · Note 9 ↗
How I Build with Three Claude Code Agents at Once
My build loop for G8KEPR: a plan in Todoist, a tracker page, three DEV briefs, and three Claude Code windows working in parallel while I supervise until it's done and tested.
Building G8KEPR · Note 10 ↗
Prompt Injection, Explained Without the Jargon
What prompt injection actually is, why it's so stubborn to fix, how it sneaks in through documents and tools, and where G8KEPR's guard sits in the path.
Building G8KEPR · Note 11 ↗
Checking the Answer, Not Just the Question
Most AI security looks at what goes into a model. G8KEPR's Verification Engine also looks at what comes out, with four kinds of checks and grounding at the center.
Building G8KEPR · Note 12 ↗