┌─ NAVI / LAYER:WIRED / NODE:aljojoby9 / FY2026 ─────────────────────────┐
│ │
│ $ whoami │
│ Aljo Joby · CSE · systems security │
│ │
│ $ cat /proc/specialization │
│ XSS / DOM sanitization · srcset URL validation · fail-closed parsers │
│ JS/TS · defensive web · OSS │
│ │
│ $ magi --consensus │
│ MELCHIOR js/ts · bootstrap sanitizer · vercel ai sdk │
│ BALTHASAR xss · data:/vbscript: blocks · collapse state │
│ CASPER oss · opencog ecan · agentic tooling │
│ │
│ $ echo $SHELL │
│ /usr/bin/the_wired │
└────────────────────────────────────────────────────────────────────────┘
I live on the request/response boundary. Most of my open source time is spent making HTML sanitizers fail closed — srcset, data:, vbscript:, icon options that thought they were strings. The rest is developer tools, a little AGI-adjacent graph code, and whatever still compiles on a CRT in 2026.
languages JS/TS · Python · Kotlin · C/C++ · Java
domain defensive DOM · XSS · sanitizer hardening
current @twbs/bootstrap sanitizer + AI SDK providers
watchlist agentic tooling · fail-closed parsers · the Wired
XSS in a UI kit is a ghost in the shell. These are the ones I filed:
| status | patch | what it actually does |
|---|---|---|
| open | srcset URL validation, fail closed without DOMParser | sanitizer refuses to guess |
| open | block data: / vbscript: URLs |
XSS hardening |
| open | collapse trigger state after hide | UI state vs. reality |
| merged | sanitize HTML icon options | chips / nav overflow |
| node | payload | lang |
|---|---|---|
| krutrim-ai-sdk | Krutrim Cloud provider for the Vercel AI SDK — India's sovereign models, normal DX | TypeScript |
| hyperon-ecan | Economic Attention Networks for OpenCog Hyperon; spreading activation along embeddings | Python |
| Turing-interpreter | a Turing machine you can actually run | C |
| QuickShare | local sharing, Kotlin-side | Kotlin |
| maze_pathfinder | graphs, grids, the long way around | Python |
| MedicalRAG | retrieval-augmented answers, not vibes | Python |
magi --dump // classified, low-clearance
operator aljojoby9
class CSE
protocol WIRED
special XSS / DOM / sanitizer
affiliation contributor @twbs/bootstrap
wm phosphor green / magenta
anime_refs Serial Experiments Lain
Ghost in the Shell SAC
Steins;Gate 1.048596
Cowboy Bebop (footer only)
motto fail closed. don't leak the ghost.
uptime compiling since 2023-08-08
the net is vast and infinite.
see you, space cowboy...