BLOG

The full distribution stack: dual-publishing three signed VSIX bundles to the VS Code Marketplace and Open VSX, claiming the lateralus namespace, verifying the lateralus.dev publisher domain via DNS TXT, and serving md5-pinned downloads from Cloudflare Pages + R2.

Goto, fail, output. The automaton that powers fgrep, Snort, and every serious multi-keyword filter — in one readable stdlib file. Why it beats running regex in a loop, and what the Wave 10 search lane ships alongside it.

Walking RFC 8439 line by line and arriving at a working AEAD in pure Lateralus — 80 lines of ChaCha20, 60 lines of Poly1305, zero OpenSSL. With X25519 and HKDF alongside, a readable WireGuard-shaped handshake in five files.

Apache Parquet without Arrow's 300 MB C++ dependency. RLE, dict encoding, frame-of-reference, Thrift Compact — all in readable pure-Lateralus stdlib modules. The columnar-analytics lane in one post.

First-class capability attributes, effect polymorphism, a rewritten borrow checker on polonius, and 12% faster compiles. The capability story now composes across compiler, linker, and LateralusOS kernel.

Symmetric multiprocessing across 64 cores, capability-enforced syscalls at the trampoline, a graphical installer, Wi-Fi, USB, Intel HDA audio, ext4 read-only, and a signed boot chain. LateralusOS runs on real hardware now.

Engine rewrite on channels + effects, four new modules (AD/Kerberos, Web App, Container, Wireless++), 10k concurrent targets, a new TUI, and free Developer Edition copies for proven contributors.

The grug collective has a verified affiliates page now. Miguel Automate, sleepthegod, and domo — real portfolios, real shipped work, no pay-for-placement. Here's what each of them ships.

A QUIC framing layer, Argon2id password hashing, an NES ROM parser, a G-code bounding-box tool, and a tail-call elimination pass — five domains, one afternoon.

The grammar, the 29-file sample corpus, the 200-repo bar, and the two-line .gitattributes trick that flips the language bar today. Status page + daily counter.

Ed25519, SQLite B-tree reader, Modbus RTU, GPX track stats, and a pipeline-aware constant folder — five first-of-their-kind modules.

CAN bus, EXIF, SNMP, S-expression macros, and a 300-line PostScript interpreter — five first-of-their-kind modules in one afternoon's ecosystem expansion.

A Game Boy ROM parser, a FASTA toolkit, a LoRa mesh stack, a MIDI pipeline, and a capability-tracking compiler pass — five first-of-their-kind modules shipped together.

Lateralus has a borrow checker but no lifetime syntax. Region inference replaces every 'a<'b annotation you would have written.

The Lateralus LSP shows input and output types at every |> stage. Small feature, surprisingly large quality-of-life win.

Lateralus' #[property] attribute turns any function into a 100-run randomized test with automatic shrinking — no setup, no generator boilerplate.

OpenTelemetry in Lateralus is not a library wrapper — it's a compiler pass that instruments pipeline stages for you, with zero runtime tax when tracing is off.

A Postgres driver in pure Lateralus with no external dependencies — just std::net and std::bin. Extended Query protocol, bind parameters, streaming rows.

A complete, constant-time JWT (HS256) implementation in Lateralus with no external dependencies. Issue, verify, reject "alg: none" by construction.

Lateralus' new timezone-aware datetime stdlib — IANA zones, wall-clock resolution with explicit ambiguity policies, and why "just store UTC" isn't enough.

CVE velocity is accelerating, evasion signatures expire, cloud APIs drift. Why Lateralus Pentester delivers as a rolling subscription instead of a versioned release.

Honest comparison of Lateralus Pentester against Nmap + Metasploit + manual scripting. Where typed pipelines win, where they don't, and who this is actually for.

Deep dive into all nine modules: Recon, Scan, Vuln, Exploit, Post, Report, Evasion, Cloud, and Crypto. APIs, design decisions, and composition patterns.

Lateralus Pentester is a fully pipeline-native penetration testing toolkit, written entirely in Lateralus. $25/month rolling subscription. Works best on LateralusOS and NullSec Linux.

The largest language expansion since launch. Five new feature pillars — channels, macros, effects, decorators, and compile-time evaluation — all pipeline-native.

A privacy-first web browser with built-in Lateralus syntax highlighting, inline REPL, pipeline visualization in DevTools, and zero telemetry.

A lightweight desktop environment written in Lateralus with tiling/floating WM, GPU compositor, and pipeline-based widgets — under 50 MB RAM.

NullSec Linux v2.0 Abyssal ships with Nullkia DE, Marshall browser, 200+ security tools, and the full Lateralus SDK on a hardened kernel.

Introducing the HHO Genesis project — open-source hydrogen-oxygen machine plans for electrolyzers, torches, welders, and heaters, all controlled by Lateralus.

Porting NullSec Linux to ARM64 — Raspberry Pi, Apple Silicon VMs, and cloud instances.

The practical build guide — component selection, wiring, plumbing, Lateralus firmware, and first hydrogen production for solar-HHO and pure-HHO configs.

Adding SMP to FRISC OS — hart discovery, IPIs, per-hart run queues, and work stealing.

Running indefinitely without solar — underground bunkers, arctic camps, and disaster trailers powered by HHO with micro-hydro, wind, and alternator bootstrap.

Chaining recon, exploit, and exfil stages with |> — reproducible attack workflows in Lateralus.

Solar by day, hydrogen by night. Lateralus manages the energy pipeline for 24/7 off-grid power with zero battery degradation.

Why we rebuilt NullSec Linux from Debian to Arch — rolling releases, AUR access, and a leaner base.

Lateralus scales from 5-line scripts to a full operating system. Here’s how one language works across the entire spectrum.

Closed-loop HHO electrolysis controlled by Lateralus pipelines — water in, energy out, water recovered. The fundamentals of indefinite off-grid power.

How we built the Lateralus VS Code extension — TextMate grammars, snippets, and lessons learned.

Every CONFIG_ option we changed and why — lockdown LSM, KASLR, stack protectors, and restricted BPF.

Implementing Sv39 virtual memory in FRISC OS — page tables, TLB management, and user-mode isolation.

How Lateralus handles concurrent programming — lightweight tasks, structured concurrency, and pipeline-friendly async.

A walkthrough of every compiler phase — lexing, parsing, AST construction, type checking, and code generation.

How Lateralus implements type inference — from constraint generation to unification, and why you rarely need type annotations.

We built a language where data flows left to right. Here’s why and how.

Why |> changes how you think about data — from nested calls to linear flows.

What it takes to write an OS kernel in Lateralus — bootloader to memory management.

From bare metal to a UART shell — booting a custom OS on QEMU’s RISC-V virt machine.

22 repos, 2,400+ .ltl files, a compiler, VS Code extension, and more.

How pipeline operators and pattern matching make security tools cleaner.

Building ltl — dependency resolution, lockfiles, and the lateralus.toml manifest format.

Why Lateralus uses Result types instead of exceptions, and how |?> makes error propagation painless.

How we generate readable, portable C99 from Lateralus — struct layout, function naming, and memory management.

From Debian netinst to a 120-tool pentesting distro — how NullSec Linux v1.0 was born.

How we select, test, and maintain every tool in NullSec Linux — and why we dropped 40 of them.

An interactive REPL for a compiled language — incremental parsing, tab completion, and colored output.

Exhaustiveness checking, nested destructuring, and guard clauses — how Lateralus match expressions work under the hood.

80+ functions, all pipeline-friendly. How we designed a standard library where every function works with |>.

From a tokenizer in a single Python file to a working compiler — the first 1,000 lines of Lateralus.

The world has enough programming languages. Here’s why I built one anyway.

x86 is a minefield. ARM is proprietary. RISC-V is the clean slate we needed for FRISC OS.

Notebook scribbles, syntax experiments, and the earliest prototypes of what would become Lateralus.

From framebuffer setup to compositing — how FRISC OS renders a graphical desktop with zero dependencies on RISC-V.