Geiger
Capital

IndexTwo systems, four instruments

Working systems, built so they can be measured.

Geiger Capital builds small production systems and runs them in the open. Each one is a real deployment with real uptime and a real audit trail. It is kept that way so that what happens on it counts as evidence rather than demonstration.

Index of work

SystemsRunning, with public state

  1. 01 Homestead SMP A Minecraft server operated as a secure-SDLC proof of concept. 30 controls mapped to SOC 2 TSC, ISO 27001 Annex A and NIST CSF, enforced on a server people actually play on. play.geigercapital.us Checking…
  2. 02 Fin Platform Holdings A synthetic financial institution running payments, ledger and screening infrastructure. It is operated as a testbed for AI-agent discovery and governance research. Generated traffic only. finplatform.geigercapital.us Research testbed

InstrumentsRun against systems, evidenced by artifact

  1. 03 Chainwatch A supply-chain diff analyser. It fetches two releases of a package, diffs the source, and scores six risk dimensions against live threat feeds. It targets the gap between an attack being published and signature-based tooling catching up to it. geigercapital.us/chainwatch Published · MIT v0.2.0 · DOI 10.5281/zenodo.21908505
  2. 04 Agentlens The instrument 02 exists for. It inventories AI agents across an environment and derives which of them are unmonitored from observable properties such as egress path, credential attributability and deployment provenance, because in the contexts it targets there is no registry to look them up in. geigercapital.us/agentlens Private repository 13 collectors · 7 providers
  3. 05 Lattice Lab A closed harness measuring how much of a 48-bit java.util.Random seed has to leak before the rest can be rebuilt. Anchored on the Randar attack, generalised to a phase diagram, and folded into repoauditor as the evidence behind its weak-RNG check. geigercapital.us/lattice Published · MIT v0.5.0 · edge at n·k = 48
  4. 06 RepoAuditor A security review pipeline for a codebase nobody on the team wrote. Every scanner match and model output is a candidate to be challenged rather than a verdict, undecided human review blocks the final analysis, and it ends in an engineering backlog and a leadership memo rather than a score. geigercapital.us/repoauditor Published · MIT v0.1.0 · DOI 10.5281/zenodo.22697400

Studio

Two systems, four instruments, one method: stand the thing up for real, then instrument it until its behaviour is legible.

A control that has never been enforced against live traffic is a claim, not a control. Both systems here exist to close that gap. One puts a documented SDLC around infrastructure that real players depend on. The other gives autonomous agents a genuine organisation to discover, so governance questions can be asked of something with a real surface instead of a diagram.

The instruments are the same argument in reverse. A supply-chain analyser and an agent inventory are only worth something once they have been run against a system that can push back, which is what the two above are for.

Everything is small on purpose. One operator, published runbooks, and enough uptime that the numbers mean something.

A vaulted cloister corridor receding into shadow, its repeating arches marching toward a lit doorway.

LedgerPublic surface and deploy history

Homestead SMP

Site
play.geigercapital.us
Game
mc.geigercapital.us
Map
map.geigercapital.us
Status
api.geigercapital.us/status
Stack
Fabric · Minecraft 1.20.1 · Homestead 1.3.6 · 428 mods checksum-verified
Since
April 2026

Fin Platform Holdings

Site
finplatform.geigercapital.us
API
api.finplatform.geigercapital.us
Health
api.finplatform.geigercapital.us/healthz
Status
status.finplatform.geigercapital.us
Services
Intake · Settlement · Screening · Reference data
Nature
Synthetic organisation · non-production · generated traffic only

Instruments

Chainwatch
geigercapital.us/chainwatch · github.com/erxxc/chainwatch
Agentlens
geigercapital.us/agentlens · repository private
Lattice Lab
geigercapital.us/lattice · github.com/erxxc/prng-lattice-lab
RepoAuditor
geigercapital.us/repoauditor · github.com/erxxc/repoauditor

Deploys

10 Sep 2026
9dfb83a RepoAuditor Merge pull request #136 from erxxc/codex/zenodo-readiness
10 Sep 2026
152dcaf RepoAuditor docs: prepare v0.1.0 Zenodo release
10 Sep 2026
8af28c6 Lattice Lab Merge pull request #7 from erxxc/backfill-zenodo-doi
10 Sep 2026
bbc2793 Lattice Lab Backfill Zenodo DOIs into CITATION.cff and README (v0.5.0)
10 Sep 2026
3f4a603 Chainwatch Merge pull request #15 from erxxc/release/v0.2.0-prep
10 Sep 2026
962b46d Chainwatch Prepare the v0.2.0 release: version bump, citation metadata, changelog
10 Sep 2026
a42b395 Chainwatch Normalise every dataset report timestamp to T00:00:00Z, as documented
10 Sep 2026
9b74804 Lattice Lab Merge pull request #6 from erxxc/release-metadata
10 Sep 2026
b181823 RepoAuditor Merge pull request #135 from erxxc/codex/opt-038-python-weak-rng
10 Sep 2026
ea0938d Lattice Lab Merge pull request #3 from erxxc/evidence-artifacts
10 Sep 2026
5f4471e RepoAuditor feat: qualify Python weak-RNG detector
10 Sep 2026
8149872 Homestead SMP Merge pull request #58 from erxxc/dependabot/github_actions/bridgecrewio/chec…
09 Sep 2026
72e727f Chainwatch Merge pull request #14 from erxxc/research/backlog-round-1
09 Sep 2026
97c573d Homestead SMP Drop the em dash from the parent signature's label
09 Sep 2026
bac0845 Homestead SMP Add a CI check for inline content the CSP will refuse to run
09 Sep 2026
0c06e0a Homestead SMP Move the blocked inline script into main.js

The 4 most recent deploys from each published repository, read on 10 September 2026 · 4 published repositories · 3 private repositories are not listed. Only pushed commits count here.