
Chief of Tools @CertiK, Founder @qiling_io, Coder @signalensradio, Crew @unicorn_engine @capstone_engine @keystone_engine
Joined March 2009
- Tweets3.2K
- Following1.1K
- Followers2.3K
- Likes570
kaijern (xwings) retweeted
Update: Kerness is a multi-agent framework for building your own agent systems. Plug together models, tools, memory, and skills, then define how agents work together. Use the built-in components or bring your own.
github.com/xwings/kerness
Kerness core engine and pypi update, quick and easy way to install your harness framework.
pip3 install --upgrade kerness
github.com/xwings/kerness
Kerness v0.1.0 released. a true framework for you to build your own harness.
Multi-agent, memory management, skills and etc. Plug and play.
github.com/xwings/kerness/re…
Everyone is running someone else's harness.
Kerness is the kernel underneath harness: provider transport, tool dialects, the turn loop, access control, memory, compaction, resume.
You write the Markdown saying how yours behaves. 60 seconds, not 6 weeks.
Written in rust with python binding.
github.com/xwings/kerness
Trust is the foundation of blockchain, not just decentralization.
CertiK Co-founder & CEO Ronghui Gu joined Shusaku Fujino, CCO of OKJ, for a fireside chat on security, compliance, and building trust in Web3, moderated by Yuki Kamimoto of N.Avenue.
Stay tuned for the full conversation.
kaijern (xwings) retweeted
Layoffs suck. CertiK is hiring.
I am very much enjoying my time at @CertiK and would love to bring more talented folks to work on my team.
Here are the roles I am looking for:
1. Public Facing Senior Web3 Security Researcher (1-2 Openings)
Web3 security researcher who can act as a public face for CertiK. This means having a strong social media presence, speaking at conferences, and being openly helpful to the wider security community. This doesn't mean you have to have tens of thousands of followers, but you do need to be comfortable interacting with the general public. The specific type of security researcher is flexible - contract/chain auditors, pen testers, engineers can apply.
2. Web3 BD (1-3 openings)
We have big plans for new product offerings at CertiK. We need talented folks to understand our products and build relationships with our clients.
3. Senior Penetration Testing Engineer (1-2 openings)
See: jobs.lever.co/certik/305d508…
How to apply below 👇
Honored to be invited by Seattle University to serve as an external reviewer for a doctoral tenure review. Thank you for the trust and opportunity to support academic excellence.
Make @grok Build great
A portable SKILL.md that teaches agents like Grok Build to build & maintain a durable ARCHITECTURE.md + per-module docs. Learn, Plans and confirms before writing/fixing codes.
Making Grok Build work smarter
github.com/xwings/eatmycode
💥 Introducing "Dirty Frag"
A universal Linux LPE chaining two vulns in xfrm-ESP and RxRPC. A successor class to Dirty Pipe & Copy Fail.
No race, no panic on failure, fully deterministic. ~9 years latent.
Ubuntu / RHEL / Fedora / openSUSE / CentOS / AlmaLinux, and more.
Even if you've applied the "Copy Fail" mitigation, your Linux is still vulnerable to "Dirty Frag". Apply the Dirty Frag mitigation.
Details:
dirtyfrag.io
wrote a lightweight clash_meta replacement using rust.
github.com/xwings/miemietron…
kaijern (xwings) retweeted
I use @CertiK's new tool AI Auditor (beta)
Two scans revealed 9 findings (4 major, 0 critical), showing no immediate high-risk threats but clear areas needing improvement for stronger security and reliability.
The AI auditor effectively identifies key vulnerabilities quickly, helping reduce manual effort and speed up development.
To improve, the UI should focus on:
Guided onboarding
Clear severity explanations
Inline code highlights
Suggested fixes
Simple risk dashboard
Overall, it’s a solid tool with strong potential, especially with improved usability for new developers.
@hudsonjameson
@RonghuiGu
@CertiKCommunity
@CertiK
kaijern (xwings) retweeted
Want to play with it? DM @hudsonjameson for an invitation code and some free credits.
Software engineering took 30 years to evolve. AI is doing it in 3 (more or less)
We are watching the exact same abstraction ladder being built in real-time. Here is the mapping: 🧵👇
1️⃣ The Language & Editor Era
💻Code: Arguing over C, Assembly, Pascal, BASIC, & Java. The holy wars of vi vs. vim vs. emacs.
🤖 AI (2023): OpenAI, Google Gemini, Claude. We learned the raw syntax of prompting via primitive web interfaces.
2️⃣ The Library Era
💻 Code: Assembling isolated packages to build out logic without starting from scratch.
🤖 AI (Now): The MCP & Skills Era. Giving models specific tools to interact with local environments and APIs.
3️⃣ The Framework Era
💻 Code: Abstraction peaked. Frameworks like Node.js, Django (Python), & Qt (C++) emerged, dictating architecture so everything became plug-and-play.
🤖 AI (Next): The OpenClaw Era. Full agentic frameworks handling memory, routing, and autonomous execution natively.
The Reality Check: @openclaw isn’t a toy. It’s a serious programming framework for builders. Just like you plug and play with Node.js to build a backend, OpenClaw is the framework for the AI era.
The paradigm is shifting from "writing scripts" to "managing autonomous agents." Are you ready?
Can't decide which AI model gives the best answer? Check out github.com/xwings/clawstick – it lets multiple top models debate your question and deliver the ultimate refined response!
Huge thanks to @openrouter for making model switching effortless!
kaijern (xwings) retweeted
Based on our U.S. Digital Asset Policy Report, @Forbes explores how regulation is reshaping stablecoin markets.
As our CEO Prof. @RonghuiGu puts it: "As regulatory uncertainty recedes, the competitive frontier becomes operational.”
Read more👇
forbes.com/sites/digital-ass…













