Founder & CTO · Lagos

I systems.

I’m Alex Idowu. Developer, security-minded operator, and founder. Platforms and products, open source agents and sandboxes, and the unglamorous work of keeping software alive in production. Then I write down what actually worked.

  • PipeOps
  • Igris
  • Rexec
  • Aeon

Read writing About GitHub

Alex Idowu @nitrocode

01 - Work

What I’m building

Company product, a long-running personal agent dream, security systems, and isolation tooling.

  • Company

    PipeOps

    Code-to-cloud deployment platform. Multi-cloud provisioning, BuildKit builds, Kubernetes runtime, and BYOS agents, with Go services in production.

    Visit ↗
  • Dream project

    Igris

    Voice-only personal AI agent (Go brain, Apple clients, arc-reactor UI). Grown-up return of a 2014/15 OAU prototype: custom sci-fi UI, a “hey Jarvis” wake word, and desktop actions like open app or shut down PC.

    Repo ↗
  • Open source

    Rexec

    Terminal control room for disposable cloud terminals, outbound BYOS agents, session recording, and agent sandboxes for CLIs and AI tools.

    Repo ↗
  • Security

    Aeon

    Security software for high-trust orgs: discovery, remediation, policy, compliance across cloud, on-prem, and hybrid.

    In progress
  • Open source

    OpenFing

    Privacy-first network scanner in Zig. Scans stay on your machine: no accounts and no topology upload.

    Repo ↗

02 - Patterns

Systems I’ve shipped

Isolation, deploy pipelines, and secure access under product pressure.

Multi-tenant Kubernetes Capsule, NetworkPolicy, API proxy, and gVisor for tenant workloads. Deep dive →
Deploy architecture BuildKit, RabbitMQ queues, Go runners end-to-end. Deep dive →
Multi-cloud runners Terraform provisioning across AWS, GCP, Azure. The Runner →
BYOS + gVisor sandboxes Outbound agents; disposable terminals isolated with runsc. Safe agent terminals →

03 - Writing

Recent essays

Engineer-to-engineer notes: architecture, failure modes, production lessons.

  • Namespaces Aren't Isolation

    We tried shared Kubernetes with a namespace per customer and killed it in two weeks. This is the isolation stack that survived: Capsule, NetworkPolicy, quotas, an API proxy, and gVisor.

  • Igris: Finishing the Voice Agent I Started at OAU in 2014

    In 2014 at OAU I built a voice agent the stack could not carry. Sci-fi UI. A hey Jarvis wake word. Apps that opened when I spoke. Igris is me finishing that dream with a Go brain, Apple clients, and a 3D guardian plan.

  • How to Safely Give AI Agents a Terminal

    AI agents need a shell to be useful. Giving them yours is a bad idea. Here is how I isolate untrusted tool calls in disposable, gVisor-backed terminals with Rexec.

  • Rexec: The Terminal Control Room I Built to Test a CLI

    I only needed a throwaway terminal to prove a CLI worked on real machines. Scope creep built Rexec: a control room for disposable cloud terminals, outbound agents, and safer places for AI tools to run.

  • I Built an Open Source Alternative to Fing Because Privacy Matters

    Fing took the free network CLI and started shipping your home topology to the cloud. So I built OpenFing in Zig: same job, local only, no account and no subscription.

Full index of writing →

Elsewhere

Building in public. Open to hard infrastructure problems and thoughtful collaboration.