Founder & CTO · Lagos
I systems. I build, secure, run, ship, and defend systems.
I’m Alex Idowu. Developer, security-minded operator, and founder. Platforms and products, open source agents and sandboxes, and the unglamorous work of keeping software alive in production. Then I write down what actually worked.
@nitrocode
01 - Work
What I’m building
Company product, a long-running personal agent dream, security systems, and isolation tooling.
-
Company
Visit ↗
PipeOps
Code-to-cloud deployment platform. Multi-cloud provisioning, BuildKit builds, Kubernetes runtime, and BYOS agents, with Go services in production.
-
Dream project
Repo ↗
Igris
Voice-only personal AI agent (Go brain, Apple clients, arc-reactor UI). Grown-up return of a 2014/15 OAU prototype: custom sci-fi UI, a “hey Jarvis” wake word, and desktop actions like open app or shut down PC.
-
Open source
Repo ↗
Rexec
Terminal control room for disposable cloud terminals, outbound BYOS agents, session recording, and agent sandboxes for CLIs and AI tools.
-
Security
In progress
Aeon
Security software for high-trust orgs: discovery, remediation, policy, compliance across cloud, on-prem, and hybrid.
-
Open source
Repo ↗
OpenFing
Privacy-first network scanner in Zig. Scans stay on your machine: no accounts and no topology upload.
02 - Patterns
Systems I’ve shipped
Isolation, deploy pipelines, and secure access under product pressure.
03 - Writing
Recent essays
Engineer-to-engineer notes: architecture, failure modes, production lessons.
-
Multi-Tenant Kubernetes: Namespaces Aren’t Isolation
We tried shared Kubernetes with a namespace per customer and killed it in two weeks. This is the isolation stack that survived: Capsule, NetworkPolicy, quotas, an API proxy, and gVisor.
-
Igris: Finishing the Voice Agent I Started at OAU in 2014
In 2014 at OAU I built a voice agent the stack could not carry. Sci-fi UI. A hey Jarvis wake word. Apps that opened when I spoke. Igris is me finishing that dream with a Go brain, Apple clients, and a 3D guardian plan.
-
Agent Terminal Sandboxes: Isolation That Isn’t “Trust the Model”
I got tired of coding agents treating my laptop like a free shell. Here is the isolation model I built into Rexec so untrusted tool calls run in disposable, gVisor-backed terminals instead.
-
Rexec: The Terminal Control Room I Built to Test a CLI
I only needed a throwaway terminal to prove a CLI worked on real machines. Scope creep built Rexec: a control room for disposable cloud terminals, outbound agents, and safer places for AI tools to run.
-
I Built an Open Source Alternative to Fing Because Privacy Matters
Fing took the free network CLI and started shipping your home topology to the cloud. So I built OpenFing in Zig: same job, local only, no account and no subscription.
Elsewhere
Building in public. Open to hard infrastructure problems and thoughtful collaboration.