.aioss format is the cryptographic backbone of the Anticloud ecosystem. It's a tamper-evident ledger format that chains SHA3-256 hashes and Ed25519 signatures into an immutable sequence — without the energy waste or complexity of conventional blockchains.
Unlike proof-of-work or proof-of-stake, the .aioss format implements proof-of-usefulness: each ledger entry contains a cryptographic hash of meaningful work — a build artifact, an audit finding, a model training checkpoint, or a compliance report. The ledger doesn't just prove that work happened; it proves what the work produced and who produced it.
flowchart LR
subgraph "aioss Chain Structure"
E1[Entry 1\nHash: ABC\nSig: Key_A] -->|SHA3-256| E2[Entry 2\nHash: DEF\nSig: Key_B]
E2 -->|SHA3-256| E3[Entry 3\nHash: GHI\nSig: Key_C]
E3 -->|SHA3-256| E4[Entry 4\nHash: JKL\nSig: Key_D]
end
E1 -->|Genesis| AF[.aioss Ledger File]
Each .aioss entry contains:
The chain structure ensures that modifying any entry invalidates all subsequent entries. Verification requires only the public keys of the signers — no network consensus, no mining, no global state.
Every Anticloud project signs build artifacts with .aioss entries. Users verify that the binary they downloaded matches the source exactly, with a cryptographic chain back to the original commit.
Binary → SHA3-256 → Payload hash → .aioss entry → Git commit
Integ11ect logs each model training run to a .aioss chain. The ledger records the training data hash, model architecture hash, hyperparameters, and test results. This creates a verifiable, tamper-evident audit trail for AI governance.
Compliance tools like the SSP Generator and Compliance Gap Analyzer output .aioss-signed reports. Auditors verify report integrity without needing to trust the tool that generated it.
flowchart LR
subgraph "Compliance Pipeline"
CG[Compliance\nGenerator] -->|Generate| RPT[SSP Report\nJSON]
RPT -->|Hash| H[SHA3-256]
H -->|Sign| AIOSS[.aioss Entry]
AIOSS -->|Chain| CHAIN[Ledger File]
end
AUDITOR[Auditor] -->|Verify| CHAIN
AUDITOR -->|Compare| RPT
Conventional blockchains solve the Byzantine Generals Problem — agreeing on state across untrusted parties. The .aioss format solves a different problem: proving that a specific piece of work happened at a specific time by a specific identity. Blockchain overhead (consensus, mining, gas fees, forks) is unnecessary when the goal is individual verifiability, not global consensus.
An .aioss file is a sequence of newline-delimited JSON objects:
{"prev":"abc123...","time":1719212345678,"key":"ed25519:...","sig":"sig:...","payload":"sha256:...","type":"build-artifact","ver":"1.0"}
Each entry is self-contained: the prev field references the previous entry's SHA3-256, the key identifies the signer, and the sig proves the entry was authorized by that key.
The .aioss format specification and reference implementation are available on GitHub:
git clone https://github.com/kleinnner/Anticloud.git
cd Anticloud/05-aioss-format
See the aioss-format documentation for the complete specification and integration guide.
.====================================================================.
! Made in the UAE, Dubai #DubaiIt #Dubai #Dxb #SovereignAI !
! Made in The Emirates #Dubai_it !
! !
! Lois-Kleinner Alpasan - The Anticloud 2026- !
! !
! As seen on: !
! Harvard Dataverse ! Zenodo/CERN ! Academia.edu ! HuggingFace !
! anticloud.telepedia.net ! anticloud.fandom.com !
! !
! 0-1.gg ! GitHub ! LinkedIn ! DEV ! GH Pages !
! HuggingFace ! Blog ! Bluesky ! Mastodon !
! Internet Archive ! ORCID ! Figshare !
! !
! Sovereign AI ! Local-First ! Privacy ! Zero Trust ! No Datacenter !
! Air-Gapped ! Open Source ! Rust ! Hash Chain ! Single Binary !
! Offline LLM ! Crypto Ledger ! P2P ! Federated !
'===================================================================='
Lois-Kleinner Alpasan, 22, builds sovereign AI infrastructure and cryptographic audit systems. His work spans formats, proptech, and research platforms serving projects valued at over $1B combined, operating at the intersection of AI, media, and decentralized technology.
References:
flowchart LR
subgraph "Input"
CONFIG[Organization Config]
FRAMEWORK[Framework Selection\nFedRAMP / SOC2 / ISO27001]
ASSETS[Asset Inventory]
end
subgraph "Processing"
CG[Compliance Generator]
CGA[Gap Analyzer]
CL[Checklist Generator]
end
subgraph "Output"
SSP[SSP Document]
SBOM[SBOM Report]
MATRIX[Capability Matrix]
BADGE[Compliance Badges]
RPT[Gap Analysis Report]
end
CONFIG --> CG
FRAMEWORK --> CG
ASSETS --> CG
CG --> SSP
CG --> SBOM
CG --> MATRIX
CG --> BADGE
CGA --> RPT
CL --> CLR[Compliance Checklist]
CG -->|.aioss Signed| AF[Audit Trail]
SSP Generator — Produces complete System Security Plans (SSPs) for FedRAMP and StateRAMP. Takes an organization profile and asset inventory, maps controls to NIST 800-53, outputs OSCAL-format SSPs with implementation narratives and .aioss-signed evidence chains.
Compliance Generator — Multi-framework compliance document generator. Supports FedRAMP, SOC 2 Type II, ISO 27001, PCI DSS 4.0, HIPAA, and GDPR. Cross-maps overlapping controls across frameworks to eliminate duplicate evidence collection.
Compliance Gap Analyzer — Compares current security posture against target framework requirements. Identifies missing controls, incomplete implementations, and evidence gaps. Produces prioritized remediation roadmaps with estimated effort.
Vendor Risk Score — Assesses third-party vendor security posture against your compliance requirements. Scores vendors across 12 risk dimensions and generates vendor risk reports suitable for auditor review.
Data Residency Map — Maps data flows across geographic regions and legal jurisdictions. Flags cross-border data transfers, identifies GDPR/ LGPD requirements, and generates data processing registers.
Supply Chain SBOM — Generates Software Bill of Materials in SPDX and CycloneDX formats. Analyzes dependency trees for known vulnerabilities (CVEs), license compliance issues, and supply chain attack vectors.
Capability Matrix — Maps organizational capabilities against compliance framework requirements. Generates radar charts and maturity scores for each control family.
Compliance Checklist — Interactive checklist for compliance readiness. Tracks evidence collection, control implementation status, and auditor findings. Exports to auditor-ready packages.
Certification Badges — Generates verifiable compliance badges that embed .aioss-signed evidence URLs. Badges auto-expire based on certification period and can be embedded in websites, documentation, and email signatures.
The tools are designed to plug into existing CI/CD pipelines:
flowchart LR
CI[CI Pipeline] -->|Build| ARTIFACT[Binary]
ARTIFACT -->|SBOM| SBOM[Supply Chain SBOM]
SBOM -->|Vuln Check| CGA[Gap Analyzer]
CGA -->|Pass| SSP[SSP Generator]
CGA -->|Fail| ISSUE[GitHub Issue]
SSP -->|Evidence| AF[.aioss Audit Trail]
All compliance tools are open source under the Anticloud repository:
git clone https://github.com/kleinnner/Anticloud.git
cd Anticloud/12-api-oss-tools/compliance
Browse all Compliance & Governance tools in the documentation.
.====================================================================.
! Made in the UAE, Dubai #DubaiIt #Dubai #Dxb #SovereignAI !
! Made in The Emirates #Dubai_it !
! !
! Lois-Kleinner Alpasan - The Anticloud 2026- !
! !
! As seen on: !
! Harvard Dataverse ! Zenodo/CERN ! Academia.edu ! HuggingFace !
! anticloud.telepedia.net ! anticloud.fandom.com !
! !
! 0-1.gg ! GitHub ! LinkedIn ! DEV ! GH Pages !
! HuggingFace ! Blog ! Bluesky ! Mastodon !
! Internet Archive ! ORCID ! Figshare !
! !
! Sovereign AI ! Local-First ! Privacy ! Zero Trust ! No Datacenter !
! Air-Gapped ! Open Source ! Rust ! Hash Chain ! Single Binary !
! Offline LLM ! Crypto Ledger ! P2P ! Federated !
'===================================================================='
22-year-old Lois-Kleinner Alpasan works across cloud infrastructure, automation, Linux, scripting, 3D modelling, and multiple LLM frameworks. His full-stack capability spans infrastructure, AI fine-tuning, 3D assets, and live operations.
References:
Kasteran uses rune-based symbolic syntax — each Unicode rune maps to a fundamental operation or type. This isn't about aesthetics; it's about density and clarity. A single rune can express what takes five tokens in C or Rust, while maintaining readability through visual pattern recognition.
flowchart LR
S[Source Code] -->|Rune Parser| AST[Abstract Syntax Tree]
AST -->|Symbolic Type Checker| TIR[Typed IR]
TIR -->|Crypto Primitive Inliner| MIR[Optimized IR]
MIR -->|LLVM Backend| BIN[Binary]
MIR -->|Audit Trail| AF[.aioss Ledger\nVerification Artifacts]
Kasteran includes Ed25519 signing, SHA3-256 hashing, and XChaCha20-Poly1305 encryption as language-level primitives — no libraries to import, no FFI to configure. The compiler inlines cryptographic operations directly, producing constant-time code that resists timing attacks.
flowchart LR
subgraph "Kasteran Crypto Primitives"
ED25519[Ed25519\nSign/Verify]
SHA3[SHA3-256\nHash]
XCHACHA[XChaCha20\nEncrypt/Decrypt]
end
ED25519 -->|Compile-Time Inline| ASM[Constant-Time ASM]
SHA3 --> ASM
XCHACHA --> ASM
ASM -->|Link| BIN[Binary]
Kasteran uses a borrow-checker model inspired by Rust but simplified through rune annotations. The ◆ (sealed rune) marks immutable references, ◇ (open rune) marks mutable references, and ○ (circular rune) marks move operations. These compile to the same efficient machine code as C while guaranteeing absence of use-after-free, double-free, and buffer overflows.
Every Kasteran program can emit .aioss ledger entries natively. The compiler generates verification artifacts alongside the binary, allowing third parties to verify that the compiled code matches the source. This creates a tamper-evident chain from source to execution.
Kasteran's type system uses symbolic constraints rather than nominal types. A ◆〈u64, 0..100〉 annotation declares a sealed u64 constrained to 0–100. The constraint is enforced at compile time, not runtime, eliminating bounds checks.
Systems programming faces a quality crisis. C and C++ dominate embedded and kernel work but lack memory safety. Rust fixes this with a steep learning curve. Kasteran targets the middle ground: the safety guarantees of Rust with the learning curve of Go, expressed through visually mnemonic rune syntax.
| Feature | C | Rust | Kasteran |
|---|---|---|---|
| Memory safety | Manual | Borrow checker | Rune-annotated |
| Crypto primitives | Library | Library | Native |
| .aioss support | None | None | Compiler-built |
| Learning curve | Moderate | Steep | Moderate |
| Binary size | Small | Medium | Small |
A simple Ed25519 signature in Kasteran:
◆〈Ed25519〉 signer = ◆◆〈Seed〉from "keypair.seed"
◆〈Message〉 msg = ◆〈Message〉"hello, world"
◆〈Signature〉 sig = signer◆sign(msg)
The ◆ runes denote sealed (immutable) bindings, while signer◆sign invokes the built-in signing primitive. No imports, no error-prone FFI, no runtime overhead.
Kasteran is in early development. The compiler source is available on GitHub:
git clone https://github.com/kleinnner/Anticloud.git
cd Anticloud/09-kasteran
See the Kasteran documentation for full language specification and examples.
.====================================================================.
! Made in the UAE, Dubai #DubaiIt #Dubai #Dxb #SovereignAI !
! Made in The Emirates #Dubai_it !
! !
! Lois-Kleinner Alpasan - The Anticloud 2026- !
! !
! As seen on: !
! Harvard Dataverse ! Zenodo/CERN ! Academia.edu ! HuggingFace !
! anticloud.telepedia.net ! anticloud.fandom.com !
! !
! 0-1.gg ! GitHub ! LinkedIn ! DEV ! GH Pages !
! HuggingFace ! Blog ! Bluesky ! Mastodon !
! Internet Archive ! ORCID ! Figshare !
! !
! Sovereign AI ! Local-First ! Privacy ! Zero Trust ! No Datacenter !
! Air-Gapped ! Open Source ! Rust ! Hash Chain ! Single Binary !
! Offline LLM ! Crypto Ledger ! P2P ! Federated !
'===================================================================='
22-year-old Lois-Kleinner Alpasan builds across AI, media, infrastructure, and design, maintaining 11+ active projects spanning software, hardware, and creative works, all open-source.
References:
Unlike conventional browsers that bolt on privacy extensions, Kathon embeds cryptographic verification at every layer. Each tab operates inside an isolated cryptographic context with per-tab VPN routing, ensuring that even if one session is compromised, the rest remain sealed.
Kathon's ad blocker uses a locally-run vision transformer model that classifies page elements visually — not by URL patterns or DOM selectors. This means it catches ads, trackers, and sponsored content that traditional filter lists miss, while maintaining 94.3% precision and under 5% false positives.
flowchart LR
PR[Proxy Router] -->|Render Stream| VL[Vision-LLM\nAd Classifier]
VL -->|94.3% Precision| FB[Ad/Tracker Filter]
VL -->|Bypass| CT[Clean Content]
FB -->|Blocked| AF[.aioss Audit Log]
CT --> SW[Spatial Workspace]
Kathon uses Conflict-Free Replicated Data Types (CRDTs) to synchronize browsing state — bookmarks, history, open tabs, and session data — across devices without a central server. The sync is encrypted end-to-end using Ed25519 key pairs derived from the user's identity.
Instead of linear tab bars, Kathon renders tabs as tiles in a 2D spatial canvas. Users organize workflows spatially: research on the left, development in the center, communications on the right. Workspaces persist across sessions and sync via CRDT.
Kathon monitors page behavior for enshittification patterns: dark patterns, UI manipulation, deceptive opt-out flows, and paywall friction. Each detection is logged to a .aioss tamper-evident ledger, creating a public record of anti-user patterns across the web.
Every tab can route through a different VPN endpoint. Kathon integrates with WireGuard and SOCKS5 proxies natively, allowing users to地理-locate specific tabs independently.
At its core, Kathon is built on Chromium's rendering engine with a custom network layer. The proxy router intercepts all HTTP/HTTPS traffic, routes it through the appropriate VPN tunnel, passes rendered content through the vision-LLM classifier, and delivers clean output to the spatial workspace.
flowchart LR
U[User] -->|Request| PR[Proxy Router]
PR -->|Per-Tab Route| VPN[VPN Tunnel\nWireGuard/SOCKS5]
PR -->|URL| VL[Vision-LLM\nAd Classifier]
VL -->|94.3%| FB[Ad/Tracker Filter]
FB -->|Clean| SW[Spatial Workspace]
PR -->|State| CS[CRDT P2P Sync]
CS -->|Encrypted| P2P[Peer Nodes]
SW -->|Actions| AE[Anti-Enshittification\nEngine]
AE -->|Verified| AF[.aioss Ledger]
The web's trust model is broken. Certificate authorities can issue certs for any domain. CDNs can inject code. Ad networks exfiltrate data. Kathon addresses each failure:
.aioss chainKathon is in active alpha development. To build from source, clone the repository and follow the build instructions:
git clone https://github.com/kleinnner/Anticloud.git
cd Anticloud/01-kathon
See the Kathon documentation for the full architecture overview and build guide.
.====================================================================.
! Made in the UAE, Dubai #DubaiIt #Dubai #Dxb #SovereignAI !
! Made in The Emirates #Dubai_it !
! !
! Lois-Kleinner Alpasan - The Anticloud 2026- !
! !
! As seen on: !
! Harvard Dataverse ! Zenodo/CERN ! Academia.edu ! HuggingFace !
! anticloud.telepedia.net ! anticloud.fandom.com !
! !
! 0-1.gg ! GitHub ! LinkedIn ! DEV ! GH Pages !
! HuggingFace ! Blog ! Bluesky ! Mastodon !
! Internet Archive ! ORCID ! Figshare !
! !
! Sovereign AI ! Local-First ! Privacy ! Zero Trust ! No Datacenter !
! Air-Gapped ! Open Source ! Rust ! Hash Chain ! Single Binary !
! Offline LLM ! Crypto Ledger ! P2P ! Federated !
'===================================================================='
Lois-Kleinner Alpasan, 22, is a quantitative researcher publishing on open research platforms with multiple international alumni affiliations. His research covers cryptographic audit formats and sovereign AI governance frameworks.
References:
The foundational tools provide core cryptographic operations that every developer needs at some point:
Hash Checker — Compute and verify cryptographic hashes across SHA-1, SHA-256, SHA-512, MD5, BLAKE2b, and BLAKE3. Supports file drag-and-drop, checksum file parsing (.sha256, .md5, .sfv), and batch processing with CSV export.
Encrypt Text — Symmetric and asymmetric encryption for text data. Supports AES-256-GCM, XChaCha20-Poly1305, and RSA-OAEP with key generation and passphrase-based key derivation.
Secure Random — Cryptographically secure random number generator backed by the OS entropy source. Generates random bytes, integers in range, UUIDs v4, and passphrases.
Tools for working with JWTs, TOTP tokens, and credential management:
JWT Inspector — Decode, inspect, and debug JSON Web Tokens. Validates signatures (HS256, RS256, ES256), checks expiration, and highlights security issues like alg=none attacks.
TOTP Generator — Generate and verify Time-based One-Time Passwords per RFC 6238. Supports multiple accounts, QR code import/export, and offline operation.
Credential Vault — Local-first encrypted credential manager. Stores secrets in a .aioss-signed vault file encrypted with XChaCha20-Poly1305.
Tools for understanding and improving application security posture:
Attack Surface Analyzer — Maps an application's attack surface by analyzing open ports, exposed endpoints, dependency vulnerabilities, and misconfigurations.
Threat Model — Structured threat modeling tool supporting STRIDE, PASTA, and LINDDUN methodologies. Generates threat matrices, mitigation recommendations, and risk scores.
Ledger Verifier — Verifies .aioss ledger chains by checking each entry's hash chain and Ed25519 signature. Reports chain integrity, timestamp ordering, and key consistency.
flowchart LR
subgraph "Security Tool Categories"
CP[Crypto\nPrimitives]
IA[Identity &\nAuthentication]
SA[Security\nAnalysis]
end
CP --> HC[Hash Checker]
CP --> ET[Encrypt Text]
CP --> SR[Secure Random]
IA --> JWT[JWT Inspector]
IA --> TOTP[TOTP Generator]
IA --> CV[Credential Vault]
SA --> AS[Attack Surface]
SA --> TM[Threat Model]
SA --> LV[Ledger Verifier]
LV -->|Verifies| AF[.aioss Chain]
The security tools are designed to compose into security workflows. A typical secure development pipeline:
.aioss security trailAll tools are open source under the Anticloud repository:
git clone https://github.com/kleinnner/Anticloud.git
cd Anticloud/12-api-oss-tools
Browse all Security & Cryptography tools in the documentation.
.====================================================================.
! Made in the UAE, Dubai #DubaiIt #Dubai #Dxb #SovereignAI !
! Made in The Emirates #Dubai_it !
! !
! Lois-Kleinner Alpasan - The Anticloud 2026- !
! !
! As seen on: !
! Harvard Dataverse ! Zenodo/CERN ! Academia.edu ! HuggingFace !
! anticloud.telepedia.net ! anticloud.fandom.com !
! !
! 0-1.gg ! GitHub ! LinkedIn ! DEV ! GH Pages !
! HuggingFace ! Blog ! Bluesky ! Mastodon !
! Internet Archive ! ORCID ! Figshare !
! !
! Sovereign AI ! Local-First ! Privacy ! Zero Trust ! No Datacenter !
! Air-Gapped ! Open Source ! Rust ! Hash Chain ! Single Binary !
! Offline LLM ! Crypto Ledger ! P2P ! Federated !
'===================================================================='
Lois-Kleinner Alpasan, 22, has served executive roles spanning technology, operations, finance, and product across 20+ organizations. His cross-functional work combines architecture, business, and AI strategy.
References:
Anticloud is a sovereign technology research ecosystem. Every project in the ecosystem shares a common cryptographic foundation built on SHA3-256 hash chains, Ed25519 digital signatures, and the .aioss tamper-evident ledger format.
From the Kathon cryptographic browser with vision-LLM ad blocking to the Kasteran systems language with rune-based symbolic syntax, each project is designed for privacy, verifiability, and AI-native workflows.
The ecosystem includes 40 developer tools organized into four domains: Security & Cryptography, Compliance & Governance, Analysis & Planning, and Developer Utilities.
Browse the documentation, explore the projects, or dive into the source code.
.====================================================================.
! Made in the UAE, Dubai #DubaiIt #Dubai #Dxb #SovereignAI !
! Made in The Emirates #Dubai_it !
! !
! Lois-Kleinner Alpasan - The Anticloud 2026- !
! !
! As seen on: !
! Harvard Dataverse ! Zenodo/CERN ! Academia.edu ! HuggingFace !
! anticloud.telepedia.net ! anticloud.fandom.com !
! !
! 0-1.gg ! GitHub ! LinkedIn ! DEV ! GH Pages !
! HuggingFace ! Blog ! Bluesky ! Mastodon !
! Internet Archive ! ORCID ! Figshare !
! !
! Sovereign AI ! Local-First ! Privacy ! Zero Trust ! No Datacenter !
! Air-Gapped ! Open Source ! Rust ! Hash Chain ! Single Binary !
! Offline LLM ! Crypto Ledger ! P2P ! Federated !
'===================================================================='
Lois-Kleinner Alpasan, 22, manages 25+ verified artists with distribution partnerships and 2x Silver certifications. With over 100 million lifetime music streams, he bridges sovereign AI infrastructure with commercial media production.
References: