CodeTonight
CodeTonight builds the AI that works for you, not against you — and licenses the engine behind it.
facta non verba — deeds, not words.
Cape Town, South Africa
The Engine
GRIP brings the reasoning; HAL brings the zero-limit, any-provider runtime.
GRIP + HAL are licensed to firms by invitation — not a download, not a git clone.
The agentic brain. Convergence architecture — every operation is
converge(state, criterion, improve) — recursive self-improvement under human gates,
and scientific measurement: every claim registers a falsifiable hypothesis, effect sizes over
directions, shadow metrics against Goodhart.
The any-model runtime. 100 modules across 8 layers, mixture-of-experts routing across Claude, GPT, Gemini, and Llama, a conversation engine that persists sessions across weeks, and mechanical safety — hook dispatch, sanitisation, agent traps.
def converge(state, criterion, improve, depth=0, max_depth=11): """The entire system in 37 tokens.""" if criterion(state) or depth >= max_depth: return state return converge(improve(state), criterion, improve, depth+1, max_depth)
AI safety achieved through mechanisms, not values.
HAPPI/1.3 — AI as a syscall
A provider-agnostic envelope contract — your callers ask for inference, never binding to a vendor's SDK. As of 1.3 the same open envelope carries provenance: an audit receipt for each decision, a replayable memory-chain of what the model knew, and deterministic citation checks that prove quoted text is present in the supplied source. The standard is free and public — the runtime that serves and anchors it is licensed.
client = OpenAI(api_key=...)
client.chat.completions.create(
model="gpt-4o",
messages=[...],
)
# swap providers? rewrite every call.
infer({
provider: "any",
prompt: "...",
})
# swap providers? change one field.
CRYPTOGRAPHIC CAUSATION
These three event types compose into a single moat: tamper-evident, replayable records of what an AI decided, what it believed when it decided, and every claim it asserts — hash-chained and Merkle-rooted, externally anchorable. The verifier is the math and an independent party, never the AI. A sceptic can re-run the replay, re-verify the RFC 6962 Merkle inclusion proof, and re-check each citation against its source. Falsifiable by construction. Popper applied to AI provenance.
Four clone-able SDKs, one envelope contract, identical behaviour:
Node, Deno, and Bun. No dependencies.
The test suite every SDK must pass.
ONE INSTALL — macOS · Linux · Windows/Git-Bash
Stands up a local HAL gateway (sovereign by default — non-Anthropic; DeepSeek · Gemini · Groq · xAI with automatic failover), a HAPPI/1.3 runtime, and a witnessable node. Cross-platform. Secrets via the OS keychain, never baked in.
Don’t trust it — witness it. The node publishes its own signed decision chain; verify one inclusion proof in-browser, no account needed → happiverse.grip-web.com
GRASP — the moat, in open source
HAPPI defines the provenance verbs; GRASP — Governed Reasoning And Signable Provenance — is the open-source (AGPL-3.0) reference implementation of all three. What an AI decided, what it believed when it decided, and whether every claim it made is verbatim-present in its cited source. Cryptographic causation you can clone, run, and check for yourself — not a promise, a library.
Decision record
Signed Intent Decision Records, predecessor-chained into a forest rooted only at exogenous anchors — CI runs, human commits, cross-provider verdicts — with an RFC 6962 Merkle root and O(log N) inclusion proofs.
Belief record
An append-only, signed memory-chain of the evolving mental model — so the record carries what the system believed at decision time, not just its output.
Claim record
Deterministic verbatim-citation provenance: every cited quote is checked against its source
— exact, then whitespace-tolerant, then not_found. A fabricated quote renders red
and cannot earn a pass, because the check is arithmetic matching, not judgement.
Don’t trust it — witness it. The verifier is the math and an independent party, never the AI. A sceptic — a regulator, opposing counsel, an auditor — can re-run the replay, re-verify the Merkle inclusion proof, and re-check each citation against its source. GRASP proves a quote is verbatim-present in the source you supply — not that the source is authentic, nor that the quote supports the point; that last mile stays a human's job. Falsifiable by construction; free and open under AGPL-3.0.
The Open Work
Around the private engine: real open-source tools, each carrying a falsifiable claim — a proof, a cost model, a live game. They are the engine's quality, shown not told.
GRIP + HAL are licensed, never cloned. Request a licensing conversation →
The public, readable face of the moat: every decision GRIP's AI ships to its own codebase, as an order-evident chain — hash-linked so nothing can be quietly dropped or reordered. No code, no diffs, no client data: an allowlist, not a redaction. The engine that signs and externally anchors it stays licensed.
Cross-session branch reconciliation as a convergence loop — divergent parallel work resolved safely, verifiably, replayably.
Keeps the Anthropic prompt cache warm so long sessions stop paying the cold-read tax. The saving is a model you can check, not a promise.
grip-post is an anti-fluff gate that refuses to write fluff — we run it on our own copy. Unicode formatter + anti-slop gate for LinkedIn, browser-extensible.
Share a knowledge base across concurrent Claude Code sessions — inbox, session registry, and live snapshots, garbage-collected by TTL.
A ranked WebGL game with verifiable scores.
Keep your engineering skills sharp while using AI. The sharpest sword is forged through use, not observation — for engineers who use Claude Code daily.
AI Craftspeople Guild
Every claim gets tested. Every result gets published. If it can't be falsified, it doesn't get said. That's the entry requirement.
Falsification First
State what would disprove your claim before you publish it. The Guild runs on Popper, not marketing. A system that only confirms is not doing science.
Observable Results
Show the metric, the method, and the failure conditions. If you can't measure it, you can't claim it. Code or it didn't happen.
Mechanical Safety
Python functions that return DENY. Not guidelines, not best practices, not hopes. Deterministic gates that cannot be talked around.
No Worship Zone
AI is a tool. Not a colleague, not a friend, not a deity. The Guild exists because someone has to say that out loud in a room full of believers.
Pro-Bono & Play
Public good and genuine fun — games with real players, a Guild design, a privacy-first desktop app. All open, all honest about who built them.
Afrikaans daily word game. Vanilla JS, offline-first PWA, zero dependencies. Woordraaispel — lekker!
Dog-friendly smart doorbell with anti-conditioning frequency randomisation. Thomas Frumkin's design from the AI Craftspeople Guild.
Unified Google Workspace — Gmail, Calendar, Drive, and Tasks in one desktop app, MCP-enabled for AI integration. Privacy-first.
Italian Brainrot — father-son games by V>> and his son. Personal projects, open source, built for laughs.
Tap when "Sahur!" appears. Minimal code, maximum chaos.
Also in the lab: TWR — a clipboard manager with version-control patterns; shipping soon.
More: GRIP whitepaper
· tralala.
What we will not do
Principle 01: we will not build what should not exist. The open-core boundary is the clearest case — GRIP is licensed, not cloned. The standard (HAPPI) is yours to take; the runtime that makes it fast is ours to license. That line is deliberate, not a paywall bolted on later.
And phrases this page will not ship:
The Team
Small, focused, opinionated. Cape Town, South Africa.
Get In Touch
Interested in licensing the engine, the open-source tools, or pro-bono work? Tell us what you need.
License the engine
GRIP + HAL are licensed to firms by invitation. Bring your actual work — the repetitive tasks, the docs nobody writes, the bottlenecks you keep working around — and we'll talk about whether the engine fits.
The HAPPI standard is free, the tools around it are open-source and clone-able today, and the engine is by invitation.
Request a licensing conversation