Docs.rs

Dockerfile build equivalence checker — compares two built images' `docker history` layer sequence + final filesystem content modulo a typed volatile-path allowlist (supa-charge-akeyless-ci Phase 4)

Standing pre-warming service — polls watched public Dockerfiles for new commits and keeps sui's cache warm via sui-dockerfile-wrapper (supa-charge-akeyless-ci Phase 3)

Ryu Gateway token-budget stage: per-user / per-agent / per-session token budgets + the per-window exec budget, as a swappable BudgetBackend trait + registry with an in-memory built-in. The first extracted gateway stage crate.

Intercept/resolve/fall-through wrapper around `docker build` — cache-first via sui-cache, falling through to real docker on any miss (supa-charge-akeyless-ci Phase 2)

Ryu Gateway audit stage: the SQLite-backed append-only request log + lifetime token totals + query/summary, exposed as a swappable AuditBackend trait + id-keyed AuditRegistry with the built-in AuditLogger active by default. An extracted gateway stage crate (mirrors ryu-gw-budget / ryu-gw-evals).

Binary that runs the sui graph-server: GraphServer over UDS + GraphStore + LruHotCache, with tsunagu shutdown handling. Installable as a systemd service via the matching nixos-sui-daemon-graph profile in pleme-io/nix.

Shared value-types exchanged between Ryu Gateway stages (e.g. AlertTier). The neutral home for cross-stage vocabulary so peer stage crates (budget, firewall, …) never depend on each other.

Fine-tuning (Unsloth) durable state + HTTP surface for Ryu: Core's system-of-record for fine-tune jobs (SQLite `finetune.db`) and the trained-adapter catalog (`installed-adapters.json`), plus the `/api/finetune/*` control-plane surface. The training itself runs out-of-process in the `apps-store/finetune/sidecar` Python sidecar; this crate owns the durable records that survive a Core restart (the sidecar's in-process registry does not) and the thin proxy that drives the training worker over HTTP. An extracted Core capability crate — in-process default, consumed by Core as a path dependency. Its lone kernel coupling (the `~/.ryu` data directory) is inverted through `init_data_dir`, so this crate has ZERO dependency on apps/core.

Change Risk Anti-Patterns (CRAP) metric for Rust projects

Language Server Protocol implementation for RunMat editors and tooling

Statistical randomness-test toolkit (chi-squared, serial, runs, KS, birthday spacing, NIST SP 800-22, paranoid meta-test). Batteries-included layer over cribler_core.

WebAssembly bindings for embedding RunMat in browsers

Core statistical randomness-test engines (closure-based, RNG-library-agnostic). Extend via cribler.

Nix daemon replacement (worker protocol server) for the sui Rust-native Nix runtime

Cross-platform Claude Code smart session manager