The One-Man Security Lab Running on a 2017 Laptop With 8 GB of RAM

The configuration he bought is the configuration he'll have forever.

Every kernel trace, every cargo build, every QEMU boot of an LSM-patched kernel, every 151-test suite — all of it shares 8 gigabytes with the editor, the browser and the CI runners, on a CPU that predates the mainstream eBPF toolchain he now contributes to upstream.

CPU	Intel Core i5-8250U — 2017, 4C/8T, 15 W
Memory	8 GB RAM — the actual ceiling of his career so far
GPU	NVIDIA GeForce 940MX — 2016
Storage	240 GB SATA SSD (WD Green) + 1 TB 5400 rpm HDD
OS	Arch-based · Omarchy + Hyprland · LUKS full-disk encryption
Upgrade path	none — sealed purchase, five years and counting

CPU

Intel Core i5-8250U — 2017, 4C/8T, 15 W

Memory

8 GB RAM — the actual ceiling of his career so far

GPU

NVIDIA GeForce 940MX — 2016

Storage

240 GB SATA SSD (WD Green) + 1 TB 5400 rpm HDD

Arch-based · Omarchy + Hyprland · LUKS full-disk encryption

Upgrade path

none — sealed purchase, five years and counting

Note: the machine predates the eBPF toolchain it now builds. The code kept evolving. The chassis didn't.

Five years of commits, audited in public.

40+own repositories

14packages · 4 registries

3PRs open in aya-rs/book

18dev.to articles

3novels, Amazon Kindle

eBPF · Rust · Aya

Talus Process Monitor

Kernel-level anti-ransomware agent for Linux — ~280k events/s at <8% CPU, automated SIGKILL response. crates.io + GHCR + release binaries, 99 tests, 4 CI pipelines. ★20.

compilers · PyPI

Externum

A language built from scratch — one typed source compiles to readable Python, Bash and bytecode. 300+ tests with a differential harness across all three backends. Live browser playground.

blockchain · Rust

TrustNode

A from-scratch Solana validator: ledger, Reed-Solomon erasure coding, Tower BFT, Gossip, RPC — 151 tests, -D warnings enforced, cargo audit clean.

kernel · C

linux-aegis

A stackable Linux Security Module with upstream-style patches, built and run in QEMU. The kind of code that decides what a machine is allowed to do.

firmware · RISC-V

fortis

Bare-metal chain-of-trust: real SHA-256 + post-quantum ML-KEM-768 in firmware — who gets to boot, proven in silicon-adjacent code.

post-quantum · Rust

quantum-shield

File encryption that assumes the adversary records now and decrypts later — ML-KEM-768 + AES-256-GCM, fuzz-tested.

Plus: NV2_ENGINE — a voxel engine on wgpu with real NASA climate worlds and an embedded neural net, published to crates.io. Externum on PyPI since v2. CI/CD, releases and containers on every active repo. 14 packages across 4 registries. An accepted article on LinuxSecurity. Three open pull requests in aya-rs/book — the eBPF community's own docs. And, for stamina's sake: The Stitcher Trilogy, three crime-horror novels published on Amazon. Same discipline, different craft.

Archive → production.

Feb 2021 · age 14

First GitHub account, ghost0development. 33 repos of experiments, game prototypes and halcyon-process-monitor — the eBPF ancestor of Talus. Never deleted; preserved as history.

Jun 2022 · age 15

Primary school finished. No university. Self-directed, project-based learning — Linux, Rust, security, compilers — with public commits as the transcript.

2024–2025 · age 17–18

First paid freelance work: web apps, automations, server hardening. Three novels published end-to-end — idea to Amazon — proving the long-project muscle.

2026 · age 19

The rebuild. New account, production standards: Hartwell Labs founded as a one-person engineering lab. Talus, Externum, TrustNode, linux-aegis, fortis — everything rebuilt, tested, containerized, released.

Today · Oct 2026

Five years of output: Hartwell Labs, 40+ repositories, 14 packages, 3 upstream eBPF PRs — all of it still on the same 8 GB.

You published the thesis. He's been living the negative of it.

“A computer that respects your rights.” — your words, 18 Aug 2026. The exact sentence a five-year, upgrade-locked owner has been trying to write himself.

Your firmware is open — and part of it is in Rust. github.com/FrameworkComputer: EmbeddedController, coreboot, framework-system, full mainboard documentation. He writes chain-of-trust and LSM code — those repositories were published for exactly this person.

Linux-first, and it ships. His daily driver: Arch + Hyprland, LUKS, kernel-level tracing. First-in-class Linux support isn't marketing to him, it's the only requirement.

You're already in his timezone. Framework Computer BV, Eindhoven — EU warranty, and his browser already sees the site priced in PLN. Szczecin is ~600 km away.

Timing. The current generation is the strongest yet — Framework Laptop 13 Pro (Core Ultra 3, 20-hour battery) or Laptop 16 (modular RTX 5070). Either one ends the five-year upgrade freeze.

Not an unboxing. A deployment log.

If there's a creator, student, community or review path to a Laptop 13 Pro or Laptop 16, here's what comes back — written for engineers, no marketing gloss:

90 days of honest hardware telemetry The full Talus / TrustNode / Externum toolchain on Framework hardware: thermals under sustained cargo build, real RAM ceilings, kernel tracing, QEMU, containers — what actually breaks, what doesn't, measured, not narrated.

Published where engineers read dev.to (18 articles to date), Hartwell Labs field guide, portfolio — indexed, permanent, honest. The kind of review a repairable laptop deserves.

Patches, not just posts framework-system is Rust; the public firmware trackers are where he already works. Upstream contributions where his chain-of-trust and kernel experience actually helps.