Liz Fong-Jones lizthegrey

name	clarity-review
description	Lint the current diff for the AI-authored-code patterns that repeatedly draw pushback in this repo's PR reviews — comment slop, unverified technical claims, dead code, tautological tests, missing feature flags, single-letter names, unneeded complexity, concurrency footguns, and inconsistent formatting. Run before opening a PR, not after — this is a pre-flight lint, not a bug-catching pass (use hny-review-general/hny-review-thorough for that).
disable-model-invocation	true

Clarity review

Calibrated against roughly 200 real review comments on hound PRs over the prior three months — courtesy of our resident AI slop proliferation curmudgeon — plus recurring #eng-ai/#misc-ai discussion of where AI-authored code and prose fall short.

SolidRun LX2160A (HoneyComb LX2K) UEFI Firmware Modernization

Summary

This project modernized the entire firmware stack for the SolidRun HoneyComb LX2K (LX2160A CEx7) from a stale 2021-era codebase to current upstream releases, bringing the existing OP-TEE/StandaloneMm Secure Boot support forward from OP-TEE 3.14.0 to 4.9.0.

Result: A fully modern, Secure Boot-enabled firmware booting Ubuntu 24.04 via shim → GRUB → signed kernel.

Component	Before	After

Automated Bluesky Tech Digest with Claude Code

An automated system that generates a daily tech digest from your Bluesky timeline using Claude Code, running every weekday morning at 5am to start your Claude API quota window.

Overview

This system fetches your Bluesky timeline, uses Claude to identify and categorize tech-related posts, and generates a beautiful HTML digest that automatically opens in your browser.

Architecture

Aurora-Prism Security & Maintainability Audit Plan

Executive Summary

This is a comprehensive security audit of the Aurora-Prism ATProto AppView codebase with focus on:

Untrusted input from ATproto firehose - malicious events/payloads
Authentication/authorization - login impersonation, privilege escalation
Backdoors - hidden functionality, data exfiltration, hardcoded access

Overall Assessment: The codebase shows strong foundational security with well-implemented authentication, SSRF protection, and parameterized queries. However, there are critical validation gaps that allow malformed data to be persisted, and the Python hook system requires scrutiny as it executes on every user interaction.

name	bluesky-mcp
description	Parse and analyse Bluesky timeline posts and notifications using the Bluesky MCP server. Use when users want to summarise their Bluesky timeline, find technology-relevant posts, extract specific topics from timeline data, or analyse reply/quote notifications. Handles large timeline dumps efficiently and filters for work-relevant content.

Bluesky MCP Analysis

Efficient workflows for analysing Bluesky timeline data and notifications.

Getting Timeline Data

Hockeypuck v5/v6 Key Support Investigation

Date: 2026-01-02 Investigators: Liz Fong-Jones & Claude Status: BLOCKED - Upstream go-crypto dependency issues

Executive Summary

Initial investigation found that Hockeypuck has most v5/v6 infrastructure in place. However, deep testing revealed the blocker is NOT in Hockeypuck, but in the go-crypto library dependency:

Ed448 compression flag 0xA5 rejected - go-crypto only accepts 0x40, but GnuPG 2.5 v5 keys use 0xA5

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512

OpenPGP Key Transition Statement

I am transitioning from my old OpenPGP key to a new one, in preparation for post-quantum cryptoanalysis.

The old key will continue to be valid for four more years, but I prefer all future correspondence to use the new key once support for the Kyber scheme is available to you. I will be making signatures with the new key going forward, as it is widely supported even if the encryption scheme is not yet.

	<!DOCTYPE html>
	<html lang="en">
	<head>
	<meta charset="UTF-8">
	<meta name="viewport" content="width=device-width, initial-scale=1.0">
	<title>LLM Performance vs Cost - Interactive Pareto Frontier (March 2026)</title>
	<script src="https://d3js.org/d3.v7.min.js"></script>
	<style>
	body {
	font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Oxygen, Ubuntu, Cantarell, sans-serif;

	Homebrew build logs for lizf/local-mlx/mlx@0.31.1 on macOS 26.4
	Build date: 2026-04-23 14:57:23

	Homebrew build logs for lizf/local-mlx/mlx-c@0.6.0 on macOS 26.4
	Build date: 2026-04-23 15:14:12