Apr – Jul 20254 mo
CF—003
● open source
● open source
May – Jul 20262.5 mo · current
CF—001
● live
● live
- Latch is a policy proxy for API credentials: an agent calls the proxy with a scoped token, a filter pipeline evaluates each request (first deny wins), then the real credential is injected and forwarded upstream. TEE / SEV-SNP enclaves, WASM policy compilation.
- Developer documentation site (flagship). Designed and shipped the public dev site, docs, get-started guides, a Filters reference, and per-mount guides, backed by a versioned proxy API contract enforced by a CI contract test that fails the build if the docs and the real API drift. ~4,850 lines.
- Shipped a nightly release-notes bot that drafts a changelog from merged PRs and opens a review PR automatically, plus a versioned changelog surface.
- Authored a fuzz + golden + load test harness for the security-critical policy filter engine and a k6 /proxy load suite (local + nightly), plus a CI performance gate with a committed baseline to catch filter-evaluation regressions.
- Hardened the engine to fail closed on malformed user regex instead of silently passing the request through.
- Owned authentication & per-user scoping: service-to-service admin auth via a bearer key, an admin user-upsert endpoint with per-request user scoping, and converged WorkOS / GitHub sign-ins onto stable user identities.
- Gated the app shell server- and client-side and hardened the session token / cookie so authenticated routes can't be reached while logged out, with end-to-end coverage.
- Shipped the Agent Grand Prix Marketplace entry behind a launch gate so only launched apps publish, and returned a cryptographic authorization receipt from the MCP authorize tool so agents get verifiable proof of authorization.
Merged work11 PRs · 6.8K+ LOC
Docs site~4,850 LOC
Footprint84 commits · 7 reviews
Contributor rank6th of ~1,900