freundcloud
▲ DevOps · Platform Engineering · 30 years in

I build the platforms
other engineers build on.

I'm Olaf — a DevOps and platform engineering leader. Right now I'm product owner and lead architect on SARC: self-hosted, tamper-evident compliance for regulated delivery — one install, every framework, and nobody else holding your audit trail. Before that I moved a tier-1 investment bank onto GitHub Enterprise and stood up a Backstage developer platform for the UK's energy system operator.

See what I'm building Client work Read the CV Knowledge base

Selected work

A few things I've designed, written, and shipped.

Multi-cloud · Compliance

SARC

A compliance pipeline that ships the same code to AWS, Azure, GCP and a laptop k3d cluster from one switch — wiring ServiceNow, the Fides evidence ledger and three CI platforms into one auditable flow. See the full showcase →

 Everything, with screenshots

Project showcase

Seventeen systems in one place — SARC, Fides, Hecate, the Factory suite, the Agentic SDLC reference build, Bifrost, Janus, Myrmex Hive, ravn-agents, DORA Dashboard, SkillAi, Odin, Muninn, Huginn, lxconnect and nixarchy. Browse the showcase →

 Open source · AI agents

The Factory suite

A governed pipeline for AI software delivery — PFactory plans it, AIFactory builds it, TFactory tests it, CFactory watches it. PARR, with a human gate at every seam and model-agnostic via MCP.

 Open source · GitOps

Hecate

The promotion layer FluxCD never had. Four resources — Beacon, Bundle, Gate, Passage — move an immutable set of artifact versions across environments, with approvals, compliance evidence and OpenTelemetry tracing built in. Go.

 Open source · Governance

Agentic SDLC

The operating model for agent-written software as a repository that runs — seven stages, no model in the gate, and twelve deliberate violations proving each gate refuses rather than merely passes.

 Open source · Migration

Bifrost

Azure DevOps → GitHub Actions migration at portfolio scale. Wraps GitHub's importer with a review-first workflow, explainable risk scoring and signed attestations — air-gap capable on local models. Rust + React.

 Open source · Rust

ravn-agents

Self-healing for Linux fleets that never decides on its own — deterministic detection, Ed25519-signed remediation, AI that only explains. Runs on hosts, Kubernetes and air-gapped networks.

 Open source · Claude Code

skill-pool

The team layer for Claude Code's .claude/ — a self-hosted registry (Rust + Svelte) with retrospective capture that turns the work the team actually did into reviewable skills.

 Open source · AI

SkillAi

A self-hosted recruiting platform built on Claude and Gemini. Parses CVs, scores candidates four ways, and keeps every byte on infrastructure the team owns. In production hiring for HSBC's Kraków hub.

 CI/CD · Migration

GitHub Enterprise migration

Led six business units at a US investment bank off Bitbucket + Bamboo onto GitHub Actions — reusable workflow templates, self-hosted runners on AKS, and governance as Terraform instead of clicks. Delivered.

 Open source · NixOS

nixos_config

My whole machine estate declared in Nix — multi-host flakes with a feature-flag system, Agenix secrets, Home Manager and a custom CLI. Plus nixarchy, which vendors the whole Omarchy desktop onto NixOS with its menus rewired to Nix.

 Open source · Linux desktop

Desktop & terminal tooling

An Android phone as an MCP tool surface (lxconnect), Google Workspace in a TUI (gog/gogmail), websites as native GNOME apps, and a pile of COSMIC and Hyprland Rust.

 Writing

Knowledge base

Years of notes on cloud architecture, Kubernetes, IaC, DevSecOps and NixOS — the reference I wish I'd had starting out. Hundreds of pages, searchable.

Latest writing

Working out loud — the newest from the blog.

What I'm into

Internal developer platforms and golden paths · multi-cloud Kubernetes · Terraform and Nix for things that rebuild the same way every time · DevSecOps that developers don't route around · LLM tooling and MCP servers · and a Linux desktop held together with NixOS and a bit of Rust.