The platform that makes AI a multiplier, not a liability.

Problem

Kosovo small businesses run their back office across spreadsheets, manual tax filings, and a stack of tools that do not talk to each other. There was no single system that handled accounting, payroll, VAT, and Kosovo-specific tax filing in one place.

What we did

We built taktiko: a multi-tenant SaaS where every customer gets their own subdomain, server-authoritative permissions, and a Kosovo tax engine that emits real ATK and KKRF filing exports. One platform runs the whole back office.

Problem

The useful chores around a team, nudging a stalled review, noticing a PR with no reviewer, summarizing where a thread actually stands, are easy to forget, and platform notifications are too noisy to be the signal. Most "AI assistant" bots solve this by acting autonomously, which is exactly what makes people turn them off.

What we did

We built aipm, a suggest-only bot that watches GitHub issues and PRs and Slack threads, works out when someone owes an action or a thread has gone stale, and drafts a targeted nudge to the right person. It never acts on its own: it drafts, a human approves with one reaction.

Problem

A password manager protects secrets at rest, but the tools you use every day write plaintext credentials to disk and read them back: aws, gcloud, docker login, kubectl, gh, the Claude Code CLI. Any process running as you can read those files. File permissions do not help when the malicious code runs as you.

What we did

We built file-guard, a Rust daemon that adds interactive, per-process consent to credential files. It moves each watched file into a root-owned store and serves the original path through a FUSE layer, so every open() is authorized against a policy and the consuming tool keeps working unchanged.

Problem

Recurring platform chores rot when nobody owns them. DNS, email, and TLS posture drifts silently until something breaks. Self-hosted CI runners get set up once, never hardened, and quietly become a liability. The work is not hard, it is just never anyone’s job today.

What we did

We publish fork-and-run templates that turn each chore into self-running automation. dns-auditer runs a daily security audit and manages its own GitHub Issues. ansible-github-runner provisions a hardened, multi-instance runner fleet on any Linux box. Fork, configure, done.