Skip to content
@devlab-group

DevLab

Protocol & financial infrastructure engineering — from architecture through production
README.md

DevLab — We turn product goals into reliable systems. Protocol and infrastructure engineering.

Website  ·  Selected work  ·  How we work  ·  Start a conversation

  

We are DevLab, an engineering team building protocols, financial infrastructure, and the systems around them. Since 2018, we have worked on 20+ projects, taking responsibility for architecture, implementation, integrations, and production delivery. We work with founders and product teams on new products, help recover existing systems, and own technical workstreams alongside in-house engineers.

Focus Engineering scope
Protocols & DeFi Smart contracts, liquidity mechanics, oracles, governance, and settlement.
RWA & tokenization Asset issuance, permissioned transfers, supply controls, and redemption on EVM and Solana.
Payments & stablecoins Payment flows, treasury operations, settlement infrastructure, and agent commerce.
Smart accounts & wallets Session keys, delegated execution, recovery, permissions, and wallet integrations.
Backend & infrastructure APIs, indexers, integrations, deployment, monitoring, and production operations.
Security & tooling Contract and infrastructure reviews, remediation, MCP scanning, and verifiable audit trails.

  

Open source & public engineering

Tools and platforms we build in-house. Each repository documents its setup, scope, and usage terms.

Protocols & financial infrastructure

Project What it does
Agent Commerce Gateway Connects existing APIs to AI agents through HTTP and MCP, with x402 payments and a shared execution pipeline. Self-hosted and non-custodial.
RWA Platform · EVM Permissioned ERC-20 tokenization with auditor-attested supply changes, controlled transfers, and on-chain cash redemption.

Security & operations

Project What it does
MCP Scanner Scans MCP servers, source trees, and packages, reporting security findings and analysis coverage gaps.
Postflight A single-file Bash audit for Linux server security and health, with suggested fixes and text, JSON, or Prometheus output.
Immutable Audit An eBPF proof of concept for tamper-evident process execution logs: hash-chained events, a remote collector, and independent verification.

Beyond the repositories

  • ERC-8409 — a draft proposal for provider-signed EVM service payment quotes, separating commercial terms from payment authorization and settlement.
  • RepoLore — our plugin for tracing public code history through commits, pull requests, issues, and regressions.

Pinned Loading

  1. agent-commerce agent-commerce Public

    Self-hosted, non-custodial gateway between the API you already run and the protocols AI agents use to discover, call and pay for it

    TypeScript 42 1

  2. rwa-platform-evm rwa-platform-evm Public

    A self-hosted, single-tenant platform for tokenizing a real-world asset class as a permissioned ERC-20, with an auditor-attested supply lifecycle and on-chain cash redemption.

    Go 38

  3. immutable-audit immutable-audit Public

    Tamper-evident audit trail for Linux process execution. eBPF captures execve, events are SHA-256 hash-chained, shipped to a separate collector, and independently verifiable by anyone holding the fi…

    C 5

  4. postflight postflight Public

    One-file Bash audit for Linux servers: security and health checks, each with the exact command that fixes it. Text, JSON or Prometheus output

    Shell 2

  5. mcp-scanner mcp-scanner Public

    Security scanner for MCP servers, source trees, and packages, with explicit findings and coverage reporting.

    Go 17

  6. rwa-platform-solana rwa-platform-solana Public

    A self-hosted, single-tenant platform for tokenizing a real-world asset class as a permissioned SPL Token-2022 token on Solana, with an auditor-attested supply lifecycle and on-chain cash redemption.

    Go 1

Repositories

Showing 10 of 15 repositories
  • rwa-platform-evm Public

    A self-hosted, single-tenant platform for tokenizing a real-world asset class as a permissioned ERC-20, with an auditor-attested supply lifecycle and on-chain cash redemption.

    devlab-group/rwa-platform-evm's past year of commit activity
    Go 38 0 0 0 Updated Oct 12, 2026
  • agent-commerce Public

    Self-hosted, non-custodial gateway between the API you already run and the protocols AI agents use to discover, call and pay for it

    devlab-group/agent-commerce's past year of commit activity
    TypeScript 42 Apache-2.0 1 4 0 Updated Oct 11, 2026
  • .github Public

    DevLab organization profile

    devlab-group/.github's past year of commit activity
    0 0 0 0 Updated Oct 9, 2026
  • mcp-scanner Public

    Security scanner for MCP servers, source trees, and packages, with explicit findings and coverage reporting.

    devlab-group/mcp-scanner's past year of commit activity
    Go 17 Apache-2.0 0 0 0 Updated Sep 26, 2026
  • rwa-platform-solana Public

    A self-hosted, single-tenant platform for tokenizing a real-world asset class as a permissioned SPL Token-2022 token on Solana, with an auditor-attested supply lifecycle and on-chain cash redemption.

    devlab-group/rwa-platform-solana's past year of commit activity
    Go 1 0 0 0 Updated Sep 8, 2026
  • postflight Public

    One-file Bash audit for Linux servers: security and health checks, each with the exact command that fixes it. Text, JSON or Prometheus output

    devlab-group/postflight's past year of commit activity
    Shell 2 MIT 0 0 0 Updated Sep 5, 2026
  • immutable-audit Public

    Tamper-evident audit trail for Linux process execution. eBPF captures execve, events are SHA-256 hash-chained, shipped to a separate collector, and independently verifiable by anyone holding the file. Educational proof of concept — detection, not prevention.

    devlab-group/immutable-audit's past year of commit activity
    C 5 0 0 0 Updated Aug 19, 2026
  • panelist Public

    An extensible, configurable multi-perspective research framework, inspired by the STORM paper

    devlab-group/panelist's past year of commit activity
    Python 1 MIT 0 0 0 Updated Aug 13, 2026
  • warrant Public

    A verification gate combining Chain-of-Verification, Self-RAG, and Constitutional AI. Cited verdicts, policy checks, CI exit codes.

    devlab-group/warrant's past year of commit activity
    Python 1 0 0 0 Updated Aug 4, 2026
  • pine-ql Public

    Data population library

    devlab-group/pine-ql's past year of commit activity
    JavaScript 1 0 0 0 Updated Oct 17, 2018
View all repositories

Top languages

Loading…

Most used topics

Loading…