Hello — I’m Odin Loch
I build operating systems, Artificial Intelligence (AI) architectures, maths libraries, and tools that work out what a program does when nobody has the source code any more. Mostly at night, from Sydney. Imortek is the name I publish that work under.
I have two diplomas — software, and hospital science — and I currently work as a toolmaker. None of that is the qualification people expect for this kind of software, which is exactly why everything I publish is written to be checked rather than believed.
Why I work like this
I like all engineering and all the sciences, and I have never been good at staying inside one of them. That is why the shelf has a hardened Berkeley Software Distribution (BSD) next to an Authenticated Encryption with Associated Data (AEAD) scheme next to carbide tooling next to a paper about how you would measure national wealth in megajoules. It is not a strategy. It is what I am actually interested in.
Working alone means nobody checks my work, so I built the checking into the work.
ParanoidBSD will not mark a file as ported until differential or Intermediate
Representation (IR) verification passes, because I know perfectly well that a file
which merely compiles has told me nothing.
MathScript returns Result<T> everywhere instead of throwing, because I
wanted the failure cases visible in the type rather than discovered at three in the
morning. AEGIS has one rule — nothing is done until an attack simulation confirms it —
because my intuition about traffic analysis was wrong repeatedly, and the simulation was
not.
The same reasoning explains the parts of this site that look like they are arguing against me. Cell AI’s perplexity is four orders of magnitude worse than Generative Pre-trained Transformer 2 (GPT-2) and that is on its front page. The decompiler recovers algorithms at F1 0.056 on stripped binaries, next to the 1.000 it gets with symbols. The Advanced Encryption Standard (AES) work failed, and it is published as a failure with the statistics that show why. If I hid those, you would have no way of telling which of my other numbers to trust.
ParanoidBSD describes itself as “a secure operating system made by a Schizophrenic”. That is my line about myself and I am keeping it. It does not mean the engineering is unreliable — the gates on this work are stricter than a lot of commercial software ever sees, and they are written down where you can read them. It means I would rather tell you who is building this than have you find out later.
If you are deciding whether to depend on any of it: read the tests, the provenance records and the published limitations. They are the parts built to be checked, and they will tell you far more than I can.
An engineering practice, not a startup
There is no team, no funding, no investor money to spend down and no growth plan. There is one person with a trade, two diplomas, and an unusual amount of time spent on operating systems, cryptography, numerical methods and machine learning.
That is a weakness in most respects and a strength in one: nothing here has been shaped by the need to look impressive to an investor. The perplexity number that is four orders of magnitude off gets published. The decompiler F1 of 0.056 gets printed next to the 1.000. The cryptographic scheme says “prototype, not for production” on its own front page, because it is.
The software is real and the tests are real. Where something has not been verified, the page says so, in the same size type as everything else.
- Compile-only is unverified. A file that builds has not been shown to work.
- Models never self-certify. They propose; deterministic tooling disposes.
- Limitations go on the front page. Not in a footnote, not in an appendix.
- Measurement beats intuition. Especially when intuition is confident.
- A negative result is a result. The AES work failed, was documented properly, and is published as a failure.
Imortek, and the Schizophrenic line
The ParanoidBSD repository describes itself as “a secure Operating System made by a Schizophrenic”. That is the author’s own line about himself, and it stays because it is his to make and because it is more honest than the alternative.
It is worth saying plainly what it does and does not mean here. It does not mean the engineering is unreliable — the verification gates on this work are stricter than most commercial software ever sees, and they exist in writing where anyone can check them. What it does mean is that this is a person building in public, under his own name, with his own conditions stated rather than hidden.
If you are evaluating whether to depend on this software, evaluate the tests, the provenance records and the published limitations. They are the parts designed to be checked, and they will tell you far more than any biography.
Seven products, forty-six research areas
ParanoidBSD
HardenedBSD 15-STABLE to C++23, with a capability and handle nucleus.
Cypha
A first-principles AI architecture. Classify, regress, sample, generate.
RetDec Imortek
A decompiler that recovers algorithms, not just pseudocode.
MathScript
C++23 computer algebra and numerics, with its own Basic Linear Algebra Subprograms (BLAS) and Linear Algebra PACKage (LAPACK) in-tree.
AEGIS
Metadata-hiding transport for permissioned consortiums.
SENTINEL
Crime analytics with full provenance on every lead.
Cell AI
A non-transformer sequence model, published as an honest research log.
The research shelf
Forty-six areas from AEAD design to carbide tooling, each with its evidence level stated.
PBSD Kickstarter
Live until 12 November 2026. Funding the compute that finishes the port.
How to reach Imortek
Commercial licensing
Tell us what you want to use and roughly how big your organisation is. You will get a number, not a discovery call.
Email about licensingBugs and contributions
Issues and pull requests on the relevant repository. The profile bio asks for commits, and it means it.
GitHubPress and the Kickstarter
The campaign is live until 12 November 2026. Ask anything about the port, the budget model or the verification gates.
Security disclosure
Report privately by email first. ARIA in particular is an unaudited prototype and is published to be attacked.
Email a disclosureEmail addresses on this site are assembled by script to make scraping marginally less convenient. If nothing happens when you click, the address is .