// what shipped, dated · RSS
The OSSMILE, NAICOM and CITADEL detail pages now open with a screens section. NAICOM’s come from its demo instance and CITADEL’s from the shipping UI against an example fleet, so no real sessions, tickets or hosts are shown. OSSMILE’s are captured from the live site: the front page in two of its period skins, the archive, and the arcade.
KEEP, QUARTERMASTER, KAGE2027 and FEDRAMP-MGMT are now listed. KEEP is a self-host-only fork of borg-ui, the BorgBackup web console, with every phone-home path removed. QUARTERMASTER catalogs a filesystem by SHA-256 and handles duplicates by quarantine rather than deletion; ATHENAEUM, an LLM-compiled knowledge base, ships from the same repo. KAGE2027 is a Metasploit RPC desktop client, forked from a 2019 upstream and brought forward to Electron 42 and Vue 3. FEDRAMP-MGMT manages the POA&M, SSP and continuous-monitoring work behind a FedRAMP authorization.
None has a public deploy, so all four are listed the way NAICOM and CITADEL are: a detail page, no outbound link. They are appended to the end of the deck, so the footer index does not change. FEDRAMP-MGMT’s last update is recent enough to take a slot in the home page’s featured list, which moves TACO out of it.
OSSMILE is now the first entry in $lib/tools.ts, so it is the first card on /projects, matching its lead slot in the home page’s featured list. Nothing else about the deck order changed.
The footer project index shows the first six entries, so OSSMILE enters it and FARM drops out. FARM is still on /projects, in the [explore] menu, and in the sitemap.
NAICOM and CITADEL are now listed. NAICOM is the agent-dispatch daemon that turns a tracked ticket into a reviewed pull request — it is how most of this deck, including this entry, gets built. CITADEL is a maintained fork of Kolide Fleet, the open-source osquery fleet manager, kept current and extended with a curated pack library and a scanner for hosts that are not enrolled yet. Neither has a public deploy, so both are listed the way NCENTCOM and NOVA-DASH are: a detail page, no outbound link.
The home page’s featured list is no longer a hand-written set of four names in the page. OSSMILE, NAICOM, CITADEL and MONEY are pinned in that order in $lib/tools.ts, and the four slots after them are filled by whichever remaining projects shipped most recently. Every entry now carries an updated date for that purpose; it is hand-maintained, and docs/tools-updated-provenance.md records where each date came from.
One consequence worth naming: the footer project index shows the first six entries of the deck, so adding two of them pushed INFLATION and DARK-MONEY out of it. Both are still on /projects, in the [explore] menu, and in the sitemap.
MONEY — the Money Expedition — joins the civic-data deck. It is a three-part interactive lesson series on how money is created and destroyed: Part 1 walks eleven stops from what a dollar is through the Fed’s ledger, government spending, taxes, deficits and bonds, to inflation as the real limit; Part 2 does the same eleven-stop treatment for the money commercial banks make when they lend; Part 3 carries the notes and sources. Explanation first, numbers and exercises after — and the claims are cited to US Code, the eCFR, the Federal Reserve, FRED and Treasury.
The general election is Tuesday, November 3, 2026, and early voting is already open across much of the country. The home page now carries a countdown banner and a second ticker that cycles all fifty states plus DC, each one linking straight to that jurisdiction’s own polling-place lookup. The banner retires itself the day after the election — it is a date comparison against the visitor’s own clock, not a build-time constant, so no redeploy is needed.
Behind both sits a new /vote page: 51 rows, three links each — find your polling place, check your registration, early or mail voting. Every link points at a state or District election office, cross-checked against the NASS Can I Vote directory and vote.gov, and each one was loaded in a real browser before shipping. Where a jurisdiction has no separate page for one of the three, the row points at that office’s main elections page and the substitution is spelled out in the notes. Nonpartisan throughout: no candidates, no parties, no ballot measures.
SPENDING picked up the context data published since its July revision. The crime overlay now runs through 2025 from the FBI's Reported Crimes in the Nation, 2025 (violent 327.6 and property 1,534.8 per 100k; the violent drop is the largest the FBI has recorded since 1936), with 2024 moved to the FBI's updated estimates. Nominal GDP for 2012–2025 now comes from BEA's September 2026 annual update, so every %-of-GDP share shifts slightly.
The release also ships the July budget revision. FY2026 defense is restated on a base-discretionary basis (OMB S-2: $903B), the P.L. 119-21 reconciliation money is moved to FY2025 where OMB books it, and the earlier "first trillion-dollar defense budget" claim is retracted. FY2027 is added as the President's request, and it stays a request because the year opened under a continuing resolution through December 11. FY2026 border encounters and ICE removals have no full-year totals yet. The site header now carries the BMRL wordmark linking back to blackmesalabs.org.
The footer colophon carries one more line: a 32-character hexadecimal string, directly under the "A BMRL Project" credit. It has no label, no link, no tooltip and no accessible name, because it is not addressed to the reader — it is a machine identifier, and whoever needs it knows what it is for.
It renders in monospace at the dimmest green in the palette, and selects as a unit, so one click copies exactly the string and nothing around it. Nothing else on the site changed.
The Upcoming Actions scroller only ever asked Mobilize for rallies, and only ever read the first page of the answer — so it showed the soonest forty rallies from page one rather than the soonest in-person actions anywhere. It now queries the full set of in-person action types and follows the upstream pagination before sorting, so the forty events on screen are genuinely the forty nearest in time.
Each item carries a dim type label after its location, so a town hall reads as a town hall. Remote and administrative event types stay excluded, and the allowlist is re-applied locally after the query so types added upstream later cannot leak in. An unreachable feed still yields an empty list rather than invented events.
The OSSMILE card and readme page described a product that does not exist — an "open-source positivity dashboard" running the NCENTCOM pipeline with the threat filter inverted, in homelab preview. What is actually live at ossmile.blackmesalabs.org is a hand-made corner of the old web that only carries good news: a daily post, a reading room and zine, cartoons, mixtapes and postcards, an arcade of small games, a horoscope and trivia, and trackers for eclipses and launches.
The listing is rewritten to match, and moves from Intelligence / PREVIEW to Tools & OSS / ACTIVE on an Astro-on-Vercel stack. The "related" block on the NCENTCOM readme, which claimed OSSmile as its inverse product on the same pipeline, was removed rather than reworded — there is no relationship left to describe.
The old set on the home page picked up SHAGGY — "Mad Mad World", taking its playlist to five. The component derives both the random starting video and the rotation from the list itself, so a fifth entry needed no other wiring, and playback still runs through the no-cookie embed host.
"Invictus" — William Ernest Henley, 1875, public domain — is published as a note, all four stanzas. The note body now preserves line breaks, so stanzas read as written instead of collapsing into prose.
The /notes index, the per-note pages and the sitemap all derive from the same array, so the poem turned up everywhere it should with nothing else to change.
The home-page poster gutters picked up six original prints in the same vintage-propaganda style as the existing set — four anti-fascist, two anti-corporate. All are hand-drawn SVG, so they stay sharp at any size and cost nothing to load.
The live protest dates alongside them already self-refresh from the Mobilize.us feed, so nothing there needed touching.
Black Mesa Research Labs is described as what it is — a standalone public R&D bench — rather than "the open-source arm" of anything larger. The about page, home readme, and footer were reworded to match, and the footer now carries BMRL branding instead of a parent-program credit. Internal-only links were pulled from public pages.
The deck moved too. GLOBALMILITARY came off the public listing; the 2026-06-22 entry below announcing it stays as written, because that is what was true on that date. OSSMILE now points at its public blackmesalabs.org deploy instead of an internal host.
SALTPETER joins the intelligence trackers — a Russian industrial-site monitoring map that lays a NASA FIRMS thermal-anomaly layer over a facility catalogue and correlates an OSINT incidents feed to specific sites. Every incident and detection carries a source link.
NEXRAD-STATUS joins the civic-data dashboards. It polls the NWS Free Text Message feed every five minutes and derives per-station status — operational, down, intermittent, or scheduled maintenance — across roughly 160 WSR-88D and 45 TDWR radar sites, with per-station message history.
NOVA-DASH was filed under Intelligence, which was never right for a homelab dashboard. It now sits under Tools & OSS so it surfaces in the correct [explore] group, and its detail page shows real screenshots of the dashboard and tools views.
The project deck picked up three new cards. POORMOUTH and TACO join the civic-research dashboards — POORMOUTH sets corporate cost-of-living claims against SEC filings, and TACO is a cited record of documented Trump-administration policy reversals. GLOBALMILITARY joins the intelligence trackers as a clean-room OSINT tracker of verified conflict equipment losses.
The project deck picked up three new cards. INFLATION joins the civic-research dashboards with the 2019–2025 cost-of-living story; BackyardDSN is a static DIY deep-space reference and utility console; nova-dash is the self-hosted homelab dashboard, in internal preview.
The landing page is no longer a wall of project cards. The deck moved to /projects, and the home page now leads with a live "What is NASA doing?" ticker that pulls active Deep Space Network links and recent DONKI space-weather notifications.
Added per-project readme pages with methodology + source notes for SPENDING, LIECHART, FARM, and friends. NCENTCOM and OSSmile picked up cards for the first time.
blackmesalabs.org is live. First three civic-research dashboards (SPENDING, LIECHART, FARM) are shipped and linked from the project deck. RogueWave and Artemis-Tracker land as RESEARCH / PREVIEW.