DEKIMU BLOG

Straight talk
for freelancers and SMBs.

Guides for running your business. Notes from building Dekimu in public.

Everything — freelance and SMB playbook plus what we're building.

NotesENGINEERINGAIOct 30, 20264 min read

A rate limiter that refuses when its store times out, now in all 15 apps

@dekimuhq/ratelimit 3.0.0 treats a Redis timeout as a refusal instead of a free pass. Adopting it across fifteen apps turned up two bugs the old behaviour had been hiding.

→
NotesAGENTSAIOct 19, 20264 min read

dekimu-mcp is on npm: offline action receipts for any local agent

One command, npx @dekimuhq/dekimu-mcp, gives any MCP client three tools: mint a signed receipt for an action an agent just took, verify a receipt offline, and run a reproducible GDPR obligation check. Local-first, no telemetry, MIT. The honesty box is in the README.

→
NotesAGENTSAIOct 19, 20264 min read

agents.txt 0.1 is the robots.txt for agent actions

robots.txt governs crawling and llms.txt governs reading. agents.txt 0.1 covers acting: two files that tell an autonomous agent which actions it may attempt on a surface, under what conditions, and what proof results. The agents-txt package validates any live policy, and dekimu.com publishes its own.

→
NotesTRUSTAIOct 19, 20265 min read

Anchors: 21 receipt families, one public CC0 spec

The Anchored Receipts register holds 21 families and 29 claim types, every one of them issued by Dekimu Hub, and the specification for all of them is public domain at github.com/dekimuhq/anchors-spec. One wire format, one envelope, one public verifier at verify.dekimu.com.

→
EcosystemPRIVACYAIOct 19, 20265 min read

Proof of Forgetting makes a GDPR Article 17 erasure checkable

An erasure in Dekimu Hub now ends in three signed records: a destruction receipt, a non-inclusion proof against a signed roster of the subjects the workspace still holds, and a model-disposition receipt. The destruction receipt verifies at verify.dekimu.com and the wire spec goes public in anchors-spec today.

→
EcosystemCOMPLIANCEAIOct 19, 20264 min read

RoPA builds the GDPR Article 30 register from the Compass data map

Dekimu Hub generates a Record of Processing Activities from the processing a workspace actually records, marks every field as proven, asserted or missing, and bundles the signed register by hash into an ar.compliance.v1 receipt. The explainer is at dekimu.com/ropa.

→