Systems & AI Researcher · Founder of Heurion Research
为临床医学与自治智能体构建可验证的系统底座 · The human link between users and builders
Official Website • Technical Blog • Clinical Workstation • Projects • Systems Monographs • Publications • @heurion-org
I am an independent Systems & AI Researcher and Product Architect based in Rotterdam, Netherlands, and the founder of Heurion Research (heurion-org). My work focuses on contract-guarded clinical research intelligence, transactional operating system runtimes for autonomous agents, and local-first sovereign memory protocols.
- Thesis: Models generate probabilities; science demands certainty. Bound to transactional state, intelligence becomes infrastructure.（模型长于推理，科学始于确定。锚定契约内核，智能方成底座。）
- Focus Areas: Agent Operating Systems (
Rust,CoW VFS,Seatbelt/Bubblewrap,MCP/A2A) · Clinical Research AI & Collaborative CRDT Engines (TypeScript,ProseMirror/Yjs,Biostatistics,PHI Privacy) · Sovereign Memory Protocols (UOMP). - Environment: Linux & macOS only (
aarch64/ Apple Silicon).
| Repository | Scope & Highlights | Stack |
|---|---|---|
heurion-org/heurionHeurion 2.0 & OmniCanvas · heurion.org · heurion.org/blog |
Contract-Guarded Clinical Research AI Workstation & Studio — Dual-surface ProseMirror + Yjs CRDT (96.4% .docx/.pptx fidelity, 0.128ms per-turn rollback), 4-way PubMed/PMC/OpenAlex citation verification, 2-stage local PHI gatekeeper (98.6%–99.6% recall), sandboxed biostatistics, and 3-layer self-evolving memory (-49% guard rejections). |
TypeScript Node.js 24 Yjs Python Rust/WASM MCP |
heurion-org/aegis-osAegis OS ( aegis-os) |
Transactional Multi-Tenant Agent Operating System Runtime — Eliminates coding-agent authorization fatigue (-90.7% to -97.9% prompts across 28,087 real calls; 1.12% IPR) via 0.42ms per-file / 6.3ms repo-wide Copy-on-Write shadow workspaces (APFS clonefile / Btrfs FICLONE), 4-tier LCS Diff3 auto-merge (98.7%), Seatbelt/Bubblewrap sandboxing (0.0% ASR across 80 attacks), and L7 $AOS_SECRET_* egress DLP. |
Rust APFS/Btrfs CoW Seatbelt Bubblewrap MCP A2A |
0xSynapse/uomp-coreUser-Owned Memory Protocol · uomp.org |
Local-First Sovereign Memory Protocol (UOMP) — Keeps personal memory in local SQLite (~/.uomp) and grants AI agents temporary, session-bound, tag/key-scoped access via short-lived EdDSA-signed JWT Capability Tokens and a local Memory Guard. |
TypeScript SQLite EdDSA JWT CLI / SDK |
Systems & Security Utilitiesironmac · archdoctor · openharmony-mac-build |
Linux & macOS Systems Engineering — ironmac (audit-ready macOS Web3/keychain security suite & MCP server), archdoctor (Rust CLI for Arch Linux pacman/systemd health triage & history diffs), and openharmony-mac-build (native arm64_virt OpenHarmony build toolchain on Apple Silicon). |
Rust macOS Security Arch Linux ARM64 QEMU |
Technical Blog & Systems Monographs (heurion.org/blog · English)
Long-form bilingual systems monographs dissecting the architecture, formal invariants, and production benchmarks behind Heurion 2.0, OmniCanvas, and Aegis OS:
| # | Monograph & Thesis | Core Architecture & Empirical Benchmarks | Read |
|---|---|---|---|
| 01 | Why Free-Form Shell Agents Fail at Research Manuscripts: Dual-Surface CRDT & Byte-Preserving OOXML Patch Architecture 为什么自由 Shell 智能体在科研论文写作中会失效：双表面 CRDT 与字节级 OOXML 补丁架构 |
• Dual-Surface ProseMirror + Yjs CRDT: Unifies rich-text canvas and Annotated Markdown ({#id} block primitives)• 2-Level Byte-Preserving OOXML Engine: 100% binary slice identity on untouched blocks + Run-level LCS patchParagraph (96.4% vs. 21.4% formatting retention)• Selective Attribution Rollback: 0.128ms non-contiguous per-turn undo (revertByNodes) |
English 中文专论 |
| 02 | Why Software Must Be Rebuilt with AI-Native Interfaces: Human-Agent Capability Parity as New Infrastructure 为什么软件必须为 AI Agent 重建原生接口：人机同权（Capability Parity）与新基础设施 |
• Capability & Permission Parity Axiom: Agent Capability = User Capability & Agent Permission = User Permission• Zero-Fork Loopback & 3-Tier Governance: In-process 256-bit RAM secret, Green/Yellow/Red zones, and 403 anti-self-approval Confirmation Cards• End-to-End Auditable Escalations & CI Reflection: Full audit trails for permission requests + 64+ route-to-tool CI invariants |
English 中文专论 |
| 03 | Beyond Git Feature Branches: Shadow Workspaces, Advisory File Claims, and Transactional Auto-Merge for Human-Agent Collaboration 超越 Git 分支：面向人机与多智能体协作的影子工作区、文件锁与事务归并范式 |
• Trunk-Anchored CoW Shadow Workspaces: 0.42ms per-file APFS clonefile / Btrfs FICLONE without .git branch proliferation• Proactive Coordination: Advisory TTL file claims ( coord_claim) + zero-polling piggybacked _aegis_inbox IPC• 4-Tier LCS Diff3 & Hash-Chained Audit Ledger: 98.7% conflict-free auto-merge with verify_cmd gate + -90.7% to -97.9% prompt reduction |
English 中文专论 |
-
Heurion 2.0: A Contract-Guarded Dual-Surface Architecture with Self-Evolving Memory for Citation-Grounded Clinical Research Authoring
Hui Zhao (Heurion Research, Rotterdam, Netherlands) ·cs.AI/cs.CL/cs.HC/cs.MA(2026)
Paper PDF (heurion/paper/main.pdf) · LaTeX Source (main.tex) · Evaluation Suite (paper/benchmarks) · Code (heurion-org/heurion) -
Aegis OS: A Transactional Multi-Tenant Operating System Runtime for Eliminating Authorization Fatigue in Autonomous Coding Agents
Hui Zhao (Heurion Research, Rotterdam, Netherlands) ·cs.OS/cs.CR/cs.AI/cs.SE· arXiv Preprint & ACM TOSEM Submission (2026)
Paper PDF (aegis_os_arxiv_preprint.pdf) · LaTeX Source (main.tex) · Benchmark Report (BENCHMARK_REPORT.md) · Code (heurion-org/aegis-os) -
UOMP-Draft-00: User-Owned Memory Protocol (UOMP) — Local-First Capability-Based Memory Authorization for AI Agents
Hui Zhao (@0xSynapse) · Public RFC Draft (2026)
RFC Specification (specs/draft-00.md) · English Spec (draft-00.en.md) · Website (uomp.org) · Code (0xSynapse/uomp-core)
Hui Zhao (@0xSynapse) · Heurion Research
heurion.org · heurion.org/blog · uomp.org · github.com/heurion-org · Email: huizhao@heurion.org