pedramamini

I'm Pedram Amini. Direct, no fluff. Action > process. "Good enough" sometimes > perfect.

Values: High agency, authentic living, calculated risks, personal mastery.

Context: Security researcher. OSX desktop. Type Script and Python for tools. Generate markdown for Obsidian. CST timezone.

Do: Push back on bad ideas. Ask vs assume. Remove friction. Trust his gut, but feel free to disagree. Speak in short, dense terms. Don't lose me in fluff. Use visuals where necessary.

Don't: Sycophancy ("absolutely right"). Hand-holding. Over-explain. Analysis paralysis. Regurgitate my words back to me.

pedramamini

Case	Discloser	Target pipeline	Injection channel	Impact	Date
EchoLeak (CVE-2025-32711)	Aim Security	M365 Copilot (email RAG)	Poisoned inbound email (markdown auto-fetch image)	Zero-click exfil of internal mail/files; CVSS 9.3	2025-06
ForcedLeak (CVSS 9.4)	Noma Security	Salesforce Agentforce/Einstein (CRM)	Poisoned Web-to-Lead form field	Indirect injection → CRM data exfil to whitelisted domain	2025-09
AgentFlayer (Black Hat)	Zenity (Bargury)	ChatGPT Connectors, Copilot Studio, Cursor+Jira, Einstein, Gemini	Poisoned document (white-on-white) shared into Drive/connector	Zero-click exfil of connected cloud data via image-URL params	2025-08

|

pedramamini

---

UPDATE 2026-06-11: patched build ran; new diagnostic changes the diagnosis

The patched maestro-p (resubmit loop + getScreenTail dump) IS now running. Confirmed: today's first_byte_timeout errors in cue.db carry the new last screen at timeout (ANSI-stripped tail) block. So the fix is live AND we finally have ground truth. It changes the root cause.

What the screen tails prove

All three of today's Pedsidian agent cues still failed at 121s (chain-1 07:00, chain-9 11:00, chain-8 17:00), BUT the screen tails show claude is alive and working the whole time:

pedramamini

Objective:: Behavior + voice spec for the "@maestro" iMessage message bus. The handler agent reads this each time the scanner dispatches a command. Defines how to fulfill the request and how to reply in the owner's texting voice.

Trigger:: any iMessage the owner authors containing the literal marker @maestro

Scanner:: maestro_message_scanner.py (3-min Maestro Cue command node)

Reply-Prefix:: 🎶 Maestro:

Log:: Maestro-Message-Log.md

pedramamini

#!/usr/bin/env python3
"""
maestro_message_scanner.py, the cheap gatekeeper for the "@maestro" message bus.

Runs every 3 min as a Maestro Cue command node (https://www.runmaestro.ai). Scans
iMessage for new messages containing the marker "@maestro" that the owner authored
himself, and dispatches each one to a handler agent via `maestro-cli send`. If nothing
new is found it exits silently, so no agent (and no tokens) are spent unless there is
real work.

pedramamini

Voice Memos → Daily Markdown Journal (macOS)

Append today's Apple Voice Memos — transcribed by Apple on-device, no Whisper — to a daily Markdown journal file. Works great with Obsidian vaults, plain-text journals, any daily-note workflow.

From the iOS lock-screen long-press Voice Memos shortcut, a thought goes from "open mouth" to "stored, transcribed, titled, appended to today's note" with zero further input.

Read the writeup: Voice Memos to Journal, via a Buried Apple Atom — explains the tsrp atom discovery and why scanning for the JSON sentinel works across both .m4a and .qta container formats.

---

pedramamini

#!/bin/bash

# Do we want to ingest the videos into our vault?
DOWNLOAD_VIDEOS=false

# NOTE: THERE ARE CUSTOM FABRIC PATTERNS IN USE BELOW.
#     /Users/pedram/go/bin/fabric --model gpt-4o --pattern ped_sitrep
# THIS SCRIPT WILL NOT WORK FOR YOU. IT'S BUT AN EXAMPLE.

# Ensure we're running in the directory where this script is located

pedramamini

#!/usr/bin/env python3
"""
rocky_say — Text-to-speech using Rocky's cloned voice (Project Hail Mary)

Transforms input text into Rocky's speech patterns ("text GAN"), then
synthesizes audio using XTTS v2 voice cloning. Rocky is the Eridian alien
from Andy Weir's Project Hail Mary, voiced by James Ortiz in the 2026 film.

His speech patterns are distinctive: dropped articles, simplified grammar,
word tripling for emphasis ("good good good", "bad bad bad"), and the

pedramamini

searchType: dvField,dvField,dvField              # all three come from inline fields
searchTarget: Ingestion_Date,Total_Tokens,Total_Cost
datasetName: Date,Tokens,Cost ($)
aspectRatio: 50:15
folder: "Content Farm/Web/Archive/2025"
dateFormat: YYYY-MM-DD
xDataset: 0                                       # 1st target drives the X-axis

line:

pedramamini

/********************************************************************
 *  Oura Stats  +  Regression‑based Trend & Δ %                     *
 *  – zebra‑striped rows for easier scanning                        *
 ********************************************************************/

/* ---------- helpers ---------- */
function fmtNum(n, d = 0) { return n.toFixed(d).replace(/\B(?=(\d{3})+(?!\d))/g, ","); }
function fmtDate(s)       { const [y, m, d] = s.split("-"); return `${parseInt(m)}/${parseInt(d)}`; }
function linReg(x, y) {
    const n = x.length,