Skip to content
dejan.menges

Work

Things I have built, and still maintain.

Most of these started as a problem I had rather than a product idea. A few of them turned into one anyway.

Enola

Author and maintainer

January 2026 - present

An architectural regression testing tool. It maps a codebase into a queryable graph so developers, coding agents and CI can understand its structure, analyse the impact of a change and catch regressions before they are committed.

Enola closes the loop around AI-assisted changes. Before an edit, it gives the agent a deterministic architecture graph of the codebase. Afterward, it compares the result with a pinned baseline and returns a verdict the agent can act on or CI can enforce. It uses source parsers and graph algorithms rather than model inference, so the same source, Enola version and configuration produce the same result. It combines 23 languages and formats in one graph.

  • Go
  • Static analysis
  • Developer tooling
  • Apache-2.0

augur

Author

August 2026 - present

A command-line tool that shows what is hidden in a file: invisible characters carrying instructions to a model, direction controls that make source read differently than it runs, words with a Cyrillic letter in the middle, image metadata and provenance manifests, and bytes stapled past the end of a container.

The command that makes the rest of it matter is "augur agents", which finds the files coding agents load as instructions - CLAUDE.md and AGENTS.md, Cursor and Copilot rules, skills and the scripts they run, and the hook commands, MCP servers and permission allowlists in settings.json - and scans all of them. A smuggled instruction in one of those is a prompt injection that reloads itself every session and has no human reader to notice it. Cleaning is lossless and checks itself: every removal is a byte-exact edit, the file is re-read from disk and scanned again before anything is reported as clean, and three clean/scan invariants are property-tested in CI. It also states what it cannot see, rather than letting a clean report imply more than it means.

  • Go
  • Security
  • AI agents
  • Apache-2.0

FairwayHub

Co-founder

January 2026 - 2026

A social network and club management platform for golf communities, plus My Golf Journal - a mobile app for tracking rounds and turning that data into coaching. The project is being wound down.

FairwayHub connected local players, organised games, and gave club communities somewhere to live that was not a group chat. The companion app, My Golf Journal, recorded rounds and analysed them. It is being deprecated rather than kept on life support: the platform worked, the audience it needed did not arrive, and running it further would have been sunk cost rather than a bet. It is the project that kept me honest about the difference between designing a system and shipping a product to people who do not care what is underneath it.

  • Product
  • Mobile
  • Community
  • Wound down

git-stats

Author

Open source

A small tool for pulling contribution statistics out of a Git repository - the kind of question that is obvious to ask and annoying to answer with plain git log.

  • Open source
  • Git
  • CLI

connections-automation

Co-author

At HCL Software

Ansible-based automation for deploying and operating HCL Connections. Written internally and open sourced during my time at HCL, where it became the supported route to a reproducible deployment.

  • Ansible
  • Automation
  • Open source

Building something like this?

If you are in the middle of a platform migration, or trying to work out how to keep an architecture coherent while agents write half the code, I am happy to talk it through.