Hard problems.
Boring interfaces.

I lead a software engineering team at Vector Informatik and write developer tooling in Rust in the evenings. Most of it is build systems, reproducibility and distribution: complicated underneath, and deliberately dull to use. Thirteen years of that, starting in IT security and cryptography.

Michael Herwig
Fig. 01 — the author
Michael Herwig — standing dataGermanySheet 01 of 01
No.PropertyValueRemark
01Shipping software since2013GTS Systems & Consulting → Vector Informatik
02Engineers in the team I lead12Vector Informatik, since June 2025
03Time to a working dev environment< 1 hDev containers, company-wide. It used to be days
04Years a build must still reproduce30Escrow rebuilds, fully offline, no network at all
05Coding agents one declaration reaches10Grimoire writes each client its own config format
06Package managers written in Rust2grimoire.rs and ocx.sh, both Apache-2.0

Last revised .

02 · Selected workAll 14 entries →

2026 — present · Developer ToolingOpen source

Grimoire

A package manager for AI-agent configuration. Teams package the practices that work — skills, rules, agents, MCP servers — and every colleague gets them in whichever coding agent they already use, pinned by digest and reviewed before it lands.

RustTypeScriptPython
2025 — present · Developer ToolingOpen source

OCX

A package manager for pre-built binaries distributed over OCI registries — install a toolchain with one command, switch versions instantly, and run builds in a clean, reproducible environment.

RustPythonStarlark
2019 — 2022 · BlockchainOpen source

L1 Blockchain Engineering

CryptoNote forks were each rebuilding the same improvements in isolation. Galaxia consolidated them into reusable libraries and a config-driven node — 200+ nodes on the main chain, and components adopted by other chains.

CC++C#
2021 · Open Source ContributionOpen source

Microsoft's C++ Standard Library Contribution

Two of three pull requests merged into Microsoft's C++ standard library: a bug fix, and a build change that untangled a circular binary dependency on boost and dropped the package-manager requirement.

GitHubGitHub ActionsGit
2023 · Master ThesisRWTH

Privacy–Preserving Data Discovery in Distributed Health Networks with Dynamic Consent

A distributed health-data network that answers queries by aggregating results instead of data, so records never leave the institution. Scales to hundreds of sites and ten million records in thirty seconds.

RustCPython
2018 — 2019 · Geo-Information ServiceCommercial

WMS Data Extraction

A valuation firm was copying ground-zone data out of a WMS service by hand in Qgis. I mapped the process to an automated pipeline: months of work became about a day, with fewer errors and room for more sources.

QtQgisOSM
03 · Toolbox

Languages
CC++RustC#PythonStarlarkBashTypeScript
Runtime & infra
DockerESXiAzureGitLab CIGitHub ActionsCMake
Libraries
boosttokiolibp2pRocksDBQtOpenCL
Fields
IT securityCryptographyDistributed systemsDevSecOpsAI agent toolingProfiling
Ways of working
Team leadershipScrum masterProduct ownerAgile deliveryMentoring
04 · Now

Senior Manager Software Development at Vector Informatik, since June 2025.

Based inGermany · CET
SpeaksGerman, English · rusty 中文 and French
Away from the keyboardTennis, yoga, cooking, swimming
Happy to talk aboutProtocols, build systems, leading engineers
05 · Contact

Mail is best

contact@michael-herwig.de — I read everything and answer most things within a day or two.