Open tools for closed systems.

Upgrade a 2007 server to today, one release at a time, along a path someone already proved works. wend is a map of small, reviewed fixes for the places where a plain release upgrade breaks, pinned into release-to-release routes. The machine's native package manager stays in charge.

Every route carries evidence: replays from scratch on test machines in which every health check stayed green. Routes with passing replays now cover Debian 4.0 etch to Debian 13, Ubuntu 14.04 to 26.04, and CentOS 5, 7, and 8 to AlmaLinux 10.

A static Rust client is in progress. It will fingerprint a machine, pick a route, snapshot before each hop, and roll back if a check fails, with no model and no network beyond the distribution's mirrors.

Early: CI proves each route's userland in a chroot. Kernels, bootloaders, and real reboots are tested in maintainer-run VMs, not yet in CI, and the fix format may still change. Read the README and spec.

Self-hosted training-record software for emergency communications centers: versioned programs, Daily Observation Reports, weekly summaries, task signoffs, and trainee histories, with agency-owned data and portable records.

Implemented workflows include assignment-scoped access, immutable finalized records, acknowledgments, amendments, retention policies and holds, verifiable record exports, trainee packets, and a complete installation export that carries everything except credentials.

Rust and Axum, SQLite, and an embedded SvelteKit interface: one executable and one data directory per installation, installed and upgraded with one command. Every upgrade that migrates the database takes a validated backup first. A small center should be able to operate its own system without a collection of external services.

Pre-alpha: usable for development and evaluation only. Use invented data, never production or personnel records. Confirmed disposition, deterministic PDFs, and restore drills on real hosts remain on the roadmap.