The rfxn Ecosystem: Two Decades of Linux Security, Rebuilt AI-Native
Self-contained HTML deck. Arrow keys, click, or swipe to navigate. A theme toggle lives in the top-right corner of the deck.
Overview
In August 2025, ConfigServer shut down permanently. CSF, LFD, and CXS went dark on somewhere between 500K and a million servers, and the default security stack for cPanel hosting became a choice between commercial subscriptions and the GPL stack rfxn has shipped since 2002. This deck is the state of that stack at the end of Q1 2026.
It covers the full ecosystem: APF, LMD, and BFD as the product line, sigforge and geoscope as the intelligence layer, six shared Bash libraries underneath, and the rfxn Development Framework governing all of it. The through-line is the renaissance quarter: 1,244 commits in 25 days across a codebase that had been in maintenance mode, produced by a spec/plan/build/ship pipeline and a 27-role AI agent workforce with every commit tested across eight operating systems from CentOS 6 to Ubuntu 24.04.
It closes with the honest telemetry: 891 Claude Code sessions over 37.5 days, what shipped, what is in flight, and why velocity, not ambition, is the constraint.
Key Takeaways
- The ConfigServer shutdown made the GPL stack the only zero-cost option left. APF is a drop-in CSF replacement; BFD replaces LFD with an audit trail.
- Legacy plus AI-native development compounds: 1,244 commits in 25 days on a codebase that dates to 2002, with zero ungoverned commits.
- Governance is the enabler, not the tax. Every change follows the same spec/plan/build/ship arc, enforced by the RDF framework across four AI tools.
- 27 agent roles, tiered by model: semantic depth on Opus, pattern matching on Sonnet, checklists on Haiku, with adversarial review built into the pipeline.
- 4,597 tests across an 8-OS Docker matrix is what makes velocity safe on a bash 4.1 floor that still targets CentOS 6.
- Shared libraries are the quiet win: six Bash libraries (logging, alerting, packaging, GeoIP) extracted once and consumed everywhere.