RouteSentry – securely routes selected pod traffic through fail‑closed, encrypted VPN tunnels

Fail-closed configuration + hardening layer for BlackCat: secure file-based runtime config (no env bypass), profiles/templates, and platform-aware permission checks used by TrustKernel/Web3 integrity.

Open, verifiable agent framework — fail-closed orchestration, evidence-based verification, tamper-evident audit chains (SHA-256/HMAC).

External kill switch for autonomous runtimes. Validate at enforcement boundaries. Revoke to halt execution.

Checker-only Canon-52 artifact: zero-dependency minimal adjudicator + sealed vector packs + reproducible anchors (Law52 immunity, needle-eye writeback). Implements Law52 constitutional immunity checks (Harm/Touch, Route, Needle-Eye) for verifiable safe-state enforcement. See README.md for full specification and self-tests.

完全ローカル×思考可視化×三権分立の軽量AIコア。ネット/外部DBなし。state保存/復元、4D意味距離(geo/strict)、署名付き役割カード、𝒢実装。

Fail-closed execution guard for workers, services, and agents

Cite or shut up. LLM answers without verifiable sources are liabilities. Extractive RAG with line-anchored citations that fails closed when confidence is low. Deterministic, no API keys.

BlackCat Core — Web3-backed TrustKernel security: HTTPS-only request hardening, fail-closed runtime config, and guarded DB/crypto entrypoints.

Official Python SDK for MachineID - simple device registration and validation for AI agents.