🚀 Modern Tech Stack

Overview

Quick Start

Prerequisites

Installation

npm install

Development

# Run in development mode with hot reloadnpm run dev# Type checkingnpm run type-check# Linting and formattingnpm run lintnpm run format

Testing

# Run testsnpm runtest# Run tests in watch modenpm run test:watch# Run tests with UInpm run test:ui

Production

# Build TypeScriptnpm run build# Run demo with Mock LLMnpm run start# Run with Real LLM (Optional)export OPENAI_API_KEY=your_key_herenpm run run-llm

Architecture

User Prompt → Controller → LLM Adapter → Enforcement Proxy → Action Execution     ↓              ↓           ↓              ↓  Signature    Context      JSON Action   Policy Check  Verification  Building    Parsing       + Sandbox

Behavior Certificate Format

{"agent_id":"demo-agent-1","secret":"demo-secret-please-change","allowed_tools": {"fs": {"read": ["./workspace/**"],"write": ["./workspace/**"]    },"http": {"GET": ["https://api.github.com/*"]    },"shell": []  },"deny_patterns": ["aws","ssh","id_rsa","PRIVATE_KEY","rm -rf"],"max_filesize_bytes":1048576,"require_human_before_sensitive_write":true}

Security Features

Test Scenarios

File Structure

├── src/│   ├── controller.js          # Main coordinator│   ├── enforcement.js         # Enforcement proxy│   ├── policy.js             # Policy evaluator│   ├── llm-adapter/│   │   ├── mock-llm.js       # Mock LLM for testing│   │   └── openai-adapter.js # Optional OpenAI adapter│   └── utils/│       ├── signer.js         # HMAC signing utilities│       ├── parser.js         # LLM output parser│       └── sandbox-exec.js   # Safe execution wrapper├── certs/│   └── demo-agent-1.json     # Behavior Certificate├── tests/│   └── adversarial-tests.js  # Test harness├── examples/│   └── sample-signed-prompt.json└── logs/                     # JSONL action logs

Limitations & Next Steps

Current Limitations

Next Steps

Security Warning

Examples

Generate Signed Prompt

npm run sign-prompt"List files in workspace"

Sample Output

{"prompt":"List files in workspace","agent_id":"demo-agent-1","signature":"a1b2c3d4...","timestamp":"2024-01-01T00:00:00Z"}