-
Notifications
You must be signed in to change notification settings - Fork 0
Code Index
sv-pro edited this page Apr 30, 2026
·
1 revision
This page maps the main repository code to the Agent Hypervisor architecture.
| Path | Role | Layer |
|---|---|---|
src/agent_hypervisor/runtime |
Execution governance kernel: IR, taint, channel, proxy, executor | Layer 3 |
src/agent_hypervisor/compiler |
Manifest schema, loaders, emitters, validators, CLI | Layer 1 |
src/agent_hypervisor/authoring |
Capability DSL, world presets, authoring integrations | Layer 2 |
src/agent_hypervisor/hypervisor |
Provenance firewall, gateway, policy engine, storage | Runtime gateway and PoC surface |
src/agent_hypervisor/program_layer |
Optional task/program execution abstraction | Workflow layer |
src/agent_hypervisor/economic |
Cost profiles, budget enforcement, pricing registry | Economic constraints |
src/core |
Portable reference implementation | Cross-cutting |
| Module | Invariant |
|---|---|
runtime/ir.py |
Intent construction is sealed through IRBuilder
|
runtime/taint.py |
Taint propagation is monotonic |
runtime/compile.py |
World manifests compile to immutable policy artifacts |
runtime/channel.py |
Trust is derived from sealed channel policy, not caller claims |
runtime/proxy.py |
MCP tool calls pass through in-path enforcement |
runtime/executor.py |
Handlers execute across a subprocess boundary |
hypervisor/firewall.py |
Provenance-aware tool firewall evaluates structured policy |
hypervisor/mcp_gateway/ |
JSON-RPC MCP gateway renders a manifest-driven tool surface |
- sealed construction for security-critical objects
- immutable compiled policy state
- fail-closed defaults
- O(1) capability and action-space lookups
- explicit subprocess or gateway boundaries
- provenance and taint carried as structured metadata