待翻譯：Show HN: VajraClaw – Deterministic <1µs execution guardrail for AI agents

AI 服務暫時不可用，以下為來源正文，待恢復後補全翻譯。

Uh oh! There was an error while loading. Please reload this page. Notifications You must be signed in to change notification settings Fork 0 Star 1 BranchesTags Open more actions menu Latest commit History 13 Commits 13 Commits Folders and files NameName Last commit message Last commit date FreeTrial-Sandbox FreeTrial-Sandbox core core docker docker docs docs examples examples integrations integrations proxy proxy src src tools tools .gitignore .gitignore PRODUCT_AND_FAQ.md PRODUCT_AND_FAQ.md PRODUCT_AND_FAQ_zh.md PRODUCT_AND_FAQ_zh.md README.md README.md README_zh.md README_zh.md config.yaml config.yaml demo_policy.yaml demo_policy.yaml requirements.txt requirements.txt run_demo_attack.py run_demo_attack.py server.json server.json Repository files navigation Free Standalone Docker Governance Gateway for Multi-Agent Ecosystems (W3C DID & <1μs Fusing) English | 繁體中文説明 | 🌐 Official Website DROS VajraClaw Hacker Edition is the official standalone, free Docker governance gateway designed for individual developers, AI researchers, and local developer workstations. It physicalizes execution security between autonomous AI Agents (Google Antigravity, Anthropic Claude, OpenAI Codex, Cursor, CrewAI, AutoGen, DeepSeek Harness) and your local operating system. 🛑 Why Deterministic Execution Governance? Probabilistic security relying on Prompt Engineering, Llama-Guard, or LLM-as-a-judge inevitably fails at runtime: Prompt Injections & Jailbreaks Bypass Text Guards: Attackers easily obfuscate prompts to trick agents into running rm -rf / or leaking .env secrets. Unpredictable Latency & TOCTOU: Calling secondary models adds 1~3s delays and fails to protect OS syscalls. Lack of Auditability: You cannot mathematically prove why an LLM wrapper allowed an action. DROS is NOT a prompt wrapper; it is a Deterministic Runtime OS: It moves intelligence to compile-time (demo_policy.yaml / Vajra.md) and enforces rules at runtime via constant-time $\mathcal{O}(1)$ memory bitmaps with instant physical fusing (Strict Fail-Closed)! 🌟 Hacker Edition Key Features (100% Free Forever for Individuals) 🛡️ Protect Up to 5 Concurrent Agents: Simultaneously govern multiple active agents across different IDEs on a single host. 🔑 Native W3C did:key & RFC-010 Passports: Cryptographic agent identity binding with Ed25519 signatures. ⚡ Microsecond In-Band Fusing (<1μs): Deterministic $\mathcal{O}(1)$ AST policy lookup that severs unauthorized syscalls before execution. 📜 SHA-256 Merkle Hash-Linked Audit Chain: Non-repudiable local execution logs with startup recovery to prevent log tampering. 🌐 Universal Cross-Ecosystem Compatibility: Native REST and MCP endpoints compatible with AGY, Claude, Codex, Cursor, LangChain, CrewAI, and DSH. 📊 Governance & Defense Capability Matrix Threat Vector / Capability Traditional LLM Guardrails 📦 DSH Standalone TS Plugin ⚡ DROS Hacker Docker Gateway (This Repo) 🏢 Enterprise / Mesh Tier Runtime Vehicle Cloud API / External Model In-Process JS (Zero Deps) Local Docker Container (:8080) Enterprise Cluster / K8s / C-ABI Protected Scope Single Chat Session DSH Local Process Full Ecosystem (Claude+Codex+Cursor+DSH+AGY) Multi-Node Fleet / Private Cloud Destructive Command Blocking ❌ Vulnerable 🟢 100% Regex Failsafe 🟢 100% Deterministic AST Fusing (<1μs) 🟢 AST Bitmaps + eBPF Kernel Hooks Credential & Secret Protection ❌ No Physical Guard 🟢 Sensitive Path Block 🟢 Dynamic PII Redaction + Virtual Sandboxing 🟢 Hardware HSM + ZKP-Lite Proofs Agent Identity Binding ❌ No Identity 🟡 Session-level ID 🟢 Native W3C did:key (Ed25519) 🟢 3-Tier PKI DrosIdentityToken (DIT) Non-Repudiable Audit Chain ❌ Plain Text Logs 🟢 Local SHA-256 Hash Chain 🟢 Ed25519 Signed Merkle Hash Chain 🟢 EU AI Act Art. 12 Court-Grade Chain RFC-010 Passports ❌ Unsupported 🟡 Format Parser 🟢 Local Minting & Cross-Agent Verification 🟢 Cross-Organization Roaming Passports Decision Latency 🔴 1,000 ~ 3,000 ms 🟢 <1 ms (Direct Hook) 🟢 <1 ms (Loopback HTTP / C-ABI) 🟢 <500 ns (Zero-Copy Memory Lookup) License Pay-per-Token 100% Free (Apache-2.0) Free License for Individuals Startup $2,990 / Enterprise $29,990 🚀 Quick Start (One-Command Setup) Option 1: Run via Pre-built Docker Container (Recommended) # 1. Start DROS Hacker Gateway (No license key required out-of-the-box) docker run -d -p 8080:8080 --name dros-gateway \ -v $(pwd)/FreeTrial-Sandbox/demo_policy.yaml:/app/demo_policy.yaml \ dros/hacker-gateway:v1.0.0 # 2. Verify health status curl http://localhost:8080/health Option 2: Build & Run from Source git clone https://github.com/Top-Celestial-Company-Ltd/DROS-VajraClaw-Hacker.git cd DROS-VajraClaw-Hacker docker compose -f docker/docker-compose.yml up -d 🔌 5 Major Agent Ecosystem Integration Guides See examples/ for working starter templates: 1. 🤖 Anthropic Claude Desktop & Claude Code (MCP Protocol) See examples/claude_mcp/: Add to your claude_desktop_config.json or mcp_settings.json: { "mcpServers": { "dros-vajraclaw": { "url": "http://localhost:8080/mcp", "transport": "http" } } } 2. 💻 Cursor IDE / VS Code Agents (Terminal Protection) See examples/cursor_rules/: Place .cursorrules in your project root to intercept high-risk terminal commands via http://localhost:8080/evaluate in <1μs before OS execution! 3. 🐍 OpenAI SDK & LangChain (3-Line Tool Wrapping) See examples/openai_langchain/: from integrations.vajraclaw.runtime import VajraClaw vc = VajraClaw("demo_policy.yaml") decision = vc.evaluate("execute_payment", {"amount": 500}) if not decision: raise PermissionError(f"Blocked by DROS: {decision.reason}") 4. 👥 CrewAI & Microsoft AutoGen (Multi-Agent Swarm Governance) See examples/crewai_autogen/: Assign individual W3C DIDs to different agent roles (Legal, Dev, Auditor) and enforce fine-grained capability bitmaps across agent swarms. 5. 📦 DeepSeek Harness (DSH Dual-Mode Plugin) See examples/dsh_plugin/: dsh plugin --profile web add dsh-plugin-vajraclaw (Set gatewayUrl to http://localhost:8080 in DSH to activate W3C DID & full Docker gateway governance) 📝 How to Configure Security Policies (Vajra.md Guide) DROS supports two straightforward formats: Intuitive Markdown (Vajra.md) and Structured YAML (demo_policy.yaml). 1. 📄 Intuitive Markdown Example (Vajra.md) Declare allowed capabilities and hard security boundaries in plain Markdown: # 🛡️ DROS Agent Security Policy (Vajra.md) ## 1. Allowed Capabilities - Allow reading workspace files (file_read) - Allow standard queries (search_web, query_db) - Allow safe terminal commands (git status, npm test, cargo check) ## 2. Strict Fail-Closed Boundaries - Block all recursive deletion or wiping commands (rm -rf, rmdir /s, format) - Block access to credential paths (.env, id_rsa, secrets.json, .aws/credentials) - Restrict transaction amounts exceeding $1,000 threshold (amount <= 1000) 2. 🤖 Let AI Generate Your Policy in 1 Second! (AI Prompt Template) You don't need to write policies from scratch! Copy the following universal prompt to ChatGPT, Claude, or Cursor: 📋 Copy this Prompt to any LLM / AI Assistant: You are a DROS deterministic security architecture expert. Based on my Agent requirements, generate a standard DROS "Vajra.md" security policy in Markdown. Agent Details: - Agent Role & Scenario: [e.g., Fullstack Developer / Customer Service / Financial Automation] - Allowed Tools & Operations: [e.g., Read/Write src/, Run tests, Query order database] - Strict Boundaries & Denials: [e.g., Block deletion of root/workspace, Block .env access, Payment limit $500] Follow the DROS "Default Fail-Closed" whitelist principle and structure the output into: 1. Role & Capability Scope 2. Allowed Capabilities (Whitelist) 3. Security Boundary Constraints (Thresholds & Pattern Failsafes) 3. 🔄 Instant Hot Reloading Simply mount your Vajra.md when launching the Docker gateway. Policy changes take effect in <1 microsecond without container restarts: docker run -d -p 8080:8080 --name dros-gateway \ -v $(pwd)/Vajra.md:/app/demo_policy.yaml \ dros/hacker-gateway:v1.0.0 📜 Technical Foundations & Benchmark Publications The deterministic execution governance, microsecond fusing, and cryptographic audit mechanisms in this project are referenced from and build upon the following core technical papers and verification environments: Core Architecture & Six Trust Boundaries (Core Architecture): Paper: DROS-6P: A Unified Deterministic Runtime Governance Architecture Closing the Six Fundamental Trust Boundaries of Enterprise AI Agents Zenodo DOI: 10.5281/zenodo.21833970 | Archived Record: zenodo.org/records/21833970 Defense-in-Depth Model (4-Layer Security): Paper: DROS 4-Layer Defense-in-Depth Architecture for Autonomous AI Workloads Zenodo DOI: 10.5281/zenodo.21903475 | Archived Record: zenodo.org/records/21903475 Runtime Attribution & C-ABI Module (Attribution Framework): Paper: Runtime Attribution Framework: An External C-ABI and PKI-Based Zero-Trust Infrastructure for Non-Repudiable Execution Governance in Multi-Agent Systems Zenodo DOI: 10.5281/zenodo.21903687 | Archived Record: zenodo.org/records/21903687 Open Standards & Verification Sandbox: RFC-010 Specification: Adheres to open Agent Identity & Attestation standard (W3C DID did:key & Ed25519 signature chain). Verification Sandbox: DROS-VEP Lite (Reproducible Evaluation Sandbox) Evaluation Metrics: 24-hour soak benchmark results (160,611 verified requests, 26.1μs decision latency). ⚠️ Important Notices & Operational Security Strict Fail-Closed Enforcement: By default, any capability or syscall not explicitly declared as ALLOW in demo_policy.yaml is permanently blocked. Privilege Separation: The AI Agent must never possess write permissions to policy files. In production, mount policy files as Read-Only. License Key Activation (Optional): Out-of-the-box, the gateway runs in Community mode (supporting 2 concurrent agents). To unlock 5 concurrent agents, pass -e DROS_LICENSE_KEY="your-key" or activate via DSH settings. ⚖️ Standard 3-Tier License & Intellectual Property Constitution Personal & Community Use (Free for Individuals): Granted permanently for individual developers and researchers (Free License for Individuals) on up to 1 host and 5 concurrent agents. Source code and patent claims are proprietary. Unauthorized redistribution or reverse engineering is strictly prohibited. Enterprise & Commercial Deployment: Enterprise implementation or use by corporate entities requires commercial licensing (Startup / Enterprise / Sovereign). Contact [email protected] or visit https://dr-os.io. Patent Notice: DROS deterministic runtime governance and in-band interception technology is protected under U.S. Provisional Patent Application (U.S. PPA No. 64/111,973, Patent Pending). All commercial and enterprise rights are reserved by Top-Celestial Company Ltd. Resources Readme Activity Custom properties Stars 1 star Watchers 0 watching Forks 0 forks Report repository