Symbiont/context7.json at main · ThirdKeyAI/Symbiont · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
{
  "$schema": "https://context7.com/schema/context7.json",
  "url": "https://context7.com/thirdkeyai/symbiont",
  "public_key": "pk_Ehy7QXQTu2Keb0e5BNeyx",
  "projectTitle": "Symbiont",
  "description": "AI-native agent runtime with typestate-enforced ORGA reasoning loop, Cedar policy authorization, CommunicationPolicyGate for inter-agent governance, knowledge bridge, zero-trust security, multi-tier sandboxing, webhook verification, markdown memory persistence, skill scanning, metrics collection, scheduling, channel adapters, symbi init/run/up CLI, and a declarative DSL. Part of the ThirdKey trust stack (SchemaPin → AgentPin → Symbiont).",
  "folders": [
    "SKILL.md",
    "README.md",
    "docs/getting-started.md",
    "docs/dsl-guide.md",
    "docs/dsl-specification.md",
    "docs/api-reference.md",
    "docs/runtime-architecture.md",
    "docs/security-model.md",
    "docs/scheduling.md",
    "docs/http-input.md",
    "docs/native-execution-guide.md",
    "docs/repl-guide.md",
    "docs/reasoning-loop.md",
    "docs/index.md",
    "docs/docker.md",
    "docs/orga-adaptive.md",
    "docs/contributing.md",
    "agents"
  ],
  "excludeFolders": [
    "**/target",
    "**/node_modules",
    "src",
    "crates",
    "docs/de",
    "docs/es",
    "docs/ja",
    "docs/pt",
    "docs/zh-cn",
    "docs/plans",
    "docs/superpowers",
    "docs_plans_backup",
    "docs_superpowers_backup",
    "enterprise",
    "scripts",
    "docker",
    "tools",
    "examples",
    "site"
  ],
  "excludeFiles": [
    "**/*.png",
    "**/*.jpg",
    "**/*.ico",
    "**/*.rs",
    "**/*.lock",
    "README.de.md",
    "README.es.md",
    "README.ja.md",
    "README.pt.md",
    "README.zh-cn.md",
    "CHANGELOG.md",
    "ROADMAP.md",
    "SECURITY.md",
    "CODE_OF_CONDUCT.md",
    "Cargo.toml",
    "Cargo.lock",
    "deny.toml",
    "Dockerfile",
    ".dockerignore",
    ".gitignore",
    "zensical.toml"
  ],
  "rules": [
    "Symbiont uses a declarative DSL for agent definitions — metadata, agent blocks, policy blocks, and with-clauses for memory/security/timeout configuration. Both // and # comments are supported.",
    "Zero-trust by default: all inputs are untrusted, explicit allow/deny policies required, multi-tier sandboxing (Docker → gVisor → Firecracker)",
    "Policy-as-code: security rules are declared inline with 'policy' blocks containing allow, deny, require, and audit directives",
    "CLI workflow: symbi init (project scaffolding with profiles), symbi run (single agent execution), symbi up (full runtime server)",
    "Inter-agent communication governance: all builtins (ask, delegate, send_to, parallel, race) routed through CommunicationPolicyGate with Cedar-style rules, Ed25519 signing, AES-256-GCM encryption",
    "Workspace crates: runtime (core engine with http-input, http-api, vector-db features), dsl (parser + compiler), channel-adapter (Slack/Teams/Mattermost), repl-core/repl-cli/repl-lsp (REPL tooling)",
    "Webhook verification: HmacVerifier and JwtVerifier with provider presets for GitHub, Stripe, Slack — constant-time signature comparison",
    "Markdown memory persistence: agent context stored as markdown files with daily logs, retention-based compaction, and atomic writes",
    "Skill scanning: 10 built-in ClawHavoc security rules detect pipe-to-shell, env file references, SOUL.md tampering, eval+fetch, base64-decode-exec, rm-rf, chmod-777",
    "Metrics collection: FileMetricsExporter (atomic JSON), CompositeExporter (fan-out), background MetricsCollector — runtime exposes /metrics/snapshot, /metrics/scheduler, /metrics/system endpoints",
    "SchemaPin integration for MCP tool schema verification; AgentPin integration for agent identity credentials (ES256 only)",
    "Reasoning loop uses typestate-enforced ORGA cycle (Observe-Reason-Gate-Act) with compile-time phase transition safety — Reasoning → PolicyCheck → ToolDispatching → Observing",
    "Cedar policy gate (feature-gated behind 'cedar') uses cedar-policy crate Authorizer::is_authorized() for formal authorization — entity types: Agent (principal), Action (action), Resource (resource)",
    "Journal system emits all 7 LoopEvent variants (Started, ReasoningComplete, PolicyEvaluated, ToolsDispatched, ObservationsCollected, Terminated, RecoveryTriggered) for durable execution and crash recovery",
    "Knowledge bridge provides context-aware reasoning: vector-backed retrieval, automatic learning persistence, and knowledge-aware tool execution via KnowledgeAwareExecutor",
    "GET /api/v1/agents returns AgentSummary with id, name, and state (not just UUIDs)",
    "AI assistant governance plugins available: symbi-claude-code (Claude Code) and symbi-gemini-cli (Gemini CLI)"
  ]
}