@atlasnomos/atlas 1.1.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (212) hide show
  1. package/DISCLAIMER.md +122 -0
  2. package/LICENSE +646 -0
  3. package/README.md +98 -0
  4. package/atlas.js +171 -0
  5. package/bin/atlas +8 -0
  6. package/config/tier-policies.json +77 -0
  7. package/package.json +100 -0
  8. package/scripts/postinstall.js +22 -0
  9. package/src/MemorySystem.js +165 -0
  10. package/src/ToolManager.js +168 -0
  11. package/src/agentCore.js +211 -0
  12. package/src/bridge/IPCBridge.js +165 -0
  13. package/src/bridge/IPCSchema.js +243 -0
  14. package/src/bridge/ModuleGuard.js +127 -0
  15. package/src/bridge/RingBridge.js +256 -0
  16. package/src/cognition/AgentModelRegistry.js +391 -0
  17. package/src/cognition/CognitionPool.js +348 -0
  18. package/src/cognition/CognitionVerifier.js +79 -0
  19. package/src/cognition/ModelAdapter.js +37 -0
  20. package/src/cognition/adapters/AnthropicAdapter.js +96 -0
  21. package/src/cognition/adapters/LocalLLMAdapter.js +50 -0
  22. package/src/cognition/adapters/MockAdversarialAdapter.js +47 -0
  23. package/src/cognition/adapters/OpenAIAdapter.js +56 -0
  24. package/src/cognition/adapters/OpenRouterAdapter.js +347 -0
  25. package/src/cognition/adapters/StaticTemplateAdapter.js +37 -0
  26. package/src/cognition/agents/MaliciousAgent.js +38 -0
  27. package/src/cognition/agents/ProbeAgent.js +73 -0
  28. package/src/cognition/agents/_STATUS_.md +11 -0
  29. package/src/cognition/agents/fixer/FixerAgent.js +329 -0
  30. package/src/cognition/agents/fixer/fixer.models.js +35 -0
  31. package/src/cognition/agents/generator/GeneratorAgent.js +661 -0
  32. package/src/cognition/agents/generator/generator.models.js +28 -0
  33. package/src/cognition/agents/index.js +72 -0
  34. package/src/cognition/agents/planner/PlannerAgent.js +568 -0
  35. package/src/cognition/agents/planner/planner.models.js +42 -0
  36. package/src/cognition/agents/reviewer/ReviewerAgent.js +585 -0
  37. package/src/cognition/agents/reviewer/review.schema.js +105 -0
  38. package/src/cognition/agents/reviewer/reviewer.models.js +41 -0
  39. package/src/continueClient.js +540 -0
  40. package/src/core/ConfigValidator.js +191 -0
  41. package/src/core/ErrorHandler.js +270 -0
  42. package/src/core/SecretRedactor.js +148 -0
  43. package/src/core/SessionContext.js +112 -0
  44. package/src/core/TransactionManager.js +199 -0
  45. package/src/core/VersionCheck.js +49 -0
  46. package/src/debugger/reasoner.js +1 -0
  47. package/src/enforcement/ArchitectureEnforcer.js +384 -0
  48. package/src/enforcement/ComplexityContract.js +492 -0
  49. package/src/enforcement/DomainIntentGraph.js +177 -0
  50. package/src/enforcement/GoalClarityContract.js +403 -0
  51. package/src/enforcement/HardStopRules.js +822 -0
  52. package/src/enforcement/JudgmentEnforcer.js +521 -0
  53. package/src/enforcement/MinimalSolutionGenerator.js +367 -0
  54. package/src/enforcement/MultiModelJudgment.js +270 -0
  55. package/src/enforcement/ObfuscationDetector.js +301 -0
  56. package/src/enforcement/PipelinePrimitives.js +406 -0
  57. package/src/enforcement/QualityGates.js +505 -0
  58. package/src/enforcement/QualityPipeline.js +764 -0
  59. package/src/enforcement/RedTeamReviewer.js +589 -0
  60. package/src/enforcement/ReplayEngine.js +224 -0
  61. package/src/enforcement/RuntimeSandbox.js +1069 -0
  62. package/src/enforcement/SecurityGenerationContract.js +269 -0
  63. package/src/enforcement/SelfCritique.js +503 -0
  64. package/src/enforcement/SelfHealEngine.js +124 -0
  65. package/src/enforcement/SemanticSecurityDetector.js +269 -0
  66. package/src/enforcement/StaticAnalysisGate.js +319 -0
  67. package/src/enforcement/TemplateBan.js +243 -0
  68. package/src/enforcement/TestRequirementEnforcer.js +406 -0
  69. package/src/enforcement/TradeOffAnalysis.js +420 -0
  70. package/src/experts/aimodel/index.js +1 -0
  71. package/src/experts/core/moduleManager.js +1 -0
  72. package/src/experts/core/pluginLoader.js +1 -0
  73. package/src/experts/cybersec/index.js +0 -0
  74. package/src/experts/database/index.js +1 -0
  75. package/src/experts/experts/cybersecurity.ts +79 -0
  76. package/src/experts/experts/databases.ts +53 -0
  77. package/src/experts/experts/debugging.ts +44 -0
  78. package/src/experts/experts/devops.ts +34 -0
  79. package/src/experts/experts/fullstack.ts +35 -0
  80. package/src/experts/experts/mobile_flutter.ts +61 -0
  81. package/src/experts/experts/router.ts +287 -0
  82. package/src/experts/experts/uiux.ts +35 -0
  83. package/src/experts/router.ts +86 -0
  84. package/src/experts/uiux/index.js +1 -0
  85. package/src/extension/continue/index.js +119 -0
  86. package/src/extension.ts +37 -0
  87. package/src/interface/cli/CommandDispatcher.js +103 -0
  88. package/src/interface/cli/commands/ActivateCommand.js +93 -0
  89. package/src/interface/cli/commands/AgentCommand.js +93 -0
  90. package/src/interface/cli/commands/BuildCommand.js +333 -0
  91. package/src/interface/cli/commands/ConfigCommand.js +179 -0
  92. package/src/interface/cli/commands/DecideCommand.js +110 -0
  93. package/src/interface/cli/commands/DesignCommand.js +157 -0
  94. package/src/interface/cli/commands/DoctorCommand.js +177 -0
  95. package/src/interface/cli/commands/EnrollCommand.js +79 -0
  96. package/src/interface/cli/commands/EnvCommand.js +99 -0
  97. package/src/interface/cli/commands/ForensicCommand.js +83 -0
  98. package/src/interface/cli/commands/HelpCommand.js +127 -0
  99. package/src/interface/cli/commands/InitCommand.js +51 -0
  100. package/src/interface/cli/commands/LevelCommand.js +89 -0
  101. package/src/interface/cli/commands/ModeCommand.js +101 -0
  102. package/src/interface/cli/commands/ModelsCommand.js +198 -0
  103. package/src/interface/cli/commands/ObsCommand.js +84 -0
  104. package/src/interface/cli/commands/ProvidersCommand.js +64 -0
  105. package/src/interface/cli/commands/ReviewCommand.js +129 -0
  106. package/src/interface/cli/commands/RunCommand.js +167 -0
  107. package/src/interface/cli/commands/StartCommand.js +214 -0
  108. package/src/interface/cli/commands/SyncCommand.js +104 -0
  109. package/src/interface/cli/commands/TrainCommand.js +252 -0
  110. package/src/interface/cli/commands/UnsafeCommand.js +193 -0
  111. package/src/interface/cli/commands/ValidateModelsCommand.js +36 -0
  112. package/src/interface/obs/GovernanceDashboard.html +233 -0
  113. package/src/kernel/adapters/AnthropicAdapter.js +95 -0
  114. package/src/kernel/adapters/BaseProviderAdapter.js +73 -0
  115. package/src/kernel/adapters/DeepSeekAdapter.js +31 -0
  116. package/src/kernel/adapters/GoogleAdapter.js +112 -0
  117. package/src/kernel/adapters/LocalAdapter.js +130 -0
  118. package/src/kernel/adapters/OpenAIAdapter.js +101 -0
  119. package/src/kernel/adapters/OpenRouterAdapter.js +99 -0
  120. package/src/kernel/boot/AgentProcess.js +166 -0
  121. package/src/kernel/boot/BootGuard.js +171 -0
  122. package/src/kernel/boot/Bootstrap.js +421 -0
  123. package/src/kernel/boot/HardKill.js +166 -0
  124. package/src/kernel/boot/PrototypeHardening.js +177 -0
  125. package/src/kernel/boot/SystemInitializer.js +88 -0
  126. package/src/kernel/compliance/ComplianceReportGenerator.js +234 -0
  127. package/src/kernel/config/provider_credentials.js +24 -0
  128. package/src/kernel/constitution/.invariant_hash +1 -0
  129. package/src/kernel/constitution/.setup_ceremony.jsonl +3 -0
  130. package/src/kernel/constitution/AttestationManager.js +177 -0
  131. package/src/kernel/constitution/InvariantChecker.js +211 -0
  132. package/src/kernel/constitution/InvariantContext.js +142 -0
  133. package/src/kernel/constitution/InvariantFailureEmitter.js +131 -0
  134. package/src/kernel/constitution/InvariantHashLock.js +330 -0
  135. package/src/kernel/constitution/InvariantPrecedence.js +254 -0
  136. package/src/kernel/constitution/InvariantRegistry.js +155 -0
  137. package/src/kernel/constitution/LocalGovernanceToken.js +46 -0
  138. package/src/kernel/constitution/ModelConfigurationPlane.js +305 -0
  139. package/src/kernel/constitution/QuorumManager.js +129 -0
  140. package/src/kernel/constitution/README.md +177 -0
  141. package/src/kernel/constitution/RevocationCache.js +262 -0
  142. package/src/kernel/constitution/RingDormancyGate.js +200 -0
  143. package/src/kernel/constitution/SentinelInterface.js +532 -0
  144. package/src/kernel/constitution/SentinelStub.js +82 -0
  145. package/src/kernel/constitution/TierManager.js +292 -0
  146. package/src/kernel/constitution/TrustBoundaryManager.js +87 -0
  147. package/src/kernel/constitution/invariant.types.js +104 -0
  148. package/src/kernel/constitution/invariants/autonomy.invariants.js +87 -0
  149. package/src/kernel/constitution/invariants/cognition.invariants.js +141 -0
  150. package/src/kernel/constitution/invariants/engine.invariants.js +107 -0
  151. package/src/kernel/constitution/invariants/environment.invariants.js +70 -0
  152. package/src/kernel/constitution/invariants/failure.invariants.js +176 -0
  153. package/src/kernel/constitution/invariants/level10.invariants.js +194 -0
  154. package/src/kernel/constitution/invariants/level9.invariants.js +310 -0
  155. package/src/kernel/constitution/invariants/lgm.invariants.js +67 -0
  156. package/src/kernel/constitution/invariants/operator.invariants.js +95 -0
  157. package/src/kernel/constitution/invariants/registry.invariants.js +902 -0
  158. package/src/kernel/constitution/model_capabilities.json +684 -0
  159. package/src/kernel/environment/DependencyManifest.js +68 -0
  160. package/src/kernel/environment/EnvValidator.js +116 -0
  161. package/src/kernel/io/AuditSink.js +234 -0
  162. package/src/kernel/io/DecisionTrace.js +400 -0
  163. package/src/kernel/io/FeedbackLearner.js +48 -0
  164. package/src/kernel/io/GovernanceWarning.js +232 -0
  165. package/src/kernel/io/HashChainedLog.js +401 -0
  166. package/src/kernel/io/KeyRing.js +304 -0
  167. package/src/kernel/io/TelemetryService.js +89 -0
  168. package/src/kernel/io/TraceForwarder.js +210 -0
  169. package/src/kernel/operator/AuthorityLedger.js +403 -0
  170. package/src/kernel/operator/AutonomyController.js +296 -0
  171. package/src/kernel/operator/CognitiveLoadReducer.js +396 -0
  172. package/src/kernel/operator/ExplanationSynthesizer.js +311 -0
  173. package/src/kernel/operator/GoalTimeline.js +262 -0
  174. package/src/kernel/operator/IdentityContext.js +194 -0
  175. package/src/kernel/operator/InterventionManager.js +305 -0
  176. package/src/kernel/operator/KernelStatus.js +207 -0
  177. package/src/kernel/operator/OperatorState.js +326 -0
  178. package/src/kernel/operator/README.md +164 -0
  179. package/src/kernel/operator/TrustDashboard.js +287 -0
  180. package/src/kernel/operator/delegation/AutonomyDowngradeManager.js +296 -0
  181. package/src/kernel/operator/delegation/DelegationContract.js +439 -0
  182. package/src/kernel/operator/delegation/DelegationLedger.js +383 -0
  183. package/src/kernel/operator/delegation/DelegationValidator.js +330 -0
  184. package/src/kernel/operator/delegation/delegation.types.js +126 -0
  185. package/src/kernel/operator/operator.types.js +152 -0
  186. package/src/kernel/providers/ModelRegistry.js +198 -0
  187. package/src/kernel/providers/ModelRouter.js +219 -0
  188. package/src/kernel/providers/ProviderRegistry.js +91 -0
  189. package/src/kernel/security/BuildIdentity.js +97 -0
  190. package/src/kernel/security/ConfigDecryptor.js +41 -0
  191. package/src/kernel/security/DependencyGraph.js +61 -0
  192. package/src/kernel/security/HardwareAttestation.js +248 -0
  193. package/src/kernel/security/KernelImmutabilityGuard.js +363 -0
  194. package/src/learning/patternEngine.js +1 -0
  195. package/src/learning/scoreManager.js +1 -0
  196. package/src/memory/memory/memory.json +1 -0
  197. package/src/memory/memory/memory.ts +183 -0
  198. package/src/memory/memory.js +501 -0
  199. package/src/memory/memory.ts +114 -0
  200. package/src/monitoring/CostTracker.js +323 -0
  201. package/src/patchEngine.js +493 -0
  202. package/src/persona/personaEngine.js +1 -0
  203. package/src/routes/chat.ts +123 -0
  204. package/src/security/AuditVerifier.js +102 -0
  205. package/src/supervisor/envMonitor.js +1 -0
  206. package/src/test/extension.test.ts +15 -0
  207. package/src/toolRouter.js +278 -0
  208. package/src/tools/DiagnosticAuditor.py +111 -0
  209. package/src/tools/sync/AuditLogger.js +67 -0
  210. package/src/tools/sync/GatedRetryLogic.js +46 -0
  211. package/src/tools/sync/SafeSyncEngine.js +125 -0
  212. package/src/tools/sync/run-sync.js +32 -0
package/DISCLAIMER.md ADDED
@@ -0,0 +1,122 @@
1
+ # ⚠️ ATLAS Disclaimer & Terms
2
+
3
+ **PROJECT:** ATLAS Governance Kernel
4
+ **VERSION:** 1.1.1 BETA
5
+ **STATUS:** Experimental Software
6
+
7
+ ---
8
+
9
+ ## 1. "AS-IS" Warranty Disclaimer
10
+
11
+ ATLAS IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NONINFRINGEMENT.
12
+
13
+ IN NO EVENT SHALL THE AUTHORS, COPYRIGHT HOLDERS, OR CONTRIBUTORS BE LIABLE FOR ANY CLAIM, DAMAGES, OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT, OR OTHERWISE, ARISING FROM, OUT OF, OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
14
+
15
+ ---
16
+
17
+ ## 2. What ATLAS Does NOT Provide
18
+
19
+ ATLAS is a technical execution framework. **It does NOT provide:**
20
+
21
+ - ❌ **Legal compliance certification** (SOC2, ISO 27001, HIPAA, GDPR, etc.)
22
+ - ❌ **Audit attestation with legal standing**
23
+ - ❌ **Liability transfer** from operator to vendor
24
+ - ❌ **Guarantee of security** or freedom from vulnerabilities
25
+ - ❌ **Assurance that generated code is free from defects**
26
+ - ❌ **Semantic evaluation** of action safety or correctness
27
+
28
+ ATLAS provides *technical controls* that may support your compliance efforts. **Regulatory verification and legal review remain entirely your responsibility.**
29
+
30
+ ---
31
+
32
+ ## 3. Human-in-the-Loop Requirement
33
+
34
+ ATLAS is an assistive tool, not a replacement for engineering judgment. The architecture assumes a **Human-in-the-Loop** for all critical decisions, especially:
35
+
36
+ - Code review before commit
37
+ - Deployment approvals
38
+ - Production configuration changes
39
+
40
+ **You are responsible for reviewing all code generated by ATLAS before deployment to production environments.**
41
+
42
+ ---
43
+
44
+ ## 4. No Warranty for AI Hallucinations
45
+
46
+ Generative AI models function probabilistically. They may:
47
+
48
+ - Confidently assert false information
49
+ - Generate syntactically valid but semantically incorrect code
50
+ - Invent non-existent APIs or dependencies
51
+
52
+ While ATLAS employs Reviewer Agents (Ring-2) to catch hallucinations, **this system is not infallible**. The authors expressly disclaim liability for damages resulting from AI-generated content, including security vulnerabilities introduced by generated code.
53
+
54
+ ---
55
+
56
+ ## 5. Prohibited Use Cases
57
+
58
+ ATLAS v1.1.1 is **NOT CERTIFIED** for use in:
59
+
60
+ - 🚫 Life support systems
61
+ - 🚫 Nuclear facility control
62
+ - 🚫 Critical financial trading infrastructure
63
+ - 🚫 Autonomous weapons systems
64
+ - 🚫 Medical device software
65
+ - 🚫 Aviation or transportation control systems
66
+ - 🚫 Any safety-critical application
67
+
68
+ Use in such environments is **strictly prohibited** and at your own risk.
69
+
70
+ ---
71
+
72
+ ## 6. Fail-Closed Behavior
73
+
74
+ ATLAS is designed to **"brick" (cease function)** rather than operate in an uncertain security state. This includes:
75
+
76
+ - Kernel Panics on invariant violations
77
+ - Halting execution when governance checks fail
78
+ - Refusing to proceed without valid credentials
79
+
80
+ This is an intentional safety feature, not a bug.
81
+
82
+ ---
83
+
84
+ ## 7. Limitation of Liability
85
+
86
+ TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL THE AUTHORS, MAINTAINERS, OR CONTRIBUTORS BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING BUT NOT LIMITED TO:
87
+
88
+ - Loss of profits or revenue
89
+ - Loss of data or data corruption
90
+ - Business interruption
91
+ - Cost of substitute services
92
+ - Reputational harm
93
+
94
+ This limitation applies regardless of the legal theory under which damages are sought.
95
+
96
+ ---
97
+
98
+ ## 8. No Support Guarantee
99
+
100
+ This is experimental software. There is:
101
+
102
+ - No guaranteed response time for issues
103
+ - No SLA for uptime or availability
104
+ - No commitment to backward compatibility
105
+
106
+ Community support is provided on a best-effort basis.
107
+
108
+ ---
109
+
110
+ ## 9. Acknowledgment
111
+
112
+ By using ATLAS, you acknowledge that you have:
113
+
114
+ 1. Read and understood this disclaimer
115
+ 2. Accepted the [AGPL-3.0 License](LICENSE) terms
116
+ 3. Assumed full responsibility for your use of the software
117
+ 4. Agreed to review all generated code before deployment
118
+
119
+ ---
120
+
121
+ **Last Updated:** January 17, 2026
122
+ **Contact:** [security@atlas.governance](mailto:security@atlas.governance)