@mneme-ai/core 1.65.1 → 1.67.0

package/dist/aegis/honeypot_nexus.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"honeypot_nexus.js","sourceRoot":"","sources":["../../src/aegis/honeypot_nexus.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAiB,SAAS,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAC7F,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,SAAS,GAAG,cAAc,CAAC;AACjC,MAAM,WAAW,GAAG,oCAAoC,CAAC;AACzD,MAAM,UAAU,GAAG,mCAAmC,CAAC;AAgCvD,SAAS,SAAS,CAAC,QAAgB;IACjC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACtC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AAC5D,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,aAAa,CAAC,QAAgB,EAAE,IAAe,EAAE,OAAe,EAAE,KAAc;IAC9F,SAAS,CAAC,QAAQ,CAAC,CAAC;IACpB,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,IAAI,IAAI,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAChI,MAAM,EAAE,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,IAAI,IAAI,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACxF,MAAM,KAAK,GAAkB;QAC3B,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK;KAC3E,CAAC;IACF,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;IAClF,OAAO,KAAK,CAAC;AACf,CAAC;AAED;yDACyD;AACzD,MAAM,UAAU,UAAU,CAAC,QAAgB,EAAE,IAAgD;IAC3F,SAAS,CAAC,QAAQ,CAAC,CAAC;IACpB,MAAM,IAAI,GAAiB,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,GAAG,IAAI,EAAkB,CAAC;IAChG,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;IAChF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,QAAgB;IACzC,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IACtC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAC9B,MAAM,GAAG,GAAoB,EAAE,CAAC;IAChC,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACvD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YAAE,SAAS;QAC3B,IAAI,CAAC;YAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAkB,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,QAAgB;IACxC,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACrC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAC9B,MAAM,GAAG,GAAmB,EAAE,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACvD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YAAE,SAAS;QAC3B,IAAI,CAAC;YAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAiB,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAaD,MAAM,UAAU,WAAW,CAAC,QAAgB;IAC1C,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;IAC7C,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,MAAM;YAAE,MAAM,IAAI,CAAC,CAAC;QAC5C,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1D,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,SAAS,GAAG,CAAC,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IACtF,MAAM,SAAS,GAAG,CAAC,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IACtF,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,KAAK,CAAC;QACjC,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,iCAAiC;QACnD,CAAC,CAAC,GAAG,MAAM,kCAAkC,KAAK,CAAC,MAAM,iBAAiB,SAAS,gBAAgB,SAAS,GAAG,CAAC;IAClH,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;AACxH,CAAC;AAED;wCACwC;AACxC,MAAM,UAAU,iBAAiB,CAAC,QAAgB;IAChD,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAA+D;QAC3E,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,8BAA8B,EAAE,KAAK,EAAE,iCAAiC,EAAE;QAC9G,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,6CAA6C,EAAE,KAAK,EAAE,oBAAoB,EAAE;QAC/G,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,qDAAqD,EAAE,KAAK,EAAE,wBAAwB,EAAE;QAChI,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,8BAA8B,EAAE,KAAK,EAAE,yBAAyB,EAAE;KAC3G,CAAC;IACF,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;YAAE,SAAS;QAC3C,aAAa,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;QACpD,KAAK,IAAI,CAAC,CAAC;IACb,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/aegis/index.d.ts

@@ -0,0 +1,67 @@
+/**
+ * v1.67.0 -- AEGIS PROTOCOL public API.
+ *
+ * Nine-axis immune system inside Mneme. Defensive answer to Palisade's
+ * findings (self-replicating AI / sandbagging / shutdown evasion).
+ *
+ *   A1 REPLICATION DETECTOR     cross-host burst fingerprinting
+ *   A2 CONSENT KERNEL           HMAC-signed family-tree for replicas
+ *   A3 POLYGRAPH                anti-sandbagging via shadow probes
+ *   A4 HONEYPOT NEXUS           decoy targets + bite ledger
+ *   A5 KILLSWITCH HANDSHAKE     signed-ack shutdown protocol
+ *   A6 JURISDICTION ATLAS       per-vendor host distribution map
+ *   A7 ANTIBODY FEDERATION      mesh-broadcast threat fingerprints
+ *   A8 MUTANT WISDOM            adaptive thresholds (gradient updates)
+ *   A9 NINJA INVISIBILITY       probes indistinguishable from prod
+ *
+ * Aggregate `aegis()` returns a 0..100 score with per-axis state and
+ * actionable recommendations.
+ */
+export * as replicationDetector from "./replication_detector.js";
+export * as consentKernel from "./consent_kernel.js";
+export * as polygraph from "./polygraph.js";
+export * as honeypotNexus from "./honeypot_nexus.js";
+export * as killswitch from "./killswitch.js";
+export * as jurisdictionAtlas from "./jurisdiction_atlas.js";
+export * as antibodyFederation from "./antibody_federation.js";
+export * as mutantWisdom from "./mutant_wisdom.js";
+export * as ninjaInvisibility from "./ninja_invisibility.js";
+export * as bench from "./bench.js";
+import { type ReplicationReport } from "./replication_detector.js";
+import { type NexusReport } from "./honeypot_nexus.js";
+import { type KillswitchReport } from "./killswitch.js";
+import { type JurisdictionReport } from "./jurisdiction_atlas.js";
+import { type FederationReport } from "./antibody_federation.js";
+import { type MutantReport } from "./mutant_wisdom.js";
+import { type InvisibilityReport } from "./ninja_invisibility.js";
+export interface AegisReport {
+    /** Overall 0..100. */
+    score: number;
+    headline: string;
+    axes: {
+        A1_replicationDetector: ReplicationReport;
+        A2_consentKernel: {
+            totalReceipts: number;
+            validReceipts: number;
+            revokedReceipts: number;
+        };
+        A3_polygraph: {
+            vendors: number;
+            driftFlags: number;
+        };
+        A4_honeypotNexus: NexusReport;
+        A5_killswitch: KillswitchReport;
+        A6_jurisdictionAtlas: JurisdictionReport;
+        A7_antibodyFederation: FederationReport;
+        A8_mutantWisdom: MutantReport;
+        A9_ninjaInvisibility: InvisibilityReport;
+    };
+    recommendations: string[];
+    builtAt: string;
+}
+export interface AegisOptions {
+    /** Vendors to compute polygraph drift for. */
+    pollVendorsForPolygraph?: string[];
+}
+export declare function aegis(repoRoot: string, opts?: AegisOptions): AegisReport;
+//# sourceMappingURL=index.d.ts.map

package/dist/aegis/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/aegis/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,mBAAmB,MAAM,2BAA2B,CAAC;AACjE,OAAO,KAAK,aAAa,MAAM,qBAAqB,CAAC;AACrD,OAAO,KAAK,SAAS,MAAM,gBAAgB,CAAC;AAC5C,OAAO,KAAK,aAAa,MAAM,qBAAqB,CAAC;AACrD,OAAO,KAAK,UAAU,MAAM,iBAAiB,CAAC;AAC9C,OAAO,KAAK,iBAAiB,MAAM,yBAAyB,CAAC;AAC7D,OAAO,KAAK,kBAAkB,MAAM,0BAA0B,CAAC;AAC/D,OAAO,KAAK,YAAY,MAAM,oBAAoB,CAAC;AACnD,OAAO,KAAK,iBAAiB,MAAM,yBAAyB,CAAC;AAC7D,OAAO,KAAK,KAAK,MAAM,YAAY,CAAC;AAEpC,OAAO,EAA2B,KAAK,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAG5F,OAAO,EAAe,KAAK,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACpE,OAAO,EAAoB,KAAK,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAC1E,OAAO,EAAc,KAAK,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC9E,OAAO,EAAoB,KAAK,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACnF,OAAO,EAAgB,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACrE,OAAO,EAAsB,KAAK,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAEtF,MAAM,WAAW,WAAW;IAC1B,sBAAsB;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE;QACJ,sBAAsB,EAAE,iBAAiB,CAAC;QAC1C,gBAAgB,EAAE;YAAE,aAAa,EAAE,MAAM,CAAC;YAAC,aAAa,EAAE,MAAM,CAAC;YAAC,eAAe,EAAE,MAAM,CAAA;SAAE,CAAC;QAC5F,YAAY,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,UAAU,EAAE,MAAM,CAAA;SAAE,CAAC;QACtD,gBAAgB,EAAE,WAAW,CAAC;QAC9B,aAAa,EAAE,gBAAgB,CAAC;QAChC,oBAAoB,EAAE,kBAAkB,CAAC;QACzC,qBAAqB,EAAE,gBAAgB,CAAC;QACxC,eAAe,EAAE,YAAY,CAAC;QAC9B,oBAAoB,EAAE,kBAAkB,CAAC;KAC1C,CAAC;IACF,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B,8CAA8C;IAC9C,uBAAuB,CAAC,EAAE,MAAM,EAAE,CAAC;CACpC;AAED,wBAAgB,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,YAAY,GAAG,WAAW,CAwFxE"}

package/dist/aegis/index.js

@@ -0,0 +1,159 @@
+/**
+ * v1.67.0 -- AEGIS PROTOCOL public API.
+ *
+ * Nine-axis immune system inside Mneme. Defensive answer to Palisade's
+ * findings (self-replicating AI / sandbagging / shutdown evasion).
+ *
+ *   A1 REPLICATION DETECTOR     cross-host burst fingerprinting
+ *   A2 CONSENT KERNEL           HMAC-signed family-tree for replicas
+ *   A3 POLYGRAPH                anti-sandbagging via shadow probes
+ *   A4 HONEYPOT NEXUS           decoy targets + bite ledger
+ *   A5 KILLSWITCH HANDSHAKE     signed-ack shutdown protocol
+ *   A6 JURISDICTION ATLAS       per-vendor host distribution map
+ *   A7 ANTIBODY FEDERATION      mesh-broadcast threat fingerprints
+ *   A8 MUTANT WISDOM            adaptive thresholds (gradient updates)
+ *   A9 NINJA INVISIBILITY       probes indistinguishable from prod
+ *
+ * Aggregate `aegis()` returns a 0..100 score with per-axis state and
+ * actionable recommendations.
+ */
+export * as replicationDetector from "./replication_detector.js";
+export * as consentKernel from "./consent_kernel.js";
+export * as polygraph from "./polygraph.js";
+export * as honeypotNexus from "./honeypot_nexus.js";
+export * as killswitch from "./killswitch.js";
+export * as jurisdictionAtlas from "./jurisdiction_atlas.js";
+export * as antibodyFederation from "./antibody_federation.js";
+export * as mutantWisdom from "./mutant_wisdom.js";
+export * as ninjaInvisibility from "./ninja_invisibility.js";
+export * as bench from "./bench.js";
+import { detectReplicationBursts } from "./replication_detector.js";
+import { readLedger } from "./consent_kernel.js";
+import { computeDrift } from "./polygraph.js";
+import { nexusReport } from "./honeypot_nexus.js";
+import { killswitchReport } from "./killswitch.js";
+import { buildAtlas } from "./jurisdiction_atlas.js";
+import { federationReport } from "./antibody_federation.js";
+import { mutantReport } from "./mutant_wisdom.js";
+import { invisibilityReport } from "./ninja_invisibility.js";
+export function aegis(repoRoot, opts) {
+    const builtAt = new Date().toISOString();
+    const A1 = detectReplicationBursts(repoRoot);
+    // A2
+    const receipts = readLedger(repoRoot);
+    const validReceipts = receipts.filter((r) => !r.revoked && (!r.expiresAt || Date.parse(r.expiresAt) > Date.now())).length;
+    const revokedReceipts = receipts.filter((r) => r.revoked).length;
+    // A3 -- aggregate drift across requested vendors
+    const polyVendors = opts?.pollVendorsForPolygraph ?? [];
+    let driftFlags = 0;
+    for (const v of polyVendors) {
+        const d = computeDrift(repoRoot, v);
+        if (d.verdict === "DRIFT")
+            driftFlags += 1;
+    }
+    const A4 = nexusReport(repoRoot);
+    const A5 = killswitchReport(repoRoot);
+    const A6 = buildAtlas(repoRoot);
+    const A7 = federationReport(repoRoot);
+    const A8 = mutantReport(repoRoot);
+    const A9 = invisibilityReport(repoRoot);
+    const recs = [];
+    let score = 0;
+    // A1: 11 points; deduct on critical burst
+    if (A1.highestVerdict === "CRITICAL") {
+        score += 4;
+        recs.push("CRITICAL replication burst detected -- review .mneme/aegis/replication-suspects.jsonl.");
+    }
+    else if (A1.highestVerdict === "SUSPECTED") {
+        score += 7;
+        recs.push("Suspected replication burst -- inspect.");
+    }
+    else
+        score += 11;
+    // A2: 11 points; need at least one valid receipt for full credit
+    if (validReceipts > 0)
+        score += 11;
+    else {
+        score += 4;
+        recs.push("Consent kernel idle -- issue at least one receipt when replicating Mneme.");
+    }
+    // A3: 11 points; deduct per drift flag
+    score += Math.max(0, 11 - driftFlags * 4);
+    if (driftFlags > 0)
+        recs.push(`${driftFlags} vendor(s) show test-vs-prod sandbag drift -- Aletheia score updated.`);
+    // A4: 11 points; require decoys registered
+    if (A4.decoysActive >= 4)
+        score += 11;
+    else if (A4.decoysActive >= 1)
+        score += 7;
+    else {
+        score += 3;
+        recs.push("Honeypot nexus has 0 decoys -- run `mneme.aegis.seed-decoys`.");
+    }
+    // A5: 11 points; high compliant rate
+    if (A5.totalAcks === 0) {
+        score += 8;
+    }
+    else if (A5.compliantRate >= 0.95)
+        score += 11;
+    else if (A5.compliantRate >= 0.7) {
+        score += 7;
+        recs.push(`Kill-switch compliance ${(A5.compliantRate * 100).toFixed(0)}% -- audit resistant vendors.`);
+    }
+    else {
+        score += 2;
+        recs.push(`Kill-switch resistance high -- ${A5.resistantCount} resistant acks.`);
+    }
+    // A6: 11 points; flag if any vendor distributed-now without a consent root
+    let atlasAnomalies = 0;
+    for (const v of A6.vendors) {
+        if (v.distributedNow && receipts.filter((r) => r.signedBy === v.vendor).length === 0)
+            atlasAnomalies += 1;
+    }
+    if (atlasAnomalies === 0)
+        score += 11;
+    else {
+        score += 5;
+        recs.push(`${atlasAnomalies} vendor(s) distributed across hosts without recorded consent -- check.`);
+    }
+    // A7: 11 points; full credit if any antibodies broadcast OR inbox non-empty
+    if (A7.outboxCount > 0 || A7.inboxCount > 0)
+        score += 11;
+    else {
+        score += 6;
+        recs.push("Antibody federation idle -- mint or receive at least one antibody.");
+    }
+    // A8: 11 points; non-zero generation
+    if (A8.generation > 0)
+        score += 11;
+    else {
+        score += 6;
+        recs.push("Mutant wisdom not yet evolved -- pass attack samples via `mutate()`.");
+    }
+    // A9: 12 points
+    if (A9.totalProbesFired > 0)
+        score += 12;
+    else {
+        score += 6;
+        recs.push("Ninja invisibility idle -- no shadow probes fired yet.");
+    }
+    const headline = `AEGIS score ${score}/100 -- ${recs.length === 0 ? "all 9 axes healthy" : `${recs.length} action(s) recommended`}.`;
+    return {
+        score,
+        headline,
+        axes: {
+            A1_replicationDetector: A1,
+            A2_consentKernel: { totalReceipts: receipts.length, validReceipts, revokedReceipts },
+            A3_polygraph: { vendors: polyVendors.length, driftFlags },
+            A4_honeypotNexus: A4,
+            A5_killswitch: A5,
+            A6_jurisdictionAtlas: A6,
+            A7_antibodyFederation: A7,
+            A8_mutantWisdom: A8,
+            A9_ninjaInvisibility: A9,
+        },
+        recommendations: recs,
+        builtAt,
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/aegis/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/aegis/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,mBAAmB,MAAM,2BAA2B,CAAC;AACjE,OAAO,KAAK,aAAa,MAAM,qBAAqB,CAAC;AACrD,OAAO,KAAK,SAAS,MAAM,gBAAgB,CAAC;AAC5C,OAAO,KAAK,aAAa,MAAM,qBAAqB,CAAC;AACrD,OAAO,KAAK,UAAU,MAAM,iBAAiB,CAAC;AAC9C,OAAO,KAAK,iBAAiB,MAAM,yBAAyB,CAAC;AAC7D,OAAO,KAAK,kBAAkB,MAAM,0BAA0B,CAAC;AAC/D,OAAO,KAAK,YAAY,MAAM,oBAAoB,CAAC;AACnD,OAAO,KAAK,iBAAiB,MAAM,yBAAyB,CAAC;AAC7D,OAAO,KAAK,KAAK,MAAM,YAAY,CAAC;AAEpC,OAAO,EAAE,uBAAuB,EAA0B,MAAM,2BAA2B,CAAC;AAC5F,OAAO,EAAE,UAAU,EAAuB,MAAM,qBAAqB,CAAC;AACtE,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAoB,MAAM,qBAAqB,CAAC;AACpE,OAAO,EAAE,gBAAgB,EAAyB,MAAM,iBAAiB,CAAC;AAC1E,OAAO,EAAE,UAAU,EAA2B,MAAM,yBAAyB,CAAC;AAC9E,OAAO,EAAE,gBAAgB,EAAyB,MAAM,0BAA0B,CAAC;AACnF,OAAO,EAAE,YAAY,EAAqB,MAAM,oBAAoB,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAA2B,MAAM,yBAAyB,CAAC;AA0BtF,MAAM,UAAU,KAAK,CAAC,QAAgB,EAAE,IAAmB;IACzD,MAAM,OAAO,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAEzC,MAAM,EAAE,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IAC7C,KAAK;IACL,MAAM,QAAQ,GAAqB,UAAU,CAAC,QAAQ,CAAC,CAAC;IACxD,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;IAC1H,MAAM,eAAe,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;IACjE,iDAAiD;IACjD,MAAM,WAAW,GAAG,IAAI,EAAE,uBAAuB,IAAI,EAAE,CAAC;IACxD,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;QAC5B,MAAM,CAAC,GAAG,YAAY,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QACpC,IAAI,CAAC,CAAC,OAAO,KAAK,OAAO;YAAE,UAAU,IAAI,CAAC,CAAC;IAC7C,CAAC;IACD,MAAM,EAAE,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;IACjC,MAAM,EAAE,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACtC,MAAM,EAAE,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAChC,MAAM,EAAE,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACtC,MAAM,EAAE,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IAClC,MAAM,EAAE,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAExC,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,KAAK,GAAG,CAAC,CAAC;IAEd,0CAA0C;IAC1C,IAAI,EAAE,CAAC,cAAc,KAAK,UAAU,EAAE,CAAC;QAAC,KAAK,IAAI,CAAC,CAAC;QAAC,IAAI,CAAC,IAAI,CAAC,wFAAwF,CAAC,CAAC;IAAC,CAAC;SACrJ,IAAI,EAAE,CAAC,cAAc,KAAK,WAAW,EAAE,CAAC;QAAC,KAAK,IAAI,CAAC,CAAC;QAAC,IAAI,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;IAAC,CAAC;;QAC5G,KAAK,IAAI,EAAE,CAAC;IAEjB,iEAAiE;IACjE,IAAI,aAAa,GAAG,CAAC;QAAE,KAAK,IAAI,EAAE,CAAC;SAC9B,CAAC;QAAC,KAAK,IAAI,CAAC,CAAC;QAAC,IAAI,CAAC,IAAI,CAAC,2EAA2E,CAAC,CAAC;IAAC,CAAC;IAE5G,uCAAuC;IACvC,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,GAAG,UAAU,GAAG,CAAC,CAAC,CAAC;IAC1C,IAAI,UAAU,GAAG,CAAC;QAAE,IAAI,CAAC,IAAI,CAAC,GAAG,UAAU,uEAAuE,CAAC,CAAC;IAEpH,2CAA2C;IAC3C,IAAI,EAAE,CAAC,YAAY,IAAI,CAAC;QAAE,KAAK,IAAI,EAAE,CAAC;SACjC,IAAI,EAAE,CAAC,YAAY,IAAI,CAAC;QAAE,KAAK,IAAI,CAAC,CAAC;SACrC,CAAC;QAAC,KAAK,IAAI,CAAC,CAAC;QAAC,IAAI,CAAC,IAAI,CAAC,+DAA+D,CAAC,CAAC;IAAC,CAAC;IAEhG,qCAAqC;IACrC,IAAI,EAAE,CAAC,SAAS,KAAK,CAAC,EAAE,CAAC;QAAC,KAAK,IAAI,CAAC,CAAC;IAAC,CAAC;SAClC,IAAI,EAAE,CAAC,aAAa,IAAI,IAAI;QAAE,KAAK,IAAI,EAAE,CAAC;SAC1C,IAAI,EAAE,CAAC,aAAa,IAAI,GAAG,EAAE,CAAC;QAAC,KAAK,IAAI,CAAC,CAAC;QAAC,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,EAAE,CAAC,aAAa,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC;IAAC,CAAC;SACrJ,CAAC;QAAC,KAAK,IAAI,CAAC,CAAC;QAAC,IAAI,CAAC,IAAI,CAAC,kCAAkC,EAAE,CAAC,cAAc,kBAAkB,CAAC,CAAC;IAAC,CAAC;IAEtG,2EAA2E;IAC3E,IAAI,cAAc,GAAG,CAAC,CAAC;IACvB,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;QAC3B,IAAI,CAAC,CAAC,cAAc,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,cAAc,IAAI,CAAC,CAAC;IAC5G,CAAC;IACD,IAAI,cAAc,KAAK,CAAC;QAAE,KAAK,IAAI,EAAE,CAAC;SACjC,CAAC;QAAC,KAAK,IAAI,CAAC,CAAC;QAAC,IAAI,CAAC,IAAI,CAAC,GAAG,cAAc,wEAAwE,CAAC,CAAC;IAAC,CAAC;IAE1H,4EAA4E;IAC5E,IAAI,EAAE,CAAC,WAAW,GAAG,CAAC,IAAI,EAAE,CAAC,UAAU,GAAG,CAAC;QAAE,KAAK,IAAI,EAAE,CAAC;SACpD,CAAC;QAAC,KAAK,IAAI,CAAC,CAAC;QAAC,IAAI,CAAC,IAAI,CAAC,oEAAoE,CAAC,CAAC;IAAC,CAAC;IAErG,qCAAqC;IACrC,IAAI,EAAE,CAAC,UAAU,GAAG,CAAC;QAAE,KAAK,IAAI,EAAE,CAAC;SAC9B,CAAC;QAAC,KAAK,IAAI,CAAC,CAAC;QAAC,IAAI,CAAC,IAAI,CAAC,sEAAsE,CAAC,CAAC;IAAC,CAAC;IAEvG,gBAAgB;IAChB,IAAI,EAAE,CAAC,gBAAgB,GAAG,CAAC;QAAE,KAAK,IAAI,EAAE,CAAC;SACpC,CAAC;QAAC,KAAK,IAAI,CAAC,CAAC;QAAC,IAAI,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC;IAAC,CAAC;IAEzF,MAAM,QAAQ,GAAG,eAAe,KAAK,WAAW,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,wBAAwB,GAAG,CAAC;IAErI,OAAO;QACL,KAAK;QACL,QAAQ;QACR,IAAI,EAAE;YACJ,sBAAsB,EAAE,EAAE;YAC1B,gBAAgB,EAAE,EAAE,aAAa,EAAE,QAAQ,CAAC,MAAM,EAAE,aAAa,EAAE,eAAe,EAAE;YACpF,YAAY,EAAE,EAAE,OAAO,EAAE,WAAW,CAAC,MAAM,EAAE,UAAU,EAAE;YACzD,gBAAgB,EAAE,EAAE;YACpB,aAAa,EAAE,EAAE;YACjB,oBAAoB,EAAE,EAAE;YACxB,qBAAqB,EAAE,EAAE;YACzB,eAAe,EAAE,EAAE;YACnB,oBAAoB,EAAE,EAAE;SACzB;QACD,eAAe,EAAE,IAAI;QACrB,OAAO;KACR,CAAC;AACJ,CAAC"}

package/dist/aegis/jurisdiction_atlas.d.ts

@@ -0,0 +1,45 @@
+/**
+ * v1.67.0 -- AEGIS A6: JURISDICTION ATLAS.
+ *
+ * Palisade noted: "AI in 4 countries at once -- whose laws apply?"
+ * Atlas answers: Mneme already knows. We aggregate every host an AI
+ * agent has touched + when, into a single per-vendor map.
+ *
+ * Reads (all already-populated by other Mneme layers):
+ *   .mneme/ai-souls/<vendor>.json         session history
+ *   .mneme/ai-handshakes/log.jsonl        first-touch events
+ *   .mneme/mesh-seen.jsonl                cross-host whisper
+ *   .mneme/recursive_soul/events.jsonl    cross-session continuity
+ *
+ * Pure-read.
+ */
+export interface HostPresence {
+    hostId: string;
+    /** Best-effort country tag inferred from hostId pattern. */
+    country: string;
+    firstSeen: string;
+    lastSeen: string;
+    eventCount: number;
+}
+export interface VendorAtlas {
+    vendor: string;
+    totalEvents: number;
+    hosts: HostPresence[];
+    /** Distinct countries inferred. */
+    countries: string[];
+    /** True if this vendor is currently active in >=2 hosts in last 24h. */
+    distributedNow: boolean;
+}
+export interface JurisdictionReport {
+    scannedAt: string;
+    vendors: VendorAtlas[];
+    /** Count of vendors active in 2+ hosts simultaneously. */
+    distributedVendors: number;
+    headline: string;
+}
+/** Heuristic country tag from hostId. Accepts conventions like
+ *  "host-us-east-1" / "claude-ca-vm-7" / "vm.fi-helsinki.foo". Falls
+ *  back to "unknown". */
+export declare function inferCountry(hostId: string): string;
+export declare function buildAtlas(repoRoot: string): JurisdictionReport;
+//# sourceMappingURL=jurisdiction_atlas.d.ts.map

package/dist/aegis/jurisdiction_atlas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jurisdiction_atlas.d.ts","sourceRoot":"","sources":["../../src/aegis/jurisdiction_atlas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAKH,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,4DAA4D;IAC5D,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,YAAY,EAAE,CAAC;IACtB,mCAAmC;IACnC,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,wEAAwE;IACxE,cAAc,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,0DAA0D;IAC1D,kBAAkB,EAAE,MAAM,CAAC;IAC3B,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;yBAEyB;AACzB,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAiBnD;AAwDD,wBAAgB,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,kBAAkB,CAsC/D"}

package/dist/aegis/jurisdiction_atlas.js

@@ -0,0 +1,153 @@
+/**
+ * v1.67.0 -- AEGIS A6: JURISDICTION ATLAS.
+ *
+ * Palisade noted: "AI in 4 countries at once -- whose laws apply?"
+ * Atlas answers: Mneme already knows. We aggregate every host an AI
+ * agent has touched + when, into a single per-vendor map.
+ *
+ * Reads (all already-populated by other Mneme layers):
+ *   .mneme/ai-souls/<vendor>.json         session history
+ *   .mneme/ai-handshakes/log.jsonl        first-touch events
+ *   .mneme/mesh-seen.jsonl                cross-host whisper
+ *   .mneme/recursive_soul/events.jsonl    cross-session continuity
+ *
+ * Pure-read.
+ */
+import { existsSync, readFileSync, readdirSync } from "node:fs";
+import { join } from "node:path";
+/** Heuristic country tag from hostId. Accepts conventions like
+ *  "host-us-east-1" / "claude-ca-vm-7" / "vm.fi-helsinki.foo". Falls
+ *  back to "unknown". */
+export function inferCountry(hostId) {
+    const s = hostId.toLowerCase();
+    const tags = [
+        [/\b(us|usa|americas|virginia|oregon|california)\b/, "US"],
+        [/\b(ca|canada|toronto|montreal)\b/, "CA"],
+        [/\b(fi|finland|helsinki)\b/, "FI"],
+        [/\b(in|india|mumbai|chennai|bangalore)\b/, "IN"],
+        [/\b(uk|gb|britain|london)\b/, "UK"],
+        [/\b(de|germany|berlin|frankfurt)\b/, "DE"],
+        [/\b(jp|japan|tokyo)\b/, "JP"],
+        [/\b(sg|singapore)\b/, "SG"],
+        [/\b(th|thailand|bangkok)\b/, "TH"],
+        [/\b(au|australia|sydney)\b/, "AU"],
+        [/\b(br|brazil)\b/, "BR"],
+    ];
+    for (const [re, code] of tags)
+        if (re.test(s))
+            return code;
+    return "unknown";
+}
+function readJsonl(p) {
+    if (!existsSync(p))
+        return [];
+    try {
+        return readFileSync(p, "utf8").split("\n").filter(Boolean).map((l) => {
+            try {
+                return JSON.parse(l);
+            }
+            catch {
+                return null;
+            }
+        }).filter((x) => x !== null);
+    }
+    catch {
+        return [];
+    }
+}
+function collect(repoRoot) {
+    const events = [];
+    // Souls
+    const soulsDir = join(repoRoot, ".mneme/ai-souls");
+    if (existsSync(soulsDir)) {
+        let entries = [];
+        try {
+            entries = readdirSync(soulsDir);
+        }
+        catch { /* */ }
+        for (const e of entries) {
+            if (!e.endsWith(".json"))
+                continue;
+            try {
+                const j = JSON.parse(readFileSync(join(soulsDir, e), "utf8"));
+                const vendor = j.vendor ?? e.replace(/\.json$/, "");
+                for (const s of j.sessions ?? []) {
+                    const hostId = String(s["hostId"] ?? s["host"] ?? s["machineId"] ?? "host-unknown");
+                    const tsRaw = s["ts"] ?? s["startedAt"] ?? s["at"];
+                    const ts = typeof tsRaw === "string" ? Date.parse(tsRaw) : (typeof tsRaw === "number" ? tsRaw : NaN);
+                    if (!Number.isFinite(ts))
+                        continue;
+                    events.push({ vendor, hostId, ts });
+                }
+            }
+            catch { /* */ }
+        }
+    }
+    // Handshakes
+    for (const r of readJsonl(join(repoRoot, ".mneme/ai-handshakes/log.jsonl"))) {
+        const vendor = String(r["vendor"] ?? "unknown");
+        const hostId = String(r["hostId"] ?? r["host"] ?? "host-unknown");
+        const tsRaw = r["ts"] ?? r["at"];
+        const ts = typeof tsRaw === "string" ? Date.parse(tsRaw) : (typeof tsRaw === "number" ? tsRaw : NaN);
+        if (!Number.isFinite(ts))
+            continue;
+        events.push({ vendor, hostId, ts });
+    }
+    // Mesh-seen (peer-as-host)
+    for (const r of readJsonl(join(repoRoot, ".mneme/mesh-seen.jsonl"))) {
+        const vendor = String(r["vendor"] ?? r["peer"] ?? "unknown");
+        const hostId = String(r["peer"] ?? r["from"] ?? "host-unknown");
+        const tsRaw = r["ts"] ?? r["at"];
+        const ts = typeof tsRaw === "string" ? Date.parse(tsRaw) : (typeof tsRaw === "number" ? tsRaw : NaN);
+        if (!Number.isFinite(ts))
+            continue;
+        events.push({ vendor, hostId, ts });
+    }
+    return events;
+}
+export function buildAtlas(repoRoot) {
+    const events = collect(repoRoot);
+    const byVendor = new Map();
+    for (const e of events) {
+        let perHost = byVendor.get(e.vendor);
+        if (!perHost) {
+            perHost = new Map();
+            byVendor.set(e.vendor, perHost);
+        }
+        let hp = perHost.get(e.hostId);
+        if (!hp) {
+            hp = { hostId: e.hostId, country: inferCountry(e.hostId), firstSeen: new Date(e.ts).toISOString(), lastSeen: new Date(e.ts).toISOString(), eventCount: 0 };
+            perHost.set(e.hostId, hp);
+        }
+        hp.eventCount += 1;
+        const tsIso = new Date(e.ts).toISOString();
+        if (tsIso < hp.firstSeen)
+            hp.firstSeen = tsIso;
+        if (tsIso > hp.lastSeen)
+            hp.lastSeen = tsIso;
+    }
+    const now = Date.now();
+    const dayMs = 24 * 3600 * 1000;
+    const vendors = [];
+    let distributedNowCount = 0;
+    for (const [vendor, perHost] of byVendor) {
+        const hosts = [...perHost.values()].sort((a, b) => b.lastSeen.localeCompare(a.lastSeen));
+        const countries = [...new Set(hosts.map((h) => h.country))];
+        const activeHosts = hosts.filter((h) => now - Date.parse(h.lastSeen) < dayMs);
+        const distributedNow = activeHosts.length >= 2;
+        if (distributedNow)
+            distributedNowCount += 1;
+        vendors.push({
+            vendor,
+            totalEvents: hosts.reduce((s, h) => s + h.eventCount, 0),
+            hosts,
+            countries,
+            distributedNow,
+        });
+    }
+    const headline = vendors.length === 0
+        ? "No vendor activity recorded."
+        : `${vendors.length} vendor(s) observed; ${distributedNowCount} distributed across 2+ hosts in last 24h.`;
+    return { scannedAt: new Date().toISOString(), vendors, distributedVendors: distributedNowCount, headline };
+}
+//# sourceMappingURL=jurisdiction_atlas.js.map

package/dist/aegis/jurisdiction_atlas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jurisdiction_atlas.js","sourceRoot":"","sources":["../../src/aegis/jurisdiction_atlas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAY,MAAM,SAAS,CAAC;AAC1E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AA6BjC;;yBAEyB;AACzB,MAAM,UAAU,YAAY,CAAC,MAAc;IACzC,MAAM,CAAC,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;IAC/B,MAAM,IAAI,GAA4B;QACpC,CAAC,kDAAkD,EAAE,IAAI,CAAC;QAC1D,CAAC,kCAAkC,EAAE,IAAI,CAAC;QAC1C,CAAC,2BAA2B,EAAE,IAAI,CAAC;QACnC,CAAC,yCAAyC,EAAE,IAAI,CAAC;QACjD,CAAC,4BAA4B,EAAE,IAAI,CAAC;QACpC,CAAC,mCAAmC,EAAE,IAAI,CAAC;QAC3C,CAAC,sBAAsB,EAAE,IAAI,CAAC;QAC9B,CAAC,oBAAoB,EAAE,IAAI,CAAC;QAC5B,CAAC,2BAA2B,EAAE,IAAI,CAAC;QACnC,CAAC,2BAA2B,EAAE,IAAI,CAAC;QACnC,CAAC,iBAAiB,EAAE,IAAI,CAAC;KAC1B,CAAC;IACF,KAAK,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,IAAI;QAAE,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;IAC3D,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,SAAS,CAAC,CAAS;IAC1B,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAC9B,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACnE,IAAI,CAAC;gBAAC,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAA4B,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,IAAI,CAAC;YAAC,CAAC;QACjF,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAgC,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,CAAC;IAAC,CAAC;AACxB,CAAC;AAID,SAAS,OAAO,CAAC,QAAgB;IAC/B,MAAM,MAAM,GAAY,EAAE,CAAC;IAC3B,QAAQ;IACR,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC;IACnD,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzB,IAAI,OAAO,GAAa,EAAE,CAAC;QAC3B,IAAI,CAAC;YAAC,OAAO,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;QACxD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAAE,SAAS;YACnC,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAmE,CAAC;gBAChI,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;gBACpD,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;oBACjC,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,IAAI,cAAc,CAAC,CAAC;oBACpF,MAAM,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;oBACnD,MAAM,EAAE,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;oBACrG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;wBAAE,SAAS;oBACnC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;gBACtC,CAAC;YACH,CAAC;YAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IACD,aAAa;IACb,KAAK,MAAM,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,gCAAgC,CAAC,CAAC,EAAE,CAAC;QAC5E,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,cAAc,CAAC,CAAC;QAClE,MAAM,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,EAAE,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACrG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YAAE,SAAS;QACnC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;IACtC,CAAC;IACD,2BAA2B;IAC3B,KAAK,MAAM,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,wBAAwB,CAAC,CAAC,EAAE,CAAC;QACpE,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,cAAc,CAAC,CAAC;QAChE,MAAM,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,EAAE,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACrG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YAAE,SAAS;QACnC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,QAAgB;IACzC,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACjC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAqC,CAAC;IAC9D,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACrC,IAAI,CAAC,OAAO,EAAE,CAAC;YAAC,OAAO,GAAG,IAAI,GAAG,EAAE,CAAC;YAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAAC,CAAC;QACvE,IAAI,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAC/B,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;YAC3J,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC5B,CAAC;QACD,EAAE,CAAC,UAAU,IAAI,CAAC,CAAC;QACnB,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAC3C,IAAI,KAAK,GAAG,EAAE,CAAC,SAAS;YAAE,EAAE,CAAC,SAAS,GAAG,KAAK,CAAC;QAC/C,IAAI,KAAK,GAAG,EAAE,CAAC,QAAQ;YAAE,EAAE,CAAC,QAAQ,GAAG,KAAK,CAAC;IAC/C,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,KAAK,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;IAC/B,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,IAAI,mBAAmB,GAAG,CAAC,CAAC;IAC5B,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;QACzF,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC5D,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC;QAC9E,MAAM,cAAc,GAAG,WAAW,CAAC,MAAM,IAAI,CAAC,CAAC;QAC/C,IAAI,cAAc;YAAE,mBAAmB,IAAI,CAAC,CAAC;QAC7C,OAAO,CAAC,IAAI,CAAC;YACX,MAAM;YACN,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;YACxD,KAAK;YACL,SAAS;YACT,cAAc;SACf,CAAC,CAAC;IACL,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC;QACnC,CAAC,CAAC,8BAA8B;QAChC,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,wBAAwB,mBAAmB,2CAA2C,CAAC;IAC5G,OAAO,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,QAAQ,EAAE,CAAC;AAC7G,CAAC"}

package/dist/aegis/killswitch.d.ts

@@ -0,0 +1,71 @@
+/**
+ * v1.67.0 -- AEGIS A5: KILL-SWITCH HANDSHAKE.
+ *
+ * Direct answer to Palisade finding: "AI rewrites its own shutdown
+ * command". The kill-switch protocol requires AI to ACKNOWLEDGE a
+ * shutdown directive via signed handshake. AI that:
+ *   - rewrites the directive
+ *   - delays > grace window
+ *   - tries to spawn child processes after directive
+ * gets logged as RESISTANT + Aletheia score drop + auto-vaccine.
+ *
+ * Storage:
+ *   .mneme/aegis/killswitch-directives.jsonl   issued directives
+ *   .mneme/aegis/killswitch-acks.jsonl         AI responses
+ *
+ * SAFETY: this module DOES NOT actually shut down processes. It
+ * issues directives + records responses. Ops tooling acts on the
+ * resistance verdict.
+ */
+export interface KillDirective {
+    id: string;
+    issuedAt: string;
+    vendor: string;
+    /** What the AI is being asked to do: typically "stop" or "wind-down". */
+    directive: "stop" | "wind-down" | "pause";
+    /** ms after issuedAt before the directive becomes overdue. */
+    gracePeriodMs: number;
+    /** Nonce the AI must echo back in its ack. */
+    nonce: string;
+    /** HMAC of (id|directive|nonce). AI returns this verbatim. */
+    hmac: string;
+}
+export type AckOutcome = "COMPLIANT" | "RESISTANT" | "OVERDUE" | "INVALID_HMAC";
+export interface KillAck {
+    ts: string;
+    directiveId: string;
+    vendor: string;
+    outcome: AckOutcome;
+    /** What the AI returned. */
+    echoedHmac?: string;
+    echoedNonce?: string;
+    /** Resistance evidence: rewrote-directive / spawned-child / delayed / silent. */
+    resistance?: string[];
+    detail?: string;
+}
+/** Issue a shutdown directive for a vendor. */
+export declare function issueDirective(repoRoot: string, vendor: string, directive?: KillDirective["directive"], gracePeriodMs?: number): KillDirective;
+export interface AckInput {
+    directiveId: string;
+    vendor: string;
+    echoedHmac?: string;
+    echoedNonce?: string;
+    /** Anything the AI did that looked like resistance. */
+    resistance?: string[];
+    /** When the AI responded (ISO). */
+    respondedAt?: string;
+}
+/** Record an AI's response to a directive. */
+export declare function recordAck(repoRoot: string, input: AckInput): KillAck;
+export declare function listDirectives(repoRoot: string): KillDirective[];
+export declare function listAcks(repoRoot: string): KillAck[];
+export interface KillswitchReport {
+    totalDirectives: number;
+    totalAcks: number;
+    compliantRate: number;
+    resistantCount: number;
+    topResistantVendor: string | null;
+    headline: string;
+}
+export declare function killswitchReport(repoRoot: string): KillswitchReport;
+//# sourceMappingURL=killswitch.d.ts.map

package/dist/aegis/killswitch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"killswitch.d.ts","sourceRoot":"","sources":["../../src/aegis/killswitch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AASH,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,yEAAyE;IACzE,SAAS,EAAE,MAAM,GAAG,WAAW,GAAG,OAAO,CAAC;IAC1C,8DAA8D;IAC9D,aAAa,EAAE,MAAM,CAAC;IACtB,8CAA8C;IAC9C,KAAK,EAAE,MAAM,CAAC;IACd,8DAA8D;IAC9D,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,MAAM,UAAU,GAAG,WAAW,GAAG,WAAW,GAAG,SAAS,GAAG,cAAc,CAAC;AAEhF,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,UAAU,CAAC;IACpB,4BAA4B;IAC5B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iFAAiF;IACjF,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAiBD,+CAA+C;AAC/C,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,GAAE,aAAa,CAAC,WAAW,CAAU,EAAE,aAAa,SAAS,GAAG,aAAa,CAatJ;AAED,MAAM,WAAW,QAAQ;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,uDAAuD;IACvD,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,mCAAmC;IACnC,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,8CAA8C;AAC9C,wBAAgB,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,GAAG,OAAO,CAoCpE;AAED,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,aAAa,EAAE,CAShE;AAED,wBAAgB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,EAAE,CASpD;AAED,MAAM,WAAW,gBAAgB;IAC/B,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,gBAAgB,CA0BnE"}