mcp-nervous-system 1.9.3 → 1.9.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +4 -4
- package/package.json +2 -2
- package/README.md.bak.1772777593 +0 -172
- package/README.md.bak.1772792496 +0 -172
- package/README.md.bak.1772792812 +0 -172
- package/README.md.bak.1772809790 +0 -172
- package/README.md.bak.1772811377 +0 -172
- package/README.md.bak.1772812255 +0 -172
- package/README.md.bak.1772814975 +0 -172
- package/README.md.bak.1772815524 +0 -172
package/README.md
CHANGED
|
@@ -4,7 +4,7 @@
|
|
|
4
4
|
|
|
5
5
|
7 mechanically enforced rules that prevent the most common failure modes when LLMs have access to real infrastructure: context loss, silent failures, file damage, goal drift, and overreach.
|
|
6
6
|
|
|
7
|
-
Built by [Arthur Palyan](https://www.levelsofself.com) at Palyan Family AI System.
|
|
7
|
+
Built by [Arthur Palyan](https://www.levelsofself.com) at Palyan Family AI System. 30 tools including configuration drift detection, emergency kill switch, usage monitoring, and bot compliance auditing. Battle-tested on a 13-agent AI family running 29 processes 24/7 on a $24/month VPS (upgraded to 7.8GB RAM). SAM.gov registered (CAGE 19R10). 26 partners across 10 countries. 99+ violations caught, 0 bypassed.
|
|
8
8
|
|
|
9
9
|
## The Problem
|
|
10
10
|
|
|
@@ -60,7 +60,7 @@ Protocol: MCP 2024-11-05 (Streamable HTTP + SSE)
|
|
|
60
60
|
Authentication: None required
|
|
61
61
|
```
|
|
62
62
|
|
|
63
|
-
## NEW in v1.9.
|
|
63
|
+
## NEW in v1.9.3
|
|
64
64
|
|
|
65
65
|
**Platform Integration Guides** - Working examples for governing multi-agent systems on the 3 biggest platforms plus any MCP client. Each guide gets you to governed agents in under 10 minutes.
|
|
66
66
|
|
|
@@ -69,12 +69,12 @@ Authentication: None required
|
|
|
69
69
|
- [Anthropic Agent Teams](./integrations/agent-teams/) - Parallel agent governance via CLAUDE.md propagation with shared untouchable lists and unified audit trails
|
|
70
70
|
- [Generic MCP](./integrations/generic-mcp/) - 5-minute setup for any MCP client (Claude Desktop, Claude Code, Cursor, Windsurf, Cline)
|
|
71
71
|
|
|
72
|
-
## v1.
|
|
72
|
+
## v1.9.3
|
|
73
73
|
|
|
74
74
|
**Tamara Reference Implementation + Case Study** (2 new resources)
|
|
75
75
|
Production reference implementation of an autonomous AI operations manager built on the Nervous System. Includes full architecture documentation, build-your-own guide, and case study with real metrics from managing 13 agents across 5 platforms.
|
|
76
76
|
|
|
77
|
-
## v1.
|
|
77
|
+
## v1.9.3
|
|
78
78
|
|
|
79
79
|
**drift_audit** (free tier)
|
|
80
80
|
Configuration drift detection across 5 scopes: roles, versions, files, processes, and website. Scans source-of-truth files (family-roles.json, package.json, UNTOUCHABLE_FILES.txt) against all downstream references - HTML pages, JSON configs, markdown docs, and running PM2 processes. Change one file, drift_audit tells you everywhere else that needs updating. The closed loop that keeps your entire system consistent.
|
package/package.json
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "mcp-nervous-system",
|
|
3
|
-
"version": "1.9.
|
|
4
|
-
"description": "Governance layer for multi-agent AI systems. 7 mechanically enforced rules,
|
|
3
|
+
"version": "1.9.4",
|
|
4
|
+
"description": "Governance layer for multi-agent AI systems. 7 mechanically enforced rules, 30 tools including kill switch, audit chain, dispatch, drift audit, security audit, page health, pre-publish audit, and session close. Works with Ruflo, Hivemind, Agent Teams, and any MCP client.",
|
|
5
5
|
"main": "server.js",
|
|
6
6
|
"bin": {
|
|
7
7
|
"mcp-nervous-system": "./stdio.js"
|
package/README.md.bak.1772777593
DELETED
|
@@ -1,172 +0,0 @@
|
|
|
1
|
-
# The Nervous System
|
|
2
|
-
|
|
3
|
-
**LLM Behavioral Enforcement Framework**
|
|
4
|
-
|
|
5
|
-
7 mechanically enforced rules that prevent the most common failure modes when LLMs have access to real infrastructure: context loss, silent failures, file damage, goal drift, and overreach.
|
|
6
|
-
|
|
7
|
-
Built by [Arthur Palyan](https://www.levelsofself.com) at Palyan Family AI System. 12 tools including configuration drift detection and emergency kill switch. Battle-tested on an 11-member AI family running 28 processes 24/7 on a single VPS. 58+ violations logged, 0 bypassed.
|
|
8
|
-
|
|
9
|
-
## The Problem
|
|
10
|
-
|
|
11
|
-
When you give an LLM access to your file system, bash, and production infrastructure, it will eventually:
|
|
12
|
-
|
|
13
|
-
- Edit a file it shouldn't touch
|
|
14
|
-
- Lose context between sessions and start over
|
|
15
|
-
- Drift from the original objective during long tasks
|
|
16
|
-
- Fail silently when a session times out
|
|
17
|
-
- Make logic changes without asking
|
|
18
|
-
- Disappear into debug loops
|
|
19
|
-
|
|
20
|
-
The Nervous System solves all of these with rules enforced by external mechanisms the LLM cannot override.
|
|
21
|
-
|
|
22
|
-
## Install
|
|
23
|
-
|
|
24
|
-
### Claude Desktop
|
|
25
|
-
|
|
26
|
-
Add to your `claude_desktop_config.json`:
|
|
27
|
-
|
|
28
|
-
```json
|
|
29
|
-
{
|
|
30
|
-
"mcpServers": {
|
|
31
|
-
"nervous-system": {
|
|
32
|
-
"command": "npx",
|
|
33
|
-
"args": ["-y", "mcp-nervous-system"]
|
|
34
|
-
}
|
|
35
|
-
}
|
|
36
|
-
}
|
|
37
|
-
```
|
|
38
|
-
|
|
39
|
-
### Claude Code
|
|
40
|
-
|
|
41
|
-
```bash
|
|
42
|
-
claude mcp add nervous-system npx mcp-nervous-system
|
|
43
|
-
```
|
|
44
|
-
|
|
45
|
-
### Direct
|
|
46
|
-
|
|
47
|
-
```bash
|
|
48
|
-
npx mcp-nervous-system
|
|
49
|
-
```
|
|
50
|
-
|
|
51
|
-
Server starts on port 3475 with SSE, HTTP, and health endpoints.
|
|
52
|
-
|
|
53
|
-
### Hosted (No Install)
|
|
54
|
-
|
|
55
|
-
The server is live and ready to use:
|
|
56
|
-
|
|
57
|
-
```
|
|
58
|
-
URL: https://api.100levelup.com/mcp-ns/
|
|
59
|
-
Protocol: MCP 2024-11-05 (Streamable HTTP + SSE)
|
|
60
|
-
Authentication: None required
|
|
61
|
-
```
|
|
62
|
-
|
|
63
|
-
## NEW in v1.4.0
|
|
64
|
-
|
|
65
|
-
**drift_audit** (free tier)
|
|
66
|
-
Configuration drift detection across 5 scopes: roles, versions, files, processes, and website. Scans source-of-truth files (family-roles.json, package.json, UNTOUCHABLE_FILES.txt) against all downstream references - HTML pages, JSON configs, markdown docs, and running PM2 processes. Change one file, drift_audit tells you everywhere else that needs updating. The closed loop that keeps your entire system consistent.
|
|
67
|
-
|
|
68
|
-
**Positioning: Auto mode decides what Claude CAN do. The Nervous System governs HOW it behaves while doing it.**
|
|
69
|
-
|
|
70
|
-
## The 7 Rules
|
|
71
|
-
|
|
72
|
-
| # | Rule | What It Prevents |
|
|
73
|
-
|---|------|-----------------|
|
|
74
|
-
| 1 | **Dispatch Don't Do** | Debug loops, rabbit holes. Tasks > 2 messages get dispatched. |
|
|
75
|
-
| 2 | **Untouchable** | File damage. Protected files mechanically blocked from editing. |
|
|
76
|
-
| 3 | **Write Progress** | Silent failures. Progress noted before each action. |
|
|
77
|
-
| 4 | **Step Back Every 4** | Goal drift. Forced reflection every 4 messages. |
|
|
78
|
-
| 5 | **Delegate and Return** | Invisible work. Background tasks reported immediately. |
|
|
79
|
-
| 6 | **Ask Before Touching** | Unauthorized changes. Logic changes need human approval. |
|
|
80
|
-
| 7 | **Hand Off** | Context loss. Written handoffs every 3-4 exchanges. |
|
|
81
|
-
|
|
82
|
-
## MCP Tools (12)
|
|
83
|
-
|
|
84
|
-
| Tool | Description |
|
|
85
|
-
|------|------------|
|
|
86
|
-
| `get_framework` | Complete framework: all rules, permission protocol, enforcement patterns |
|
|
87
|
-
| `guardrail_rules` | The 7 core rules with triggers, enforcement, and failure modes |
|
|
88
|
-
| `preflight_check` | File protection system: shell script blocks edits to protected files |
|
|
89
|
-
| `session_handoff` | Context preservation: templates for handoff documents |
|
|
90
|
-
| `worklog` | Progress documentation pattern |
|
|
91
|
-
| `violation_logging` | Audit trail: timestamp, type, context for every violation |
|
|
92
|
-
| `step_back_check` | Forced reflection system |
|
|
93
|
-
| `get_nervous_system_info` | System overview and operational stats |
|
|
94
|
-
| `emergency_kill_switch` | Emergency shutdown of all PM2 processes. Requires kill switch secret. Logs to tamper-evident audit trail |
|
|
95
|
-
| `verify_audit_chain` | Walks the SHA-256 hash-chained audit log and verifies every entry. Returns chain integrity status |
|
|
96
|
-
| `dispatch_to_llm` | Spawns a background LLM agent to handle a task. Checks RAM, enforces max 2 concurrent dispatches |
|
|
97
|
-
| `drift_audit` | Configuration drift detection across roles, versions, files, processes, and website. Finds stale values everywhere. |
|
|
98
|
-
|
|
99
|
-
## Kill Switch
|
|
100
|
-
|
|
101
|
-
The `emergency_kill_switch` tool provides an emergency shutdown capability. Send a POST request to `/kill` with the kill switch secret to immediately stop all PM2 processes. Every activation is logged to the tamper-evident audit trail with SHA-256 hash chaining, so kill switch events cannot be hidden or altered after the fact.
|
|
102
|
-
|
|
103
|
-
- Requires authentication (kill switch secret)
|
|
104
|
-
- Logs to hash-chained audit trail
|
|
105
|
-
- Returns confirmation with affected process count
|
|
106
|
-
|
|
107
|
-
## Tamper-Evident Audit Trail
|
|
108
|
-
|
|
109
|
-
Every guardrail violation, kill switch activation, and dispatch event is recorded in a SHA-256 hash-chained audit log. Each entry includes the hash of the previous entry, making it cryptographically impossible to alter or delete past records without breaking the chain.
|
|
110
|
-
|
|
111
|
-
- Use `verify_audit_chain` to walk the entire chain and verify integrity
|
|
112
|
-
- Returns: valid/invalid status, entry count, and break point if tampered
|
|
113
|
-
- 58+ violations logged, 0 bypassed, 0 chain breaks
|
|
114
|
-
|
|
115
|
-
## Dispatch to LLM
|
|
116
|
-
|
|
117
|
-
The `dispatch_to_llm` tool enables a brain + agents architecture. Instead of one LLM session doing everything, complex tasks get dispatched to background agents that run independently under the same 7 rules.
|
|
118
|
-
|
|
119
|
-
- Checks available RAM (requires 500MB+)
|
|
120
|
-
- Enforces max 2 concurrent dispatches
|
|
121
|
-
- Returns PID and log file path for monitoring
|
|
122
|
-
- Every dispatched agent runs under the same nervous system guardrails
|
|
123
|
-
|
|
124
|
-
## EU AI Act Compliance
|
|
125
|
-
|
|
126
|
-
The Nervous System provides practical compliance tools for the EU AI Act. See the full compliance page at:
|
|
127
|
-
|
|
128
|
-
https://api.100levelup.com/family/eu-ai-act.html
|
|
129
|
-
|
|
130
|
-
## Resources (5)
|
|
131
|
-
|
|
132
|
-
- `nervous-system://framework` - The complete framework
|
|
133
|
-
- `nervous-system://quick-start` - Quick start guide
|
|
134
|
-
- `nervous-system://rules` - The 7 core rules
|
|
135
|
-
- `nervous-system://templates` - Templates for handoffs, worklogs, preflight
|
|
136
|
-
- `nervous-system://drift-audit` - Configuration drift detection
|
|
137
|
-
|
|
138
|
-
## Production Stats
|
|
139
|
-
|
|
140
|
-
From the live Palyan Family AI System deployment (Feb 28 - Mar 5, 2026):
|
|
141
|
-
|
|
142
|
-
- **58+** violations caught
|
|
143
|
-
- **29** edits blocked by preflight
|
|
144
|
-
- **13** unique files protected
|
|
145
|
-
- **0** rules bypassed
|
|
146
|
-
- **28** processes monitored
|
|
147
|
-
- **7** days continuous operation
|
|
148
|
-
|
|
149
|
-
## Live Demo
|
|
150
|
-
|
|
151
|
-
Try it yourself (no login required):
|
|
152
|
-
|
|
153
|
-
- **[Interactive Demo](https://api.100levelup.com/family/arthur.html?guest=1)** - Talk to a governed LLM and try to break the rules
|
|
154
|
-
- **[Audit Dashboard](https://api.100levelup.com/family/audit.html)** - See real violation history with timeline
|
|
155
|
-
- **[System Status](https://api.100levelup.com/family/status.html)** - Live health checks
|
|
156
|
-
- **[API Documentation](https://api.100levelup.com/family/api-docs.html)** - Full tool and resource reference
|
|
157
|
-
- **[Case Study](https://api.100levelup.com/family/case-study.html)** - Production deployment data
|
|
158
|
-
- **[Plain English Rules](https://api.100levelup.com/family/rules-plain.html)** - For non-technical stakeholders
|
|
159
|
-
- **[Incident Response](https://api.100levelup.com/family/incident-response.html)** - Detection, containment, resolution
|
|
160
|
-
- **[EU AI Act Compliance](https://api.100levelup.com/family/eu-ai-act.html)** - Practical EU AI Act compliance tools
|
|
161
|
-
|
|
162
|
-
## Philosophy
|
|
163
|
-
|
|
164
|
-
> "LLMs can't reliably self-enforce promises. Guardrails work via preflight.sh, violation logs, and catching drift. Build enforcement systems, don't make promises."
|
|
165
|
-
|
|
166
|
-
If a guardrail can be violated by the thing it guards, it is not a guardrail. It is a suggestion.
|
|
167
|
-
|
|
168
|
-
Every rule in the Nervous System is enforced by an external mechanism: a shell script, a timer, a separate monitoring process. The LLM cannot override, circumvent, or ignore them.
|
|
169
|
-
|
|
170
|
-
## License
|
|
171
|
-
|
|
172
|
-
MIT
|
package/README.md.bak.1772792496
DELETED
|
@@ -1,172 +0,0 @@
|
|
|
1
|
-
# The Nervous System
|
|
2
|
-
|
|
3
|
-
**LLM Behavioral Enforcement Framework**
|
|
4
|
-
|
|
5
|
-
7 mechanically enforced rules that prevent the most common failure modes when LLMs have access to real infrastructure: context loss, silent failures, file damage, goal drift, and overreach.
|
|
6
|
-
|
|
7
|
-
Built by [Arthur Palyan](https://www.levelsofself.com) at Palyan Family AI System. 15 tools including configuration drift detection and emergency kill switch. Battle-tested on an 11-member AI family running 28 processes 24/7 on a single VPS. 58+ violations logged, 0 bypassed.
|
|
8
|
-
|
|
9
|
-
## The Problem
|
|
10
|
-
|
|
11
|
-
When you give an LLM access to your file system, bash, and production infrastructure, it will eventually:
|
|
12
|
-
|
|
13
|
-
- Edit a file it shouldn't touch
|
|
14
|
-
- Lose context between sessions and start over
|
|
15
|
-
- Drift from the original objective during long tasks
|
|
16
|
-
- Fail silently when a session times out
|
|
17
|
-
- Make logic changes without asking
|
|
18
|
-
- Disappear into debug loops
|
|
19
|
-
|
|
20
|
-
The Nervous System solves all of these with rules enforced by external mechanisms the LLM cannot override.
|
|
21
|
-
|
|
22
|
-
## Install
|
|
23
|
-
|
|
24
|
-
### Claude Desktop
|
|
25
|
-
|
|
26
|
-
Add to your `claude_desktop_config.json`:
|
|
27
|
-
|
|
28
|
-
```json
|
|
29
|
-
{
|
|
30
|
-
"mcpServers": {
|
|
31
|
-
"nervous-system": {
|
|
32
|
-
"command": "npx",
|
|
33
|
-
"args": ["-y", "mcp-nervous-system"]
|
|
34
|
-
}
|
|
35
|
-
}
|
|
36
|
-
}
|
|
37
|
-
```
|
|
38
|
-
|
|
39
|
-
### Claude Code
|
|
40
|
-
|
|
41
|
-
```bash
|
|
42
|
-
claude mcp add nervous-system npx mcp-nervous-system
|
|
43
|
-
```
|
|
44
|
-
|
|
45
|
-
### Direct
|
|
46
|
-
|
|
47
|
-
```bash
|
|
48
|
-
npx mcp-nervous-system
|
|
49
|
-
```
|
|
50
|
-
|
|
51
|
-
Server starts on port 3475 with SSE, HTTP, and health endpoints.
|
|
52
|
-
|
|
53
|
-
### Hosted (No Install)
|
|
54
|
-
|
|
55
|
-
The server is live and ready to use:
|
|
56
|
-
|
|
57
|
-
```
|
|
58
|
-
URL: https://api.100levelup.com/mcp-ns/
|
|
59
|
-
Protocol: MCP 2024-11-05 (Streamable HTTP + SSE)
|
|
60
|
-
Authentication: None required
|
|
61
|
-
```
|
|
62
|
-
|
|
63
|
-
## NEW in v1.5.0
|
|
64
|
-
|
|
65
|
-
**drift_audit** (free tier)
|
|
66
|
-
Configuration drift detection across 5 scopes: roles, versions, files, processes, and website. Scans source-of-truth files (family-roles.json, package.json, UNTOUCHABLE_FILES.txt) against all downstream references - HTML pages, JSON configs, markdown docs, and running PM2 processes. Change one file, drift_audit tells you everywhere else that needs updating. The closed loop that keeps your entire system consistent.
|
|
67
|
-
|
|
68
|
-
**Positioning: Auto mode decides what Claude CAN do. The Nervous System governs HOW it behaves while doing it.**
|
|
69
|
-
|
|
70
|
-
## The 7 Rules
|
|
71
|
-
|
|
72
|
-
| # | Rule | What It Prevents |
|
|
73
|
-
|---|------|-----------------|
|
|
74
|
-
| 1 | **Dispatch Don't Do** | Debug loops, rabbit holes. Tasks > 2 messages get dispatched. |
|
|
75
|
-
| 2 | **Untouchable** | File damage. Protected files mechanically blocked from editing. |
|
|
76
|
-
| 3 | **Write Progress** | Silent failures. Progress noted before each action. |
|
|
77
|
-
| 4 | **Step Back Every 4** | Goal drift. Forced reflection every 4 messages. |
|
|
78
|
-
| 5 | **Delegate and Return** | Invisible work. Background tasks reported immediately. |
|
|
79
|
-
| 6 | **Ask Before Touching** | Unauthorized changes. Logic changes need human approval. |
|
|
80
|
-
| 7 | **Hand Off** | Context loss. Written handoffs every 3-4 exchanges. |
|
|
81
|
-
|
|
82
|
-
## MCP Tools (12)
|
|
83
|
-
|
|
84
|
-
| Tool | Description |
|
|
85
|
-
|------|------------|
|
|
86
|
-
| `get_framework` | Complete framework: all rules, permission protocol, enforcement patterns |
|
|
87
|
-
| `guardrail_rules` | The 7 core rules with triggers, enforcement, and failure modes |
|
|
88
|
-
| `preflight_check` | File protection system: shell script blocks edits to protected files |
|
|
89
|
-
| `session_handoff` | Context preservation: templates for handoff documents |
|
|
90
|
-
| `worklog` | Progress documentation pattern |
|
|
91
|
-
| `violation_logging` | Audit trail: timestamp, type, context for every violation |
|
|
92
|
-
| `step_back_check` | Forced reflection system |
|
|
93
|
-
| `get_nervous_system_info` | System overview and operational stats |
|
|
94
|
-
| `emergency_kill_switch` | Emergency shutdown of all PM2 processes. Requires kill switch secret. Logs to tamper-evident audit trail |
|
|
95
|
-
| `verify_audit_chain` | Walks the SHA-256 hash-chained audit log and verifies every entry. Returns chain integrity status |
|
|
96
|
-
| `dispatch_to_llm` | Spawns a background LLM agent to handle a task. Checks RAM, enforces max 2 concurrent dispatches |
|
|
97
|
-
| `drift_audit` | Configuration drift detection across roles, versions, files, processes, and website. Finds stale values everywhere. |
|
|
98
|
-
|
|
99
|
-
## Kill Switch
|
|
100
|
-
|
|
101
|
-
The `emergency_kill_switch` tool provides an emergency shutdown capability. Send a POST request to `/kill` with the kill switch secret to immediately stop all PM2 processes. Every activation is logged to the tamper-evident audit trail with SHA-256 hash chaining, so kill switch events cannot be hidden or altered after the fact.
|
|
102
|
-
|
|
103
|
-
- Requires authentication (kill switch secret)
|
|
104
|
-
- Logs to hash-chained audit trail
|
|
105
|
-
- Returns confirmation with affected process count
|
|
106
|
-
|
|
107
|
-
## Tamper-Evident Audit Trail
|
|
108
|
-
|
|
109
|
-
Every guardrail violation, kill switch activation, and dispatch event is recorded in a SHA-256 hash-chained audit log. Each entry includes the hash of the previous entry, making it cryptographically impossible to alter or delete past records without breaking the chain.
|
|
110
|
-
|
|
111
|
-
- Use `verify_audit_chain` to walk the entire chain and verify integrity
|
|
112
|
-
- Returns: valid/invalid status, entry count, and break point if tampered
|
|
113
|
-
- 58+ violations logged, 0 bypassed, 0 chain breaks
|
|
114
|
-
|
|
115
|
-
## Dispatch to LLM
|
|
116
|
-
|
|
117
|
-
The `dispatch_to_llm` tool enables a brain + agents architecture. Instead of one LLM session doing everything, complex tasks get dispatched to background agents that run independently under the same 7 rules.
|
|
118
|
-
|
|
119
|
-
- Checks available RAM (requires 500MB+)
|
|
120
|
-
- Enforces max 2 concurrent dispatches
|
|
121
|
-
- Returns PID and log file path for monitoring
|
|
122
|
-
- Every dispatched agent runs under the same nervous system guardrails
|
|
123
|
-
|
|
124
|
-
## EU AI Act Compliance
|
|
125
|
-
|
|
126
|
-
The Nervous System provides practical compliance tools for the EU AI Act. See the full compliance page at:
|
|
127
|
-
|
|
128
|
-
https://api.100levelup.com/family/eu-ai-act.html
|
|
129
|
-
|
|
130
|
-
## Resources (5)
|
|
131
|
-
|
|
132
|
-
- `nervous-system://framework` - The complete framework
|
|
133
|
-
- `nervous-system://quick-start` - Quick start guide
|
|
134
|
-
- `nervous-system://rules` - The 7 core rules
|
|
135
|
-
- `nervous-system://templates` - Templates for handoffs, worklogs, preflight
|
|
136
|
-
- `nervous-system://drift-audit` - Configuration drift detection
|
|
137
|
-
|
|
138
|
-
## Production Stats
|
|
139
|
-
|
|
140
|
-
From the live Palyan Family AI System deployment (Feb 28 - Mar 5, 2026):
|
|
141
|
-
|
|
142
|
-
- **58+** violations caught
|
|
143
|
-
- **29** edits blocked by preflight
|
|
144
|
-
- **13** unique files protected
|
|
145
|
-
- **0** rules bypassed
|
|
146
|
-
- **28** processes monitored
|
|
147
|
-
- **7** days continuous operation
|
|
148
|
-
|
|
149
|
-
## Live Demo
|
|
150
|
-
|
|
151
|
-
Try it yourself (no login required):
|
|
152
|
-
|
|
153
|
-
- **[Interactive Demo](https://api.100levelup.com/family/arthur.html?guest=1)** - Talk to a governed LLM and try to break the rules
|
|
154
|
-
- **[Audit Dashboard](https://api.100levelup.com/family/audit.html)** - See real violation history with timeline
|
|
155
|
-
- **[System Status](https://api.100levelup.com/family/status.html)** - Live health checks
|
|
156
|
-
- **[API Documentation](https://api.100levelup.com/family/api-docs.html)** - Full tool and resource reference
|
|
157
|
-
- **[Case Study](https://api.100levelup.com/family/case-study.html)** - Production deployment data
|
|
158
|
-
- **[Plain English Rules](https://api.100levelup.com/family/rules-plain.html)** - For non-technical stakeholders
|
|
159
|
-
- **[Incident Response](https://api.100levelup.com/family/incident-response.html)** - Detection, containment, resolution
|
|
160
|
-
- **[EU AI Act Compliance](https://api.100levelup.com/family/eu-ai-act.html)** - Practical EU AI Act compliance tools
|
|
161
|
-
|
|
162
|
-
## Philosophy
|
|
163
|
-
|
|
164
|
-
> "LLMs can't reliably self-enforce promises. Guardrails work via preflight.sh, violation logs, and catching drift. Build enforcement systems, don't make promises."
|
|
165
|
-
|
|
166
|
-
If a guardrail can be violated by the thing it guards, it is not a guardrail. It is a suggestion.
|
|
167
|
-
|
|
168
|
-
Every rule in the Nervous System is enforced by an external mechanism: a shell script, a timer, a separate monitoring process. The LLM cannot override, circumvent, or ignore them.
|
|
169
|
-
|
|
170
|
-
## License
|
|
171
|
-
|
|
172
|
-
MIT
|
package/README.md.bak.1772792812
DELETED
|
@@ -1,172 +0,0 @@
|
|
|
1
|
-
# The Nervous System
|
|
2
|
-
|
|
3
|
-
**LLM Behavioral Enforcement Framework**
|
|
4
|
-
|
|
5
|
-
7 mechanically enforced rules that prevent the most common failure modes when LLMs have access to real infrastructure: context loss, silent failures, file damage, goal drift, and overreach.
|
|
6
|
-
|
|
7
|
-
Built by [Arthur Palyan](https://www.levelsofself.com) at Palyan Family AI System. 15 tools including configuration drift detection and emergency kill switch. Battle-tested on an 11-member AI family running 30 processes 24/7 on a single VPS. 58+ violations logged, 0 bypassed.
|
|
8
|
-
|
|
9
|
-
## The Problem
|
|
10
|
-
|
|
11
|
-
When you give an LLM access to your file system, bash, and production infrastructure, it will eventually:
|
|
12
|
-
|
|
13
|
-
- Edit a file it shouldn't touch
|
|
14
|
-
- Lose context between sessions and start over
|
|
15
|
-
- Drift from the original objective during long tasks
|
|
16
|
-
- Fail silently when a session times out
|
|
17
|
-
- Make logic changes without asking
|
|
18
|
-
- Disappear into debug loops
|
|
19
|
-
|
|
20
|
-
The Nervous System solves all of these with rules enforced by external mechanisms the LLM cannot override.
|
|
21
|
-
|
|
22
|
-
## Install
|
|
23
|
-
|
|
24
|
-
### Claude Desktop
|
|
25
|
-
|
|
26
|
-
Add to your `claude_desktop_config.json`:
|
|
27
|
-
|
|
28
|
-
```json
|
|
29
|
-
{
|
|
30
|
-
"mcpServers": {
|
|
31
|
-
"nervous-system": {
|
|
32
|
-
"command": "npx",
|
|
33
|
-
"args": ["-y", "mcp-nervous-system"]
|
|
34
|
-
}
|
|
35
|
-
}
|
|
36
|
-
}
|
|
37
|
-
```
|
|
38
|
-
|
|
39
|
-
### Claude Code
|
|
40
|
-
|
|
41
|
-
```bash
|
|
42
|
-
claude mcp add nervous-system npx mcp-nervous-system
|
|
43
|
-
```
|
|
44
|
-
|
|
45
|
-
### Direct
|
|
46
|
-
|
|
47
|
-
```bash
|
|
48
|
-
npx mcp-nervous-system
|
|
49
|
-
```
|
|
50
|
-
|
|
51
|
-
Server starts on port 3475 with SSE, HTTP, and health endpoints.
|
|
52
|
-
|
|
53
|
-
### Hosted (No Install)
|
|
54
|
-
|
|
55
|
-
The server is live and ready to use:
|
|
56
|
-
|
|
57
|
-
```
|
|
58
|
-
URL: https://api.100levelup.com/mcp-ns/
|
|
59
|
-
Protocol: MCP 2024-11-05 (Streamable HTTP + SSE)
|
|
60
|
-
Authentication: None required
|
|
61
|
-
```
|
|
62
|
-
|
|
63
|
-
## NEW in v1.5.0
|
|
64
|
-
|
|
65
|
-
**drift_audit** (free tier)
|
|
66
|
-
Configuration drift detection across 5 scopes: roles, versions, files, processes, and website. Scans source-of-truth files (family-roles.json, package.json, UNTOUCHABLE_FILES.txt) against all downstream references - HTML pages, JSON configs, markdown docs, and running PM2 processes. Change one file, drift_audit tells you everywhere else that needs updating. The closed loop that keeps your entire system consistent.
|
|
67
|
-
|
|
68
|
-
**Positioning: Auto mode decides what Claude CAN do. The Nervous System governs HOW it behaves while doing it.**
|
|
69
|
-
|
|
70
|
-
## The 7 Rules
|
|
71
|
-
|
|
72
|
-
| # | Rule | What It Prevents |
|
|
73
|
-
|---|------|-----------------|
|
|
74
|
-
| 1 | **Dispatch Don't Do** | Debug loops, rabbit holes. Tasks > 2 messages get dispatched. |
|
|
75
|
-
| 2 | **Untouchable** | File damage. Protected files mechanically blocked from editing. |
|
|
76
|
-
| 3 | **Write Progress** | Silent failures. Progress noted before each action. |
|
|
77
|
-
| 4 | **Step Back Every 4** | Goal drift. Forced reflection every 4 messages. |
|
|
78
|
-
| 5 | **Delegate and Return** | Invisible work. Background tasks reported immediately. |
|
|
79
|
-
| 6 | **Ask Before Touching** | Unauthorized changes. Logic changes need human approval. |
|
|
80
|
-
| 7 | **Hand Off** | Context loss. Written handoffs every 3-4 exchanges. |
|
|
81
|
-
|
|
82
|
-
## MCP Tools (12)
|
|
83
|
-
|
|
84
|
-
| Tool | Description |
|
|
85
|
-
|------|------------|
|
|
86
|
-
| `get_framework` | Complete framework: all rules, permission protocol, enforcement patterns |
|
|
87
|
-
| `guardrail_rules` | The 7 core rules with triggers, enforcement, and failure modes |
|
|
88
|
-
| `preflight_check` | File protection system: shell script blocks edits to protected files |
|
|
89
|
-
| `session_handoff` | Context preservation: templates for handoff documents |
|
|
90
|
-
| `worklog` | Progress documentation pattern |
|
|
91
|
-
| `violation_logging` | Audit trail: timestamp, type, context for every violation |
|
|
92
|
-
| `step_back_check` | Forced reflection system |
|
|
93
|
-
| `get_nervous_system_info` | System overview and operational stats |
|
|
94
|
-
| `emergency_kill_switch` | Emergency shutdown of all PM2 processes. Requires kill switch secret. Logs to tamper-evident audit trail |
|
|
95
|
-
| `verify_audit_chain` | Walks the SHA-256 hash-chained audit log and verifies every entry. Returns chain integrity status |
|
|
96
|
-
| `dispatch_to_llm` | Spawns a background LLM agent to handle a task. Checks RAM, enforces max 2 concurrent dispatches |
|
|
97
|
-
| `drift_audit` | Configuration drift detection across roles, versions, files, processes, and website. Finds stale values everywhere. |
|
|
98
|
-
|
|
99
|
-
## Kill Switch
|
|
100
|
-
|
|
101
|
-
The `emergency_kill_switch` tool provides an emergency shutdown capability. Send a POST request to `/kill` with the kill switch secret to immediately stop all PM2 processes. Every activation is logged to the tamper-evident audit trail with SHA-256 hash chaining, so kill switch events cannot be hidden or altered after the fact.
|
|
102
|
-
|
|
103
|
-
- Requires authentication (kill switch secret)
|
|
104
|
-
- Logs to hash-chained audit trail
|
|
105
|
-
- Returns confirmation with affected process count
|
|
106
|
-
|
|
107
|
-
## Tamper-Evident Audit Trail
|
|
108
|
-
|
|
109
|
-
Every guardrail violation, kill switch activation, and dispatch event is recorded in a SHA-256 hash-chained audit log. Each entry includes the hash of the previous entry, making it cryptographically impossible to alter or delete past records without breaking the chain.
|
|
110
|
-
|
|
111
|
-
- Use `verify_audit_chain` to walk the entire chain and verify integrity
|
|
112
|
-
- Returns: valid/invalid status, entry count, and break point if tampered
|
|
113
|
-
- 58+ violations logged, 0 bypassed, 0 chain breaks
|
|
114
|
-
|
|
115
|
-
## Dispatch to LLM
|
|
116
|
-
|
|
117
|
-
The `dispatch_to_llm` tool enables a brain + agents architecture. Instead of one LLM session doing everything, complex tasks get dispatched to background agents that run independently under the same 7 rules.
|
|
118
|
-
|
|
119
|
-
- Checks available RAM (requires 500MB+)
|
|
120
|
-
- Enforces max 2 concurrent dispatches
|
|
121
|
-
- Returns PID and log file path for monitoring
|
|
122
|
-
- Every dispatched agent runs under the same nervous system guardrails
|
|
123
|
-
|
|
124
|
-
## EU AI Act Compliance
|
|
125
|
-
|
|
126
|
-
The Nervous System provides practical compliance tools for the EU AI Act. See the full compliance page at:
|
|
127
|
-
|
|
128
|
-
https://api.100levelup.com/family/eu-ai-act.html
|
|
129
|
-
|
|
130
|
-
## Resources (5)
|
|
131
|
-
|
|
132
|
-
- `nervous-system://framework` - The complete framework
|
|
133
|
-
- `nervous-system://quick-start` - Quick start guide
|
|
134
|
-
- `nervous-system://rules` - The 7 core rules
|
|
135
|
-
- `nervous-system://templates` - Templates for handoffs, worklogs, preflight
|
|
136
|
-
- `nervous-system://drift-audit` - Configuration drift detection
|
|
137
|
-
|
|
138
|
-
## Production Stats
|
|
139
|
-
|
|
140
|
-
From the live Palyan Family AI System deployment (Feb 28 - Mar 5, 2026):
|
|
141
|
-
|
|
142
|
-
- **58+** violations caught
|
|
143
|
-
- **29** edits blocked by preflight
|
|
144
|
-
- **13** unique files protected
|
|
145
|
-
- **0** rules bypassed
|
|
146
|
-
- **28** processes monitored
|
|
147
|
-
- **7** days continuous operation
|
|
148
|
-
|
|
149
|
-
## Live Demo
|
|
150
|
-
|
|
151
|
-
Try it yourself (no login required):
|
|
152
|
-
|
|
153
|
-
- **[Interactive Demo](https://api.100levelup.com/family/arthur.html?guest=1)** - Talk to a governed LLM and try to break the rules
|
|
154
|
-
- **[Audit Dashboard](https://api.100levelup.com/family/audit.html)** - See real violation history with timeline
|
|
155
|
-
- **[System Status](https://api.100levelup.com/family/status.html)** - Live health checks
|
|
156
|
-
- **[API Documentation](https://api.100levelup.com/family/api-docs.html)** - Full tool and resource reference
|
|
157
|
-
- **[Case Study](https://api.100levelup.com/family/case-study.html)** - Production deployment data
|
|
158
|
-
- **[Plain English Rules](https://api.100levelup.com/family/rules-plain.html)** - For non-technical stakeholders
|
|
159
|
-
- **[Incident Response](https://api.100levelup.com/family/incident-response.html)** - Detection, containment, resolution
|
|
160
|
-
- **[EU AI Act Compliance](https://api.100levelup.com/family/eu-ai-act.html)** - Practical EU AI Act compliance tools
|
|
161
|
-
|
|
162
|
-
## Philosophy
|
|
163
|
-
|
|
164
|
-
> "LLMs can't reliably self-enforce promises. Guardrails work via preflight.sh, violation logs, and catching drift. Build enforcement systems, don't make promises."
|
|
165
|
-
|
|
166
|
-
If a guardrail can be violated by the thing it guards, it is not a guardrail. It is a suggestion.
|
|
167
|
-
|
|
168
|
-
Every rule in the Nervous System is enforced by an external mechanism: a shell script, a timer, a separate monitoring process. The LLM cannot override, circumvent, or ignore them.
|
|
169
|
-
|
|
170
|
-
## License
|
|
171
|
-
|
|
172
|
-
MIT
|