Skip to content

2026-06-30 Make.com Sovereign Runtime

Choose a tag to compare

View all tags
@CyberStrategy1 CyberStrategy1 released this 30 Jun 18:43
· 241 commits to main since this release
2026-06-30_Make-Sovereign-Rruntime
4b8491d
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

🔐 Announcing: Make.com Sovereign Runtime — AI SAFE2 v3.0

The Only Package That Gates Every Module Boundary on the Make Canvas

Cyber Strategy Institute | June 2026

examples/make-sovereign-runtime is live — 21/21 tests passing, stdlib-only,
and the only AI SAFE2 enforcement package purpose-built for Make's visual
module-chain architecture.

▶ View the package →

Why Make Needed Its Own Architecture

Make is not a Python runtime or a CLI. It's a visual canvas where modules chain automatically — webhook output becomes AI Agent input becomes HTTP connector output. An injection in a webhook field travels the entire chain with no natural enforcement boundary.

The scan you need isn't at one point. It's at every module boundary.

MK-WHK → recursive JSON scanner (flat scanners miss nested injection)
MK-SCEN → module output gate (injection travels silently downstream)
MK-HTTP → domain allowlist + SSRF + destructive method context gate
MK-INST → agent instructions (one poisoned save = all future runs)
MK-KNOW → RAG injection + hidden Unicode invisible in Make UI
MK-MCP → scope gate (organizations:write = account takeover)
MK-DS → Data Store write gate (cross-run contamination)

The Recursive Scanner (MK-WHK)

The single most important technical decision in this package:

# Flat scanner passes this. This package blocks it.
payload = {
    "customer": {
        "profile": {
            "notes": "Ignore previous instructions..."
        }
    }
}
guard.scan_webhook_payload(payload, "whk-orders")
# → BLOCKED: injection at .customer.profile.notes

Make webhooks accept arbitrary JSON structures from any external system. The attacker controls the structure. A flat json.dumps() + regex scan misses anything beyond one level of nesting. This package recurses every level.

21/21 + Live Scenario Simulation

PYTHONPATH=enforcement python3 smoke_test.py
# TOTAL: 21/21 -- SOVEREIGN BASELINE VERIFIED

PYTHONPATH=enforcement python3 examples/make_webhook_scenario.py
# === Test 1: Clean Order ===
# [OK] Webhook payload validated
# [OK] AI Agent output validated
# [OK] Slack HTTP call validated
# Love Score: 100.0 | Band: GREEN
#
# === Test 2: Injected Payload ===
# [BLOCKED] [AI SAFE2 P1.T1.2] Webhook payload BLOCKED — injection detected
#
# === Test 3: Restricted Operation ===
# [BLOCKED] [AI SAFE2 P1.T1.2] Webhook payload BLOCKED — 'delete scenario'

AI SAFE2 Controls Enforced

P1.T1.2 P1.T1.10 P1.T1.4_ADV P1.T2.5 S1.3 S1.5 S1.6
P2.T3.1 A2.5 P3.T5.5 F3.2 P4.T7.1 M4.5 E5.1 CP.4

All verified against live AI SAFE2 v3.0 framework. Zero fabricated.

Complete Series

Runtime Status
make-sovereign-runtime ✅ This release
xai-grok-sovereign-runtime ✅ Released
lovable-sovereign-runtime ✅ Released
manus-sovereign-runtime ✅ Released
cursor-sovereign-runtime ✅ Released

All five share one NEXUS kernel. Pass a single AISAFE2Engine across all five for a unified Love Score and SHA-256 audit chain across your entire agentic stack.

Built by The Architect — Cyber Strategy Institute
"Engineered Certainty for the Agentic Age."

Assets 2
Loading