Skip to content

Zeus v1.0.0-alpha.1 — governance control plane

Choose a tag to compare

View all tags
@Merchantlee99 Merchantlee99 released this 11 Jun 10:26
v1.0.0-alpha.1
3798a05

Zeus is re-founded as a local-first governance control plane for AI agents: the host agent (Claude Code live today; hermes-agent and OpenClaw adapters contract-frozen) keeps doing the work, and Zeus decides, records, approves, and blocks at four gates. Versioning resets to v1.0.0-alpha.N — from here, a major version is only earned when a pinned real host passes the conformance suite at ≥95% with a 7-day zero-bypass soak measured outside Zeus.

Highlights

  • Decision API v1 — decide() / record(): decision-only judgement, a receipt for every decision (including DENY), outcomes bound back by caused_by in a hash-chained ledger.
  • The four gates — Claude Code hooks (live), LLM proxy /v1 (budget 429, streamed tool_call interception, wallet, secret-hygiene modes count|redact|block|ask), MCP gateway (quarantine, rug-pull re-quarantine, injection taint), zeusd Decision API (HMAC pairing, hermes blocking hook, OpenClaw exec approval relay), egress ring (boundary-before-policy, key-only-at-egress, srt profile emission).
  • Final-action receipt contract — what the host is told equals what the ledger says; boundary violations and explainability are decided inside decide(), pinned by a receipt-coherence conformance suite; approvals TTL fail-closed; once-grants burn durably at every gate.
  • Governance UX — plain-language consequence cards (KO), graded approvals (once / session / narrower), policy packs + NL rules (governed changes), weekly digest with a dead-man switch, novelty escalation, loop governance.
  • Cognition organs, default-OFF — raw-free memory candidates (poisoned ones can never be promoted), skill quarantine with hash pinning.
  • Korean docs — README.ko.md, CONNECTING.ko.md, docs/ko.md reading guide.

Evidence (deterministic local, not production proof)

  • 1881 tests passed, 88 frozen conformance scenarios, ruff clean
  • Byte-level proof that raw secrets never reach candidate storage

Honest boundary

Conformance is synthetic (simulated hosts). No claim of: pinned real-host parity (gates v2/v3), OS-level egress enforcement (srt wrapper is the next milestone), hosted SaaS, browser automation, or third-party validation. /v1 binds loopback by default; non-loopback requires issued tokens. Pre-refoundation tags (v0.x–v6.x, including the legacy v1.0.0/rc line) are a different product line kept as history.

See CHANGELOG.md for the full entry and CONNECTING.md to plug a host in.

Assets 2
Loading