Repository navigation
First public release of SentryFlow, a permission-aware execution layer for AI agents, built for the Amazon Build, Ship, Shape Developer Hackathon 2026 (Alexa+ track).
Highlights
- Self-hosted MCP server: protocol 2025-11-25 over Streamable HTTP, official TypeScript SDK, 17 tools
- Deterministic policy engine: ALLOW / REQUIRE_APPROVAL / DENY, first-match, default-deny, versioned by content hash
- Owner approvals bound to a SHA-256 of the exact arguments: single-use, expiring, invalidated by any edit
- Re-validation before every execution, exactly-once semantics, dependency-aware plans
- Local AI planning with Ollama (
qwen2.5:3b) and a transparent rule-based fallback; no paid services - Hash-chained audit log and per-request receipts
- Web client that is a genuine MCP client and simulates the Alexa+ experience
- 110 automated tests, mostly adversarial, plus a live MCP smoke test
Assets
sentryflow-demo.mp4: 2:53 narrated demo (1080p, burned-in captions)sentryflow-demo.srt: captionsthumbnail.png: project thumbnail
Quick start
npm install
npm start # http://127.0.0.1:8787All devices are simulated. This release is not onboarded to Alexa+; see docs/ASSUMPTIONS.md.