Continuity Gateway

io.github.zerohourzulu由 GitHub 账号 zerohourzulu 发布v0.3.0-preview.11更新于 Oct 24, 2026

Local MCP gateway for approved jobs, current agent permissions and durable retry inspection.

已验证STDIO仅桌面开发者工具安全与监控

概览

AI 生成的概览

一个本地 MCP 网关,记录代理替换过程中的角色、已授予权限和未完成职责,并让助手查看已批准任务与重试状态。

可以做什么
通过注册表条目所述的网关工具查看已批准任务、当前代理权限和持久化重试状态。记录替换代理占据的角色、被明确授予的权力,以及交接后仍然存续的未完成职责。独立于继承的职责,检查继任者对某项操作的权限是被允许还是被拒绝。用教程脚本运行内置的录制案例或生成新的合成案例,并查看产生的证据。通过随附的 JavaScript SDK(含 TypeScript 声明)嵌入底层引擎。
适用场景
适用于代理在任务中途被替换、需要本地记录继任者可以做什么以及还有哪些工作未完成的情况。也适合在正式采用前评估或将权限校验层集成到框架或策略引擎中。
运行要求
作为本地 stdio 进程在用户机器上运行(仅桌面端,不支持网页执行)。教程需要 macOS 或 Linux 上的 Node 22.18+(22.x)、24.x 或 26.x;安装脚本会在禁用脚本的情况下下载锁定依赖。未声明需要账户或 API 密钥。
安装前请注意
项目自称是本地参考软件,而非恶意代理沙箱、生产凭据系统或自主防御工具;真实集成必须让每个有后果的操作都经过受保护执行器。安装过程会下载依赖,教程仅使用合成数据和公开测试密钥。README 指出 npm 和注册表可能仍选择比源码预览更早的已发布包,因此依赖前应核对确切的版本组合。

安装

在 SourceWeft 中

  1. 打开 控制台中的 Continuity Gateway,将其添加到工作区。
  2. 为需要使用其工具的对话启用该服务。

Desktop only,通过 STDIO。 STDIO 服务会启动本地进程,因此需要 SourceWeft 桌面宿主。

其他 MCP 客户端

参照 仓库 中的启动说明。

README

Message package preview — 10 October 2026: Core11, remote6, gateway11 and evidence12 add the optional saved-record explanation command. See the current release guide. Existing API/policy/proof behavior stays unchanged; older npm archives remain available.

Source preview.13: MCP client/server/core updated to 2.2.0 for GHSA-6qxp-vccf-f47h. New MCP archives are source-prepared; npm and Registry still select the earlier published tuple.

Previous source preview.12.1: Plain-language messages, completed historical ZK experiments, and retained-receipt reader source. The installable packages now include the optional saved-output explanation command; use the exact tuple in the release guide.

Current developer preview: Exact versions and installation.

Follow an investigation: Follow one protected case through interruption, replacement, a signed completion, new evidence and a persistent challenge. Run the walkthrough.

Continue an existing case: Same case, longer history, preserved permissions and unfinished duties. Start with supported profiles, migration and recovery, or the protected evidence example.

Core 0.3 preview: Build a fresh case, connect approved MCP tools, or run the public tests. The original 0.2.2 evaluation releases remain available.

[it is 2 a.m. do you know what your agent is doing?] [Security. Control. Inheritance. Durable survival of powers and responsibilities. Record durably, locally or on chain. This is your agent’s brain on Continuity.]

Continuity — agents change; responsibility remains

Explore the interactive demo → · Start here · Developer guide · Security and limits

Try your own choices in the playground → No installation or account needed.

Developer preview · Apache 2.0. Release status.

A process supervisor can start Agent B. Continuity records which role B occupies, which powers it has, what happened before, and which unfinished duties survive the change. A replacement receives its explicitly granted powers; an unfinished duty does not silently grant more authority.

The original tutorial follows a security investigation interrupted by an agent replacement. The old request is refused, the investigation stays OPEN, and the successor’s review permission is checked independently.

Choose your path

You want to…Start hereWhat you will learn
Understand the idea without installing anythingThe story and answer keyWhy an unfinished duty and permission are separate.
Run and inspect a replacementTutorial, then operator commandsWhat was refused, who holds the duty and what B may do.
Evaluate or integrate the codeCore 0.3 quickstartCreate your own permissions, try a protected tool, then connect a framework or policy engine.

Run the tutorial

Use Node 22.18+ (22.x), 24.x or 26.x on macOS or Linux. Prefer the latest patch of your chosen release. No global pnpm or Python is needed for this tutorial. Full quickstart, including archive extraction.

Get the public source; no GitHub account is needed:

sh
git clone https://github.com/zerohourzulu/continuity.gitcd continuity

See the result first, without installing dependencies:

sh
node examples/recorded.mjs

Expect ALLOW for reviewing the investigation and DENY for collecting another packet. This inspects a bundled recorded case; it does not execute a new action.

Generate your own evidence:

sh
node tools/setup.mjsnode tutorial/start.mjs

Expect PASS — duty remains OPEN; B has no collection power, then VERIFIED. Setup downloads locked dependencies with scripts disabled. The tutorial then runs locally using synthetic data and public test keys. It prints your new case name and exact follow-up commands. Rerunning creates another case and preserves earlier evidence.

Change one permission:

sh
node tutorial/start.mjs --deny-review

B still inherits the duty, but its review permission becomes DENY. Expected output and explanation · Setup checks and recovery.

Choose your holder of record.

Keep records locally, or choose a chain-backed deployment to make selected history publicly verifiable. Cryptographic commitments can let authorized reviewers check private records without publishing their contents. This tutorial runs locally; each deployment has its own privacy, availability and finality requirements.

Explore and build

Your next stepWhere to go
See the idea and recorded comparisonInteractive demo
Inspect your new run and optional recorded Linux evidenceOperator guide
Integrate an authority checkDeveloper guide · Executable reader example
Try optional native enforcement mechanicsDisposable Linux lab
Review source provenance and validationValidation · Presentation checks · Provenance
Extend the presentationWebsite maintenance

Presentation maintainers can find the separate owner-private edition in website maintenance. The public walkthrough needs no account.

Contribute and explore

Read the short development history from Core 0.1 to the current reference implementation. Contributions and public RFCs are welcome; an RFC is useful for changes to protocol behavior or security boundaries.

Scope

Core 0.2.2 is local reference software. It is not a hostile-agent sandbox, production credential system or autonomous cyber defender. The website selects recorded results; the downloaded tutorial executes Core. Real integrations must mediate every consequential operation through a protected executor. Security boundaries.

The source, tutorial, tests, reader and website are included here and in the complete evaluation download. Earlier editions remain available as historical releases; use evaluation.6 for the commands above. Package overview · Presentation provenance.

Release status and licensing · Apache 2.0 license · Third-party notices

Embed the engine

Try the standalone developer package: install the supplied JavaScript SDK tarball in a separate application, create one authorized synthetic packet, and inspect why refused requests create none. Includes TypeScript declarations and an offline consumer check. This is an evaluation interface around unchanged Core0.2.2.

Shared Core integration preview

The shared-package preview connects the cooperating remote tools and MCP evidence tool to one Core dependency. Try native LangChain tools and lost-reply recovery, or the MCP evidence tool.

来源:README.md,提交 312b3f1

工具

0
SourceWeft 尚未在沙箱中启动过该软件包,因此其工具未知。

版本历史

3
  1. v0.3.0-preview.11最新Oct 11, 2026
  2. v0.3.0-preview.10Sep 26, 2026
  3. v0.3.0-preview.8Sep 23, 2026

评分

已满足适用检查项的 50%

该评分衡量此收录条目的完整程度,依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价,也不表示服务器安全或当前可用:可连通性是带日期的检查结果,评分也不包含安装量或用户评价。

  • 近 30 天内可连通25 分

    请保持端点能够响应 MCP 握手;SourceWeft 每 30 天探测一次。

  • 已声明认证方式10 分

    请在注册中心条目中声明凭据请求头,或保持端点能够响应探测,以便判定其认证方式。

  • 已列出工具15 分

    请让服务器在无凭据时响应 tools/list,或发布可在沙箱中无凭据启动的软件包。

  • 描述必需15 分
  • 图标10 分
  • 文档15 分
  • 许可证10 分