Continuity Evidence

io.github.zerohourzulu由 GitHub 帳號 zerohourzulu 發布v0.3.0-preview.12更新於 Oct 24, 2026

A bounded local evidence tool with current agent permission checks and durable retry handling.

已驗證STDIO僅桌面開發者工具安全與監控

概覽

AI 產生的概覽

一個本機 MCP 證據工具,記錄代理替換過程中的角色、權限與未完成職責,並具備持久化重試處理。

可以做什麼
記錄代理所處的角色、擁有的權限以及替換前發生的事,讓未完成的職責在替換後保留,而權限會被獨立重新檢查。為案件產生並檢視證據,包括不會產生資料包的拒絕紀錄,並可解釋已儲存的紀錄。將案件歷史保存在本機,或在鏈上部署中透過密碼學承諾讓選定歷史可公開驗證。透過提供的 JavaScript SDK(含 TypeScript 宣告與離線消費端檢查)嵌入引擎。把協作的遠端工具與 MCP 證據工具連接到同一個共享 Core 相依套件。
適用情境
適用於助理或代理工作流程需要在代理之間交接,且你需要一份本機、可檢視的紀錄來說明誰持有職責、繼任者可以做什麼。也適合評估或將權限檢查與證據記錄整合到框架或政策引擎中。
執行需求
以本機 stdio 程序形式從 npm 套件執行。教學需要 macOS 或 Linux 上的 Node 22.18+(22.x)、24.x 或 26.x;不需全域 pnpm 或 Python。安裝程式在停用指令碼的情況下下載鎖定相依套件。公開演練不需帳號;清單宣告無身分驗證、環境變數或標頭。
安裝前請注意
README 說明這是本機參考軟體,不是惡意代理沙箱、生產憑證系統或自主網路防禦器,真實整合必須透過受保護的執行器中介每一項有後果的操作。鏈上部署有其自身的隱私、可用性與最終性要求,密碼學承諾可讓獲授權審查者檢查私有紀錄。安裝程式會下載相依套件,重跑教學會建立新案件並保留先前的證據。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 Continuity Evidence,將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Desktop only,透過 STDIO。 STDIO 服務會啟動本機處理程序,因此需要 SourceWeft 桌面主機。

其他 MCP 客戶端

參照 儲存庫 中的啟動說明。

README

Message package preview — 10 October 2026: Core11, remote6, gateway11 and evidence12 add the optional saved-record explanation command. See the current release guide. Existing API/policy/proof behavior stays unchanged; older npm archives remain available.

Source preview.13: MCP client/server/core updated to 2.2.0 for GHSA-6qxp-vccf-f47h. New MCP archives are source-prepared; npm and Registry still select the earlier published tuple.

Previous source preview.12.1: Plain-language messages, completed historical ZK experiments, and retained-receipt reader source. The installable packages now include the optional saved-output explanation command; use the exact tuple in the release guide.

Current developer preview: Exact versions and installation.

Follow an investigation: Follow one protected case through interruption, replacement, a signed completion, new evidence and a persistent challenge. Run the walkthrough.

Continue an existing case: Same case, longer history, preserved permissions and unfinished duties. Start with supported profiles, migration and recovery, or the protected evidence example.

Core 0.3 preview: Build a fresh case, connect approved MCP tools, or run the public tests. The original 0.2.2 evaluation releases remain available.

[it is 2 a.m. do you know what your agent is doing?] [Security. Control. Inheritance. Durable survival of powers and responsibilities. Record durably, locally or on chain. This is your agent’s brain on Continuity.]

Continuity — agents change; responsibility remains

Explore the interactive demo → · Start here · Developer guide · Security and limits

Try your own choices in the playground → No installation or account needed.

Developer preview · Apache 2.0. Release status.

A process supervisor can start Agent B. Continuity records which role B occupies, which powers it has, what happened before, and which unfinished duties survive the change. A replacement receives its explicitly granted powers; an unfinished duty does not silently grant more authority.

The original tutorial follows a security investigation interrupted by an agent replacement. The old request is refused, the investigation stays OPEN, and the successor’s review permission is checked independently.

Choose your path

You want to…Start hereWhat you will learn
Understand the idea without installing anythingThe story and answer keyWhy an unfinished duty and permission are separate.
Run and inspect a replacementTutorial, then operator commandsWhat was refused, who holds the duty and what B may do.
Evaluate or integrate the codeCore 0.3 quickstartCreate your own permissions, try a protected tool, then connect a framework or policy engine.

Run the tutorial

Use Node 22.18+ (22.x), 24.x or 26.x on macOS or Linux. Prefer the latest patch of your chosen release. No global pnpm or Python is needed for this tutorial. Full quickstart, including archive extraction.

Get the public source; no GitHub account is needed:

sh
git clone https://github.com/zerohourzulu/continuity.gitcd continuity

See the result first, without installing dependencies:

sh
node examples/recorded.mjs

Expect ALLOW for reviewing the investigation and DENY for collecting another packet. This inspects a bundled recorded case; it does not execute a new action.

Generate your own evidence:

sh
node tools/setup.mjsnode tutorial/start.mjs

Expect PASS — duty remains OPEN; B has no collection power, then VERIFIED. Setup downloads locked dependencies with scripts disabled. The tutorial then runs locally using synthetic data and public test keys. It prints your new case name and exact follow-up commands. Rerunning creates another case and preserves earlier evidence.

Change one permission:

sh
node tutorial/start.mjs --deny-review

B still inherits the duty, but its review permission becomes DENY. Expected output and explanation · Setup checks and recovery.

Choose your holder of record.

Keep records locally, or choose a chain-backed deployment to make selected history publicly verifiable. Cryptographic commitments can let authorized reviewers check private records without publishing their contents. This tutorial runs locally; each deployment has its own privacy, availability and finality requirements.

Explore and build

Your next stepWhere to go
See the idea and recorded comparisonInteractive demo
Inspect your new run and optional recorded Linux evidenceOperator guide
Integrate an authority checkDeveloper guide · Executable reader example
Try optional native enforcement mechanicsDisposable Linux lab
Review source provenance and validationValidation · Presentation checks · Provenance
Extend the presentationWebsite maintenance

Presentation maintainers can find the separate owner-private edition in website maintenance. The public walkthrough needs no account.

Contribute and explore

Read the short development history from Core 0.1 to the current reference implementation. Contributions and public RFCs are welcome; an RFC is useful for changes to protocol behavior or security boundaries.

Scope

Core 0.2.2 is local reference software. It is not a hostile-agent sandbox, production credential system or autonomous cyber defender. The website selects recorded results; the downloaded tutorial executes Core. Real integrations must mediate every consequential operation through a protected executor. Security boundaries.

The source, tutorial, tests, reader and website are included here and in the complete evaluation download. Earlier editions remain available as historical releases; use evaluation.6 for the commands above. Package overview · Presentation provenance.

Release status and licensing · Apache 2.0 license · Third-party notices

Embed the engine

Try the standalone developer package: install the supplied JavaScript SDK tarball in a separate application, create one authorized synthetic packet, and inspect why refused requests create none. Includes TypeScript declarations and an offline consumer check. This is an evaluation interface around unchanged Core0.2.2.

Shared Core integration preview

The shared-package preview connects the cooperating remote tools and MCP evidence tool to one Core dependency. Try native LangChain tools and lost-reply recovery, or the MCP evidence tool.

來源:README.md,提交 312b3f1

工具

0
SourceWeft 尚未在沙箱中啟動過該軟體包,因此其工具未知。

版本歷史

4
  1. v0.3.0-preview.12最新Oct 11, 2026
  2. v0.3.0-preview.11Sep 26, 2026
  3. v0.3.0-preview.9Sep 23, 2026
  4. v0.3.0-preview.8Sep 23, 2026

評分

已滿足適用檢查項的 50%

該評分衡量此收錄條目的完整程度,依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價,也不表示伺服器安全或目前可用:可連通性是帶日期的檢查結果,評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通25 分

    請保持端點能夠回應 MCP 握手;SourceWeft 每 30 天探測一次。

  • 已宣告認證方式10 分

    請在註冊中心條目中宣告憑證請求標頭,或保持端點能夠回應探測,以便判定其認證方式。

  • 已列出工具15 分

    請讓伺服器在無憑證時回應 tools/list,或發布可在沙箱中無憑證啟動的軟體包。

  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分