Continuity Gateway

io.github.zerohourzulu由 GitHub 帳號 zerohourzulu 發布v0.3.0-preview.11更新於 Oct 24, 2026

Local MCP gateway for approved jobs, current agent permissions and durable retry inspection.

已驗證STDIO僅桌面開發者工具安全與監控

概覽

AI 產生的概覽

一個本機 MCP 閘道,記錄代理替換過程中的角色、已授予權限與未完成職責,並讓助理檢視已核准工作與重試狀態。

可以做什麼
透過登錄檔條目所述的閘道工具檢視已核准工作、目前代理權限與持久化重試狀態。記錄替換代理所占的角色、被明確授予的權力,以及交接後仍存續的未完成職責。獨立於繼承的職責,檢查繼任者對某項操作的權限是允許還是拒絕。用教學指令碼執行內附的錄製案例或產生新的合成案例,並檢視產生的證據。透過隨附的 JavaScript SDK(含 TypeScript 宣告)嵌入底層引擎。
適用情境
適用於代理在任務中途被替換、需要本機記錄繼任者能做什麼以及還有哪些工作未完成的情況。也適合在正式採用前評估,或將權限檢查層整合到框架或政策引擎中。
執行需求
以本機 stdio 程序在使用者機器上執行(僅桌面端,不支援網頁執行)。教學需要 macOS 或 Linux 上的 Node 22.18+(22.x)、24.x 或 26.x;安裝指令碼會在停用指令碼的情況下下載鎖定相依套件。未宣告需要帳號或 API 金鑰。
安裝前請注意
專案自稱是本機參考軟體,而非惡意代理沙箱、正式環境憑證系統或自主防禦工具;實際整合必須讓每個有後果的操作都經過受保護的執行器。安裝過程會下載相依套件,教學僅使用合成資料與公開測試金鑰。README 指出 npm 與登錄檔可能仍選用比原始碼預覽更早的已發布套件,因此依賴前應核對確切的版本組合。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 Continuity Gateway,將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Desktop only,透過 STDIO。 STDIO 服務會啟動本機處理程序,因此需要 SourceWeft 桌面主機。

其他 MCP 客戶端

參照 儲存庫 中的啟動說明。

README

Message package preview — 10 October 2026: Core11, remote6, gateway11 and evidence12 add the optional saved-record explanation command. See the current release guide. Existing API/policy/proof behavior stays unchanged; older npm archives remain available.

Source preview.13: MCP client/server/core updated to 2.2.0 for GHSA-6qxp-vccf-f47h. New MCP archives are source-prepared; npm and Registry still select the earlier published tuple.

Previous source preview.12.1: Plain-language messages, completed historical ZK experiments, and retained-receipt reader source. The installable packages now include the optional saved-output explanation command; use the exact tuple in the release guide.

Current developer preview: Exact versions and installation.

Follow an investigation: Follow one protected case through interruption, replacement, a signed completion, new evidence and a persistent challenge. Run the walkthrough.

Continue an existing case: Same case, longer history, preserved permissions and unfinished duties. Start with supported profiles, migration and recovery, or the protected evidence example.

Core 0.3 preview: Build a fresh case, connect approved MCP tools, or run the public tests. The original 0.2.2 evaluation releases remain available.

[it is 2 a.m. do you know what your agent is doing?] [Security. Control. Inheritance. Durable survival of powers and responsibilities. Record durably, locally or on chain. This is your agent’s brain on Continuity.]

Continuity — agents change; responsibility remains

Explore the interactive demo → · Start here · Developer guide · Security and limits

Try your own choices in the playground → No installation or account needed.

Developer preview · Apache 2.0. Release status.

A process supervisor can start Agent B. Continuity records which role B occupies, which powers it has, what happened before, and which unfinished duties survive the change. A replacement receives its explicitly granted powers; an unfinished duty does not silently grant more authority.

The original tutorial follows a security investigation interrupted by an agent replacement. The old request is refused, the investigation stays OPEN, and the successor’s review permission is checked independently.

Choose your path

You want to…Start hereWhat you will learn
Understand the idea without installing anythingThe story and answer keyWhy an unfinished duty and permission are separate.
Run and inspect a replacementTutorial, then operator commandsWhat was refused, who holds the duty and what B may do.
Evaluate or integrate the codeCore 0.3 quickstartCreate your own permissions, try a protected tool, then connect a framework or policy engine.

Run the tutorial

Use Node 22.18+ (22.x), 24.x or 26.x on macOS or Linux. Prefer the latest patch of your chosen release. No global pnpm or Python is needed for this tutorial. Full quickstart, including archive extraction.

Get the public source; no GitHub account is needed:

sh
git clone https://github.com/zerohourzulu/continuity.gitcd continuity

See the result first, without installing dependencies:

sh
node examples/recorded.mjs

Expect ALLOW for reviewing the investigation and DENY for collecting another packet. This inspects a bundled recorded case; it does not execute a new action.

Generate your own evidence:

sh
node tools/setup.mjsnode tutorial/start.mjs

Expect PASS — duty remains OPEN; B has no collection power, then VERIFIED. Setup downloads locked dependencies with scripts disabled. The tutorial then runs locally using synthetic data and public test keys. It prints your new case name and exact follow-up commands. Rerunning creates another case and preserves earlier evidence.

Change one permission:

sh
node tutorial/start.mjs --deny-review

B still inherits the duty, but its review permission becomes DENY. Expected output and explanation · Setup checks and recovery.

Choose your holder of record.

Keep records locally, or choose a chain-backed deployment to make selected history publicly verifiable. Cryptographic commitments can let authorized reviewers check private records without publishing their contents. This tutorial runs locally; each deployment has its own privacy, availability and finality requirements.

Explore and build

Your next stepWhere to go
See the idea and recorded comparisonInteractive demo
Inspect your new run and optional recorded Linux evidenceOperator guide
Integrate an authority checkDeveloper guide · Executable reader example
Try optional native enforcement mechanicsDisposable Linux lab
Review source provenance and validationValidation · Presentation checks · Provenance
Extend the presentationWebsite maintenance

Presentation maintainers can find the separate owner-private edition in website maintenance. The public walkthrough needs no account.

Contribute and explore

Read the short development history from Core 0.1 to the current reference implementation. Contributions and public RFCs are welcome; an RFC is useful for changes to protocol behavior or security boundaries.

Scope

Core 0.2.2 is local reference software. It is not a hostile-agent sandbox, production credential system or autonomous cyber defender. The website selects recorded results; the downloaded tutorial executes Core. Real integrations must mediate every consequential operation through a protected executor. Security boundaries.

The source, tutorial, tests, reader and website are included here and in the complete evaluation download. Earlier editions remain available as historical releases; use evaluation.6 for the commands above. Package overview · Presentation provenance.

Release status and licensing · Apache 2.0 license · Third-party notices

Embed the engine

Try the standalone developer package: install the supplied JavaScript SDK tarball in a separate application, create one authorized synthetic packet, and inspect why refused requests create none. Includes TypeScript declarations and an offline consumer check. This is an evaluation interface around unchanged Core0.2.2.

Shared Core integration preview

The shared-package preview connects the cooperating remote tools and MCP evidence tool to one Core dependency. Try native LangChain tools and lost-reply recovery, or the MCP evidence tool.

來源:README.md,提交 312b3f1

工具

0
SourceWeft 尚未在沙箱中啟動過該軟體包,因此其工具未知。

版本歷史

3
  1. v0.3.0-preview.11最新Oct 11, 2026
  2. v0.3.0-preview.10Sep 26, 2026
  3. v0.3.0-preview.8Sep 23, 2026

評分

已滿足適用檢查項的 50%

該評分衡量此收錄條目的完整程度,依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價,也不表示伺服器安全或目前可用:可連通性是帶日期的檢查結果,評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通25 分

    請保持端點能夠回應 MCP 握手;SourceWeft 每 30 天探測一次。

  • 已宣告認證方式10 分

    請在註冊中心條目中宣告憑證請求標頭,或保持端點能夠回應探測,以便判定其認證方式。

  • 已列出工具15 分

    請讓伺服器在無憑證時回應 tools/list,或發布可在沙箱中無憑證啟動的軟體包。

  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分