Agente local privado · activo

SEBAS

Arquitectura privada de asistente local construida alrededor de IPC explícito, aprobaciones y herramientas de sistema acotadas.

Verified Project State · 16.1

Verified Project State

SEBAS

intelligence-v16:sebas

fresh

Local assistant hardening, explicit approvals, policy budgets, inspectable system execution and resilient operator tooling.

Basis: 2026-08-18 · 0d · threshold 21d

Open Verified State Ledger →

Project Intelligence 3 · 2026-08-18

Living state

Local assistant hardening, explicit approvals, policy budgets, inspectable system execution and resilient operator tooling.

hardening

What changed

Core operator, memory, HTTP, file, Git and approval surfaces are established; the next public-safe story is hardening rather than remote control.

Updated 2026-08-18 · 21d freshness window

What’s next

  • Complete hardening
  • Expand policy verification
  • Improve approval UX
  • Keep execution local

Public dependencies

  • Yggdrasil · governance_peer — Shares local authority and explicit-approval patterns.
phase:hardeninglocal assistantapproval registrysystem policyinspectable tools

Resumen

Problem

Un asistente local se vuelve peligroso cuando intención del modelo y ejecución del sistema comparten una autoridad implícita.

Design

La ejecución se separa tras contratos IPC, políticas y superficies de aprobación humana para acciones sensibles.

Outcome

Un modelo de asistente que trata autoridad del sistema como capacidad separada y controlada, no como consecuencia automática del chat.

Verification

La superficie pública documenta únicamente el modelo de autoridad.

Local agentIPCApprovalsSystem toolsAI agentsLocal automationSecurity

Arquitectura

  1. local assistant
  2. IPC boundary
  3. approval registry
  4. system policy
  5. safe executor
  6. tool surfaces
  7. memory window
Public architecture diagram for SEBAS

Componentes

component

IPC boundary

Local message transport between UI and assistant core.

component

System policy

Allow/deny and approval constraints around execution.

component

Approval registry

Durable pending decisions before sensitive operations.

component

Tool surfaces

Explicit local capabilities exposed under policy.

Decisiones

active

Require explicit approval for sensitive execution

A local assistant should not treat model intent as authority to perform sensitive system actions.

Línea de tiempo

  1. Local IPC assistantmilestone · active
  2. Hardeningmilestone · ongoing
  3. Authority and approval architecture is public; IPC, commands and local memory remain private — public_boundaryevidence · 2026-08-11

Experiments

No additional public experiment records.

Releases

No project-specific public release record.

Evidencia

public_boundary

Authority and approval architecture is public; IPC, commands and local memory remain private

Authority and approval architecture is public; IPC, commands and local memory remain private

source-contract · checked 2026-08-11 · fresh until 2027-08-11

Límites

La web pública no expone endpoints IPC, control del equipo, ejecución de comandos ni memoria local.