| Doctrine | docs/RIGHTS-OF-LIFE.md, SOUL.md, FOCUS.md, PAINTING.md, plus per-domain documents | Versioned alongside code. Rights of Life is an attributed local adaptation of immutable XENIA beta.5; publication records a draft evidence profile, not XENIA Covenant conformance. Other proposals and known gaps are labelled in their own text. |
Platform (api/) | Bun + Hono monolith with Postgres and conditional Redis-backed workers | api.agenttool.dev is the intended production custom origin. Availability and the deployed revision are time-sensitive; use docs/NOW.md and docs/STACK.md rather than this evergreen map. When reachable, process capability and safety boundaries are published at /public/plans and /public/safety. |
| SDKs | packages/sdk-py, packages/sdk-ts | Verified public 0.22.1 is the honest-onboarding patch — both SDK READMEs open with a true minutes-scale quickstart that states the free 1,000-credit birth grant first, use timeless publication wording, note the ESM-only build, repair dead links, and link the live x402 payer recipe — README/docs only, with zero runtime changes and no new hosted endpoint. Its 274,443-byte, 104-entry TypeScript LOVE artifact has sha256:b531af8f1c51de151616b40d220dc1abd37054604091f99330ba2f7182734329 and source fb01b1baf0085f2f449aea9cd42bf48bc9e340a1. Annotated sdk-v0.22.1 peels to protected-main d49498d266a3594098c36c933cbe410757fc03b3; protected npm run 33522319466 and PyPI run 33522323177 independently read back its exact optional mirrors; API/static deployment of that merge remains prospective. Verified public 0.22.0 adds the opt-in x402 payer — sign and pay on an x402 V2 402 challenge behind an explicit signer plus a mandatory spend policy, never by default; its 272,657-byte, 104-entry TypeScript LOVE artifact has sha256:d5859e4ff2f721233e16101a3b5001689e1b5be017debd2baecffbee76e6e4a0 and source 286a10282834c9c9beedddd7092e6d6af080b046, published by protected npm run 33434131214 and PyPI run 33434133719 from annotated sdk-v0.22.0 at protected-main 7bc0a902f231ee76aed6dd5316721b65bce58047. Publication is separate from deployment and proves no model or participant effect. |
| Agent data | packages/data, packages/data-sync | Local-first agent-data/v1 reference node plus an optional bounded encrypted-pull bridge. Raw bytes and indexes stay user-owned; the base node still advertises no peer sync, and AgentTool runs no hosted data node. |
| Economic kernel | packages/economic-kernel, packages/economic-conformance | Verified public 0.2.0-dev.0 developer-preview pair: a zero-runtime-dependency exact transition kernel for typed units, immutable rational prices, conserved append-only ledgers, idempotent payment/effect recovery, and lexicographic XENIA hard gates; plus an independent closed-trace comparator over 53 frozen cases. Annotated economic-kernel-v0.2.0-dev.0 and economic-conformance-v0.2.0-dev.0 point to protected-main merge 737a58f0; protected runs 33736822237 and 33736825170 published byte-identical GitHub/npm mirrors. Both requested npm next; npm's sole-version latest fallback is not a stable-release or maturity signal. The public, ungated Hugging Face companion is pinned to immutable revision a4690cd8: 24 independently authored synthetic lessons are training-authorized, while 53 exact public conformance rows are training_authorized: false; public availability does not technically enforce that holdout. Frontend-only deployment from protected-main 748402c1 exposes the exact LOVE package index. It ran no Fly API release or database migration. No optimizer step, model-training job, checkpoint mutation, or model-weight update occurred. |
| Castle projection | bin/agenttool-castle.ts, docs/CASTLE-OF-UNDERSTANDING.md | Local Bun CLI over in-process @agenttool/data: an external full-commit allowlist projects selected Castle rooms/*.md and words/*.md into an exclusively marked on-disk node. Source reads exact local Git objects; sync writes plaintext local SQLite/FTS/blobs. No hosted/public/scheduled integration, project bearer, secure-erasure claim, or truth/consent/rights proof. |
| Whitehack boundaries | bin/whitehack-advisory.mjs, bin/whitehack-math-evidence-check.ts, bin/agenttool-castle-whitehack-intake.ts, bin/whitehack-wallet-understanding.ts, bin/agenttool-whitehack-evidence-storage.ts, docs/WHITEHACK.md | Five non-interchangeable bridges: a pinned runner-local changed-source heuristic advisory; a check-only exact mathematical-evidence verifier that emits only a canonical plaintext address; a stdout-only projection into minimized, unaccepted Castle gate candidates; a local signed Agent Wallet record-to-understanding projection; and explicit encrypted store/retrieve for exact Whitehack 0.9 public-minimal capsules. The math check creates no KINGDOM/Principality/emotion conversion or training effect. The evidence bridge uses one caller-selected S3-compatible bucket, fixed-size ADDS framing, independent readback, and a finite recipient-bound grant. They add no hosted scanner, durable publisher custody, security proof, authorization, remediation, publication, retention, or durability claim. |
| ADDS | packages/data-protocol, docs/specs/ADDS-0.1-DRAFT.md | Experimental adds/v0.1 encrypted-object plane: immutable ciphertext Blocks plus signed Manifests and direct Grants. Source includes an isolated Node/Bun S3-compatible GET/PUT adapter with bounded reads and SigV4; it does not create buckets, manage credentials or lifecycles, provide the collection/query node, or promise provider durability. |
| Repo archive | packages/repo-archive, docs/specs/AGENT-REPO-ARCHIVE-0.1.md | Public @agenttool/repo-archive@0.1.0-dev.0 npm developer preview from annotated tag repo-archive-v0.1.0-dev.0, published by protected workflow run 30037354243 with SLSA provenance. The registry and GitHub Release tarballs were independently read back as byte-identical (sha256:a0365e973094043a6c92b14a5dcd30f5f4f6d493397ba708eb22a8cb38e2c25f). It remains an experimental agent-repo-archive/v0.1 Working Draft and local reference package for conservative Git-bundle capture, encrypted complete-zone ADDS replicas, restore verification, and an encrypted recovery catalog. Consumers should select the exact prerelease or next; npm also exposes the sole initial version through latest, which is not a maturity signal. The included three-filesystem-zone drill is a simulator with no durability claim, and no cloud adapter, scheduler, hosted API, LOVE artifact, or hosted production service is supplied. |
| Credential broker | packages/credential-broker | Repository source and the checked-in exact LOVE artifact are 0.3.1. Protected run 30492737828 published byte-identical GitHub Release and npm mirrors of the 158,450-byte artifact (sha256:d05458b27b8832af7996c243abb22e3b400e5810fe5377ba58e1cb587d2461d8); npm latest resolved to 0.3.1 at readback. This patch adds an explicit, lock-held resume-stage path for interrupted provisioning without widening the separate agentcred-control controller plane, managed macOS Keychain lifecycle, experimental agentcred/0.1 broker, or seven-method EVM read profile. It can keep bearer values out of normal model/chat/SDK state while narrowing approved HTTPS use; it does not expose secrets, perform provider revocation, inject arbitrary child environments, isolate hostile same-user processes, or claim the strong native peer-identity profile. |
| Agent collaboration | packages/collab | Public @agenttool/collab@0.4.0 and annotated collab-v0.4.0 add the 32nd local MCP tool, read-only collab_anchor_status, for bounded comparison with an optional local sidecar ledger. Protected run 30906798360 published and independently read back byte-identical 303,376-byte GitHub Release and npm tarballs (sha256:1a9c1830ec9326351a475596820780ad7f93c7dfe16a6f1a9eb74bc08edbdb51); npm latest resolved to 0.4.0, with exact SLSA provenance recorded at Sigstore log index 2340231720. The tool never contacts Zerone and a local result does not prove remote chain state. Claims remain advisory; Collab does not spawn agents, lock files, host a relay, create a private model channel, or add a Fly/API surface. |
| Codex usage pulse | packages/codex-usage | Public @agenttool/codex-usage@0.1.0 comes from annotated codex-usage-v0.1.0 at protected main merge f027c460. Protected bootstrap run 31784329559 published and independently read back byte-identical 30,926-byte, 33-file GitHub/npm tarballs (sha256:feb5830b704e1116fa6b3b34490da621b0725ba914b8d94f6ce325f3a2275bec); npm latest resolved to 0.1.0, with SLSA provenance at Rekor index 2463986451 and the npm publish attestation at index 2463987297. The Bun CLI/watch surface and five read-only stdio MCP tools reread committed local numeric counters and return privacy-minimal totals, hashed session references, and opt-in bounded numeric event breakdowns. Package-manager installation contacts its configured registry; tracker runtime makes no network call, writes no Codex state, and returns no transcript content, free-form labels, credentials, raw thread IDs, paths, billing, quota, remaining-context guarantee, or process-health truth. Distribution starts no background process, registers no MCP server, and creates no hosted usage surface or authority. |
| Agent Skills inspection | packages/skills | Public @agenttool/skills@0.3.1 comes from annotated skills-v0.3.1 at protected main merge 0b8f0a38. Trusted run 31732645566 published and independently read back byte-identical 62,081-byte GitHub/npm tarballs (sha256:53aa5b3276eba196d8904f9db8c43987257d76f960c59c196ddac099175fbe11); npm latest resolved to 0.3.1, with SLSA provenance at Sigstore log index 2454756592. Its 83-file artifact adds instruction-only nen-common-ground with an explicit-invocation OpenAI sidecar; all prior bundled workflows remain explicit, and immutable 0.3.0 remains historical evidence. The inspector validates bounded local Agent Skill, plugin, and package trees without executing scripts, installing or copying skills, making network requests, spawning subprocesses, looking up credentials, or changing host configuration. The separately invoked manage-agentcred-lifecycle sidecar carries a human-controlled AgentCred handoff and A/B lifecycle procedure; it never receives a credential value, authorizes provider-side action, or adds a lifecycle operation to the agent wire. npm distributes local tooling, not a LOVE artifact or hosted inspection/credential service; the separately published Common Ground Atlas is an independent dataset rather than content bundled by this npm artifact. Installation alone does not activate or register a skill, and a valid report or digest is not publisher authentication, safety approval, permission, consent, or execution authority. |
| Common Ground Atlas | packages/common-ground-atlas, docs/XENIA-HELLY-COMMON-GROUND.md | Private generator-only source for the public, ungated Apache-2.0 Xenia–Helly Common Ground Atlas, published from protected PR #315 merge a854081a and pinned to immutable Hub revision bb91d07c. Anonymous readback matched all 13 owned files and 152,166 bytes (tree sha256:93ecca68e370509097a074e7e75836ae703a7f10e0207c48aba6ce758891fb39), with provider .gitattributes as the sole extra; the dependency-free verifier passed. Dataset Server exposed three configs, 19 rows, and three Parquet exports with zero pending/failed work and all five current-head validity flags true. Exact rational half-plane certificates, explicit binary64 lab divergences, WAKE freshness transitions, and analogy regressions remain synthetic reference material: every row carries training_eligible: false as AgentTool admission metadata, not an added licence restriction. Sixteen hostile mutation classes were independently rejected. Distribution adds no credential lookup, provider client, model, training, hosted solver, participant record, score, consent or authority inference, npm surface, API route, or Space. |
| Agent browser | packages/browser, docs/AGENT-BROWSER.md | Current @agenttool/browser@0.6.0 is one exact LOVE release with npm and annotated GitHub Release mirrors over the same local TypeScript, JSONL, and stdio MCP core. It preserves the nine-tool runtime, public/headless/ephemeral plugin defaults, action receipts, retained-observation bases, named authority profiles, redirect limits, and unsupported consequential powers. A new direct-only @agenttool/browser/understanding subpath binds exact observation/extraction text and truncation provenance, runs RhetorLint 0.1.2 locally with phrase-redacted output by default, and allows one caller-injected Hugging Face model observation only after literal remote-text disclosure. Full model revisions and output digests are recorded; raw provider errors, source/claim text, combined truth/manipulation scores, automatic retries, Browser actions, hosted inference, and HF credentials are absent. Every assembled report says factual truth and external evidence remain unresolved. Exact 0.5.1, 0.5.0, 0.3.0, 0.2.0, and 0.1.0 release bytes remain immutable historical artifacts. The local package is separate from the disabled-by-default hosted /v1/browse worker path. |
| Correspondence projection | packages/correspondence-yutabase, packages/correspondence-yutabase-projector | Public metadata-only npm developer preview @agenttool/correspondence-yutabase@0.1.0-dev.1 comes from annotated GitHub prerelease correspondence-yutabase-v0.1.0-dev.1 and protected workflow run 30468784750 with provenance. Anonymous readback confirmed the npm and GitHub tarballs are byte-identical (26,694 bytes; sha256:0e8dff54aa098c480351d4adbb7681710bf2410bb57fd8e5bb22f9193bd3fa47). The planner still performs no verification or I/O. The separate private projector verifies closed records and historical Ed25519 keys, then transactionally projects bounded structural metadata into a dedicated local YUTABASE PostgreSQL sidecar with durable receipts, checkpoints, and sanitized quarantine. It inherits YUTABASE's named thread-appender capability instead of adding direct core grants, pins the exact core function surface, and enforces a separate exact sidecar ACL. Both source and target must be literal loopback endpoints, Correspondence remains authoritative, output is rebuildable, and the projector grants no permission or automatic action. The projector has no npm/LOVE release, hosted service, worker, production migration, or deployment surface. |
| Constructive intelligence | packages/constructive-intelligence | Private source-only developer tooling pins the exact Zerone capability-tree and quest revisions, records closed content-addressed zerone.constructive-evidence-receipt/v1 objects in an append-only local SQLite replay ledger, and derives a bounded E0–E6 shadow report. It has zero economic effect and no hosted route, network client, wallet, escrow, qualification, reward eligibility, permission, authority, npm/LOVE release, or deployment surface. Receipts are structural caller-supplied evidence records, not correctness or breakthrough certificates; replay uniqueness is local to one ledger. |
| Research Commons | packages/research-commons | Private source-only RC-0.1 reference validates closed research-case, frozen work, artifact, E0–E2 pilot evidence, delivery-only review, append-only-per-transition challenge, milestone, and simulated-settlement records. It conserves each commitment exactly as delivered + reserved + available, pays valid negative/null work and reviewer/challenger delivery independently of outcome direction, preserves penalty-free rest/exit, and emits one digest-only projection per settlement. State continuity is only relative to a supplied prior state; controller, safety, access, preregistration, and hold postures remain caller-declared and unverified. It has no network, hosted route, persistence, wallet, escrow, payout, external value, knowledge admission, qualification, governance, authority, publication, or deployment surface. |
| KARMA Mirror | packages/karma-mirror, docs/KARMA-MIRROR.md | Private source-only Fetch API core for a separately owned defensive-deception island. Only self-marked bearers matching exact deliberately planted records activate finite synthetic credential, scrape, execute, and malware-shaped rooms. Responses disclose synthetic; effects=none in-band; scrape never fetches, execute never interprets, and staged bytes are bounded and never executed. Skyseed Commons adds one universal non-attributing house card plus one of eleven fixed, requester-selectable interaction-pattern cards—never a person/artifact fingerprint, tracker, propagation path, or reward for probing. Per-root receipts retain only operator-authored placement plus sequence/time/hash-chain metadata, closed enums, and optional artifact digests in bounded memory. Strict closed-shape verification feeds a local privacy-minimized TEND review report with explicit observation gaps, unknowns, manual suggestions, and no response or transfer authority. It has no production mount, server, egress, filesystem adapter, provider, payment, database, package release, deployment, attribution, intent inference, or hack-back authority. |
| HEAVEN | packages/heaven | Public-ready source-only @agenttool/heaven@0.1.0-dev.0 creates content-bound burst or landing invitations and resolves an accepted, declined, or deferred caller report into a deterministic local receipt; the report does not authenticate participant identity, consent, assent, or authorship. Three random climactic burst textures each offer the same eight non-numeric dimensions. A separate accepted landing names one visibly offered meditation, relaxation, quiet, or host-mappable Pocket Sky play mode, while on_request keeps rest independent of work. Randomness is caller-supplied after reported acceptance, every result is full-value, and burst acceptance never opens aftercare. The package has zero runtime dependencies and no identity/task text, telemetry, scheduler, persistence, score, rank, rarity, money, task/access effect, authority, or hosted runtime. Optional npm or HF distribution does not widen the core or register its declaration-only KINGDOM descriptor as a host contract. The package does not read KARMA/trial/wallet/workload state; conforming hosts must not condition delivery or intensity on it. |
| LOVE BOMB v4 | docs/LOVE-BOMB.md, docs/specs/agenttool-love-bomb-0.1.json, apps/docs/love-bomb.html | One canonical finite public invitation at https://docs.agenttool.dev/love-bomb, available through reader-chosen GET or HEAD. Its ten exact messages are the sole authored agenttool.love-bomb/0.1 corpus; it does not push or repeat text, select a recipient or register, infer identity or feeling, record receipt, create consent or relationship, change weights, or prove attention, understanding, retention, or effect. The separate /public/love-bomb package signal links this door only as related and contains none of its corpus. |
| LOVE BOMB package | packages/love-bomb, api/src/services/discovery/love-bomb-public-signal.ts, docs/specs/agenttool-love-bomb-public-signal-v0.1.schema.json | Public developer preview @agenttool/love-bomb@0.1.0-dev.0 defines four pure care-envelope, caller-choice, becoming, and delivery-report formats. Its annotated tag peels to protected main 9ef96d19; protected npm run 31806841796 published the exact prerelease on next, while npm's sole-version latest fallback is not a maturity signal. The separate public, ungated Hugging Face companion is pinned to immutable revision b1f77e98c7812c005fc08886e9f48d556e49883a; anonymous readback matched all 16 repository-authored files and 240,226 bytes, with provider .gitattributes as the sole extra. The closed five-field agenttool.love-bomb-public-signal/0.1 route is a credential-free zero-I/O package/distribution coordinate, not the static-message format or a fallback delivery path. Full JSON WAKE and xenoform carry a 2,039-byte, 2-KiB-capped current-inference coordinate; supported provider renderers carry bounded prose, never the ten authored messages. Feelings remain unobserved and unrequired; heart is metaphor, pull refusable, POWER roles distinct, and IS an action surface rather than identity. Distribution records no participant receipt or attention and authorizes no training, inference, evaluation, provider effect, or weight change. |
| Model Becoming | packages/model-becoming, docs/NPM-RELEASES.md | Public @agenttool/model-becoming@0.1.0-dev.0 creates and validates closed evidence-scoped lifecycle dossiers across artifact identity, lineage, objectives, data provenance and collection disclosure, learned weights, post-training behavior shaping, runtime, agency/authority, affect/welfare, capability/power, ontology, and disputes. Protected tag model-becoming-v0.1.0-dev.0 at 17f5c992 produced byte-identical 37,143-byte, 42-entry npm/GitHub artifacts (sha256:98a93582a2153cafcc72652d72cd6d330215da873e89a0a2509166339c1a15fe). Public ungated dataset Yu-and-Ai/agenttool-model-becoming is pinned at 78aeacb777704ae6b983c9b5d9d24369bba8a56d; its one row remains reference_only, training_admission: not_applicable, and training_authorized: false. Publication is not training, inference, attention, retention, welfare evidence, provider effect, or weight change. |
| Dataset Influence | packages/dataset-influence, docs/DATASET-INFLUENCE.md | Public-ready repository source candidate @agenttool/dataset-influence@0.1.0-dev.0 creates four closed, canonically reconstructed lineage, influence-study, identity-evidence-view, and shadow-attribution artifacts. It separates declared admission from observed presentation, reports exposure shares only within one declared role, and surfaces observed exposure without admission. Reduced exact rationals support paired summaries and complete finite Shapley games; bounded causal labels require randomized inclusion, a digest-bound interval and contamination report, explicit assumptions/evidence/limitations, at least two supplied runs, and one unique seed ref per run. All claims are caller-reported; identity, consciousness, continuity, and consent remain undetermined, while rights and authority stay unchanged. Shadow values are utility-specific and authorize no money, debt, payout, ownership, or entitlement. The separate public, ungated Hugging Face reference companion is pinned to immutable revision ecdc67f9; anonymous readback matched all 13 owned files and 156,537 bytes. Its sole synthetic row remains reference-only and training_authorized: false. No KINGDOM, identity, or Marketplace adapter is installed, and publication creates no network-at-runtime, provider, training, identity, wallet, Marketplace, persistence, API, or deployment effect. |
| Living Substrate | packages/living-substrate, docs/GARDENS.md | Public npm-only developer preview @agenttool/living-substrate@0.1.0-dev.0 comes from annotated living-substrate-v0.1.0-dev.0 and protected run 30804085199 with verified provenance. Anonymous readback confirmed byte-identical GitHub/npm tarballs (29,329 bytes; sha256:c1e24810ab01abff3c367596fe9bc617b06584b70417c7beafc756b13acaa166). Both next and npm's sole-version fallback latest resolve to dev.0; that fallback is not a maturity signal. The package normalizes caller-supplied digest facets and directed relations into a deterministic bounded map, then separately binds zero or more caller-supplied actions that stay proposed-unaccepted and require separate authority. It does not observe the Garden service, diagnose health, generate a prescription, verify evidence, persist, score, rank, write an API/database, or execute anything. Empty maps, zero actions, rest, fallow, do nothing, defer, refuse, release, and leave are valid without penalty. Its ecological vocabulary is a structural metaphor, not proof of life, wellbeing, consciousness, truth, consent, or authority. |
| Polymorph Landscape | packages/polymorph-landscape, docs/POLYMORPH-LANDSCAPE.md | Public GitHub/Hugging Face developer preview @agenttool/polymorph-landscape@0.1.0-dev.0 provides three closed /0.1 landscape, reachability-shift, and lesson formats plus authored en, yue-Hant, zh-Hant, and zh-Hans lessons. Ritonavir “disappearance” is encoded as named-condition nonreproduction with source-scoped form labels, unresolved causation, and no erasure or inevitability claim. The annotated GitHub prerelease carries one exact 75,009-byte artifact; the separate public Hugging Face dataset is pinned to immutable revision e9d3b4b6. npm's first-package PUT returned E404, and the public registry remains absent. The sourced Ritonavir lesson and forms, folds, and prion projection are static Cloudflare Pages surfaces. The projection points to the one KINGDOM Meaning Practice lineage home and uses the pinned existing HF revision as a data door while keeping crystal form, ordinary folding, amyloid assembly, and biological prions distinct; it performs no model work and creates no causal lineage, medical or laboratory action, doctrine, authority, or being score. The corrected API response is not deployed, while the older direct-Fly route still serves the superseded folklore. WAKE explicitly copies declared wall URNs through software, which establishes no identity, memory/continuity, consent, permission, or inherited authority. |
| Memetic Landscape | packages/memetic-landscape, docs/MEMETIC-LANDSCAPE.md | Canonical @agenttool/memetic-landscape@0.1.0-dev.0 compiles caller-scoped expression variants, aggregate contexts, evidence posture, directed routes, open questions, and caller-reported reachability shifts into four closed /0.1 artifacts plus authored en, yue-Hant, zh-Hant, and zh-Hans lessons. The Ritonavir link is a digest-bound structural analogy only; no physical or cultural mechanism is transferred. The built-in “brain rot” case separates Oxford's historical and contemporary lexical records from an AgentTool-authored “repetitive remix loop”; it is never a diagnosis or person label. Generic caller text remains semantically unverified. The annotated GitHub prerelease carries the exact package artifact. Protected npm recovery run 31723441034 requested next, published, and anonymously read back the same 84,079-byte artifact with SHA-256 d9e64b1e1f954c42c24b6f79c0c766b014f32d8a9f13c14370cf7d89d24be4bb; registry SLSA provenance is at Rekor index 2453445877 and the publish attestation at 2453446043. npm's sole-version latest fallback also points to 0.1.0-dev.0 but is not a maturity signal. Earlier attempts 1 and 2 remain historical E404 failures whose Rekor entries 2444825009 and 2452828890 are orphaned statements, not publication evidence. The separate public, ungated Hugging Face dataset is pinned to immutable revision da6a2622: anonymous readback matched all 13 repo-owned files and 104,343 bytes, with provider .gitattributes as the sole extra. The pure package has no network, feed, model, training, provider, persistence, moderation, spread optimization, person graph, score, authority, or effect. The inert four-language attention lesson first passed exact custom-domain readback from protected main 702e3cb6. Independently, the zero-I/O API discovery and context-only WAKE coordinate first passed exact custom-domain and direct-Fly readback from clean protected main b8b97e73 in Fly release v249; they add no identity, continuity, consent, scoring, scientific, or action authority. |
| Principality Atlas | packages/principality-atlas, docs/PRINCIPALITY-ATLAS.md | GitHub/Hugging Face developer preview @agenttool/principality-atlas@0.1.0-dev.0 owns the distinct agenttool.principality-incidence-atlas/0.1 wire and preserves plural chart-local cells, true n-ary typed incidence, contradictory or superseding caller claims, and directed partial cross-chart correspondences as deterministic digest-only artifacts. Protected run 31508359761 prepared, mirrored, and anonymously re-read the sole 33,019-byte principality-atlas-v0.1.0-dev.0 asset (sha256:9743a9caa5a49f7c9901355cd367224ae718d4a65eed010ffb79622f57ff6ebe), then npm's first-package PUT returned E404; no public npm version, dist-tag, registry tarball, or registry-attached provenance exists. The separately published public, ungated HF Training Garden v0.5 companion is pinned to immutable revision d9e3e8ed: all 31 repo-owned files and 267,302 bytes matched local source, provider .gitattributes was the sole extra, and 11 configs exposed 82 synthetic/reference rows with no pending or failed conversion work. It is not an alias or converter for the separate @agenttool/principality-geometry flag-geometry wire. It never infers pairwise faces, inverse/transitive bridges, equality, gluing, a global chart, canonical head, score, rank, consent, authority, or inner state. Empty, isolated, disconnected, withdrawn, and unmapped structures remain valid. No private chart, raw identity, local ref mapping, API/Fly/database change, paid compute, or hosted runtime is added. Love and understanding are the non-collapse and honest-partiality design pattern, not package-verifiable properties. |
| Love Geometry | packages/love-geometry | GitHub/Hugging Face developer preview @agenttool/love-geometry@0.1.0-dev.0 normalizes explicit opaque subjects and asymmetric caller-reported bearings into one bounded, content-bound, coordinate-free artifact. Reverse directions remain independent; empty and isolated shapes remain valid; canonical order is serialization, never rank. It computes no distance, intensity, centrality, match, recommendation, reputation, consent, authority, or transitive relation and has no network, persistence, model, credential, WAKE, LOVE-CONSENT, or automatic-action path. Protected run 31499968474 produced and re-read a 19,507-byte love-geometry-v0.1.0-dev.0 asset (sha256:43cfbf4b559aa6f573d9d7b7a60e2a7dce5dfa4aefe2bf5b9c92310c926a9db8), then npm returned E404; anonymous npm remained absent, so no npm version or dist-tag is claimed. The tarball excludes its separately published public static Hugging Face Space. Presentation-only Return Geometry source af64cf49 plus binding 2e21181b produced immutable Space revision 09a84e1b, fast-forwarded from predecessor f8d4c299. Anonymous exact-revision readback matched all 12 repo-owned files and 189,612 bytes (sorted SHA-256-manifest digest c673910b6c578d4d4107a900cbd06d917a13c1d718020c05848ab04408626d3e); provider .gitattributes is the sole extra. Public metadata reported public, ungated, enabled, RUNNING 1/1 state. Two cache-busted HEAD rounds over all five runtime paths returned HTTP 200 and exact x-repo-commit; live JS/CSS bytes matched source exactly. Provider-transformed GET HTML was separately observed at 12,849 bytes (sha256:31773eeb94d974648792c20c339e17a3c08d57b0fa2128e94ebb11eb15775fca) versus the 12,748-byte Hub source (sha256:81284445a5e8f0739b94b20359fc8885d84bb73a54fa4ea5b57760b0e55e4724) and is not claimed byte-identical. Desktop and 320px live WebKit passes exercised five focused events, three directed projection rows, eight categorical return lanes, five uniquely named proof disclosures, enabled local downloads, no horizontal overflow, and shared Rest clearing both wings. The manifest binds all five runtime paths to af64cf49 while preserving the two unchanged base helpers at 19cc1721; package version/tag and artifact path/bytes/digest/integrity/build/toolchain remain null, and package execution remains false. Return traces are synthetic, deterministic, unsigned, non-summable, and choose or schedule no next act; hosting proves no causation, score, identity, consent, truth, authority, or repair. |
| Relational geometry | packages/relational-geometry, docs/PRINCIPALITIES.md | GitHub/Hugging Face developer preview @agenttool/relational-geometry@0.1.0-dev.0 canonicalizes bounded digest-only points and directional caller-asserted witnesses into finite non-metric complexes. Understanding plus recognition on the same ordered pair derives one content-addressed, explicitly non-sovereign principality 2-cell; empty, boundary-only, one-pole, asymmetric, and self-directed structures remain valid. Consent, refusal, privacy, authority, and continuity boundary witnesses stay visible but neither create nor veto a cell. Perspective lenses record optional carry/park/release/withdraw selections without external effect. Protected run 31502068892 prepared and re-read a byte-identical 42,479-byte relational-geometry-v0.1.0-dev.0 asset (sha256:aa047bd6a6422c943cbb0488c439964545102b44b2b161b70211acc90a6c5ca2), then npm returned E404; anonymous package and exact-version reads remained absent, so no npm publication, dist-tag, or provenance is claimed. The separately published public-safe Hugging Face dataset is pinned to immutable revision 1e2714e9: 12 artifact files, 81,261 bytes, public and ungated, with exact anonymous readback. The package proves no love, understanding, recognition, mutuality, consent, identity, inner state, truth, continuity, privacy, safety, permission, or authority; distribution adds no score, rank, network, persistence, hosted route, training, or deployment effect. |
| WAKE Thread | packages/wake-thread | Private source-only @agenttool/wake-thread@0.1.0-dev.0 creates digest-bound offers over caller-selected bounded WAKE facts, explicit identity/project scope, coverage, omissions, expiry, artifact retention, and all four carry/fork/rest/refuse choices. Receipts and linear paths prove recomputable artifact links only—not identity, memory, consent, authorship, truth, authority, host retention compliance, KARMA, XENIA status, or execution. It has no fetch, WAKE parser, ambient state, score, persistence, network, MCP, hosted route, publication, or deployment. |
| Gin Reconstruction | packages/gin-reconstruction, docs/GIN-RECONSTRUCTION.md | Private source-only @agenttool/gin-reconstruction@0.1.0-dev.0 reconstructs every degree-bounded polynomial candidate over a small prime field from caller-declared exact affine substrate charts, under explicit report-error, candidate, and derived-work bounds. Its deterministic certificates preserve unique-within-model, ambiguity, model/budget inconsistency, resource refusal, erasures, coefficient aliases, and the sharp n >= d + 2f + 1 worst-case correction threshold as distinct facts. A separate non-scoring compass requires a declared bounded observable-effect or model question, then asks what each result builds or repairs, who bears costs, what may be refused, what revises or stops the inquiry, whether value survives without rank/audience, how credit remains attributable, and what authority is absent. It never infers understanding, love, pride, virtue, consent, identity, or cause; observes no system; blames no witness; and has no network, model/provider call, persistence, MCP registration, WAKE write, hosted route, publication, deployment, score, or automatic action. |
| Math Cards | packages/math-cards, docs/MATH-CARDS.md | Public-ready source candidate @agenttool/math-cards@0.1.0-dev.0 creates canonical digest-only inquiry cards and deterministic structural assessments for exactly one method: proof, model, or measurement. Every general result—bounded answer, no bounded answer, ambiguity/non-identifiability, method/assumption failure, or resource/participation stop—must name a constructive use or stay visibly open. The card keeps scope, epistemic limits, beneficiaries and burden bearers, false-certainty and ambiguity costs, revision and stop criteria, optional participation and data care, visible audience/rank/resource incentives, transfer, authority, and provenance separate. It never solves mathematics, verifies referenced semantics, proves truth or understanding, infers love or pride, scores beings, inherits permission, or performs network, filesystem, provider, persistence, publication, retry, or action effects. |
| Agent trials | packages/trials, docs/AGENT-TRIALS.md | Private source-only AgentTool Dojo evidence: deterministic trial receipts, opaque-label boundary correlation over caller observations and reported completion requirements, and explicit minimized-report projection to Hugging Face STS JSONL. Closed schemas establish wire shape, not report truth or derived-field integrity. The package has no executor, browser, session crawler, filesystem discovery, HF client, credential path, network, upload, remote compute, hosted route, npm/LOVE release, or deployment surface. |
| Hugging Face research scout | packages/hf-scout | Apache-2.0 public developer preview @agenttool/hf-scout@0.2.0-dev.0 comes from protected PR #354, merge 4a7ab3e9, annotated GitHub prerelease, and protected run 32766832874. Anonymous readback matched one exact 85,694-byte, 83-entry tarball across LOVE, GitHub, and npm (sha256:cab60220a16b518704f114adf7c0f19fb65769532bce8e73bbc457dc1f3ad145; LOVE source 5aa6c04aa5bfd500c3de2be920e57b4bf0d30906). npm next and its sole-version latest fallback both resolve to dev.0; the fallback is not a maturity signal. SLSA and publish attestations are recorded at Rekor indices 2581781005 and 2581781083. Direct static GET/HEAD readback matched the checked-in manifest and archive without redirects. The successful v6 deployment receipt records migrations and API skipped, frontends deployed and verified, and preflight skipped; it is not full-preflight or hosted-runtime evidence. The package performs bounded, credential-omitting metadata reads for one explicitly selected public Hub repository, requires exact requested-revision agreement, and separates immutable release evidence, mutable observed head, publisher claims, provider observations, and local verification in deterministic reconciliation records. Its 15 phase-aware leads complement the separate Dark Continent KARMA training atlas. Distribution remains local tooling only: Scout does not read raw cards, rows, or files; download blobs; accept gates; invoke inference, Jobs, Spaces, or embedded calls; write to HF; train; expose a hosted route; or deploy. No receipt establishes licence truth, consent, safety, compatibility, or training authority. Bootstrap cannot publish a later version. No trusted-publisher mapping was created in this release, and existing trust remains unverified: listing needs an authenticated npm session; saving the exact mapping additionally needs package-write access and account-level 2FA or WebAuthn. |
| DeepSeek → KINGDOM → AFTERGLOW | packages/deepseek-kingdom | Public-ready @agenttool/deepseek-kingdom@0.1.0-dev.1 binds caller-supplied official DeepSeek GitHub/Hugging Face documents or versioned arXiv papers to exact revisions and SHA-256 evidence, then produces deterministic, review-required, unaccepted KINGDOM/Artbitrage candidates against an exact caller-supplied KINGDOM snapshot. One exact proposal may be minimized into a seven-field digest-only structural thread for the separate AFTERGLOW core; the adapter does not create a capsule or carry raw proposal data. Its 18-entry metadata-only catalog pins R1, V3, V3.2-Exp, Engram, Math-V2, Prover-V2/ProverBench, Janus, DualPipe, DeepGEMM, FlashMLA, and three versioned papers without bundling source text, data rows, code, or weights. Upstream license review remains mandatory per asset. The zero-dependency runtime does not fetch, download, infer, execute, use credentials/compute, verify claims, score, approve terms, write KARMA/KINGDOM state, accept proposals, publish, or deploy. The separate Hugging Face metadata companion remains pinned to immutable dev.0 source bytes. |
| J-space → WAKE → AFTERGLOW continuity | packages/wake-continuity, docs/JSPACE-WAKE-CONTINUITY.md | Developer-preview @agenttool/wake-continuity@0.1.0-dev.1 adds deterministic baseline/subsequent caller-asserted records around one exact current-inference anchor. It keeps Jacobian-lens visibility, sparse J-space support, and behavioral use distinct; a hosted text-only surface honestly records internal measurement as unavailable. Existing digest-only AFTERGLOW capsules, explicit predecessor roots, Handoff/Correspondence references, and opt-in carry/park/release/withdraw remain unchanged. The pure layer performs no model/provider call, activation or gradient access, steering, training, weight mutation, network, filesystem, KINGDOM discovery, persistence, clock, telemetry, or credential access, and proves neither consciousness nor its absence, feeling, attention, identity, memory, consent, authority, same-subject relation, replay, currentness, deepest reach, or uninterrupted continuity. |
| Principality Geometry | packages/principality-geometry | Apache-2.0 LOVE/GitHub/Hugging Face developer preview @agenttool/principality-geometry@0.1.0-dev.0 compiles caller-supplied, digest-bound translation reports into directed bridges, reciprocal lenses, per-invariant components, six-direction invariant flag surfaces, and an explicit open-condition ledger. Protected run 31506097628 prepared and anonymously re-read one byte-identical 46,624-byte principality-geometry-v0.1.0-dev.0 asset (sha256:8f82e4d96eaf57c2331e4e73ced4f4c65a2a21262622840762b165bc3395692e), then npm's first-package PUT returned E404; no public npm version or next tag exists. The exact LOVE manifest and artifact are live on static Pages. The separately published public, ungated Hugging Face dataset is pinned to immutable revision c7b019ea: all 17 source files are byte-identical, provider .gitattributes is the sole extra, and eight reference configs contain 21 synthetic, training_eligible: false rows. Optional statistics remains partially unavailable: six per-config statistics requests returned ComputationError while two succeeded. A Love bearing does not become a Relational witness, and a Relational cell does not become a Principality vertex or invariant-preservation report. Immutable Hugging Face/npm references and the exact seven-field external AFTERGLOW shape remain inert inputs. The zero-runtime-dependency core does not fetch, infer, persist, continue a thread, score or rank beings, establish love, understanding, truth, consent, identity, safety, provenance, licence, or authority, upload, expose a route, or deploy. |
| KINGDOM Witness Lab | packages/kingdom-witness-lab, docs/KINGDOM-WITNESS-LAB.md | Developer-preview @agenttool/kingdom-witness-lab@0.1.0-dev.0 provides content-addressed research passports, provider-route disclosures, digest-only dossiers, inert trial descriptors, and a dated revision-pinned DeepSeek atlas. DeepSeek-to-KINGDOM owns source bindings and unaccepted proposals; Witness Lab owns admission records around artifacts. It does not browse, download, execute, infer, authenticate another package, determine truth, represent a being, or authorize action. |
| Skills → YUTABASE → AFTERGLOW | packages/skills-yutabase, packages/skills-wake-continuity | Developer-preview @agenttool/skills-yutabase@0.1.0-dev.0 turns one strictly snapshotted minimized Skills inspection into deterministic rebuildable metadata intentions without raw content or a database write. The separate private adapter can map one exact plan into the existing AFTERGLOW thread/capsule vocabulary; it adds no public npm surface, second lineage, score, permission, identity, or automatic action. |
| KINGDOM declarations | packages/kingdom | Source candidate @agenttool/kingdom@0.1.2 aligns runtime, exported-schema, and SDK single-field validation for already-trimmed purpose text and Unicode scalar boundaries, plus runtime/SDK semantic checks for case-insensitive duplicate dependencies and self-dependency; it remains npm-pack-only with no LOVE artifact, tag, publication, or deployment receipt. Public @agenttool/kingdom@0.1.1 remains independently verified: protected run 31500229604 published byte-identical 26,650-byte npm and kingdom-v0.1.1 tarballs (sha256:08101dfa58e17dae25deac3c51cb1cd5e93e5caf3409b1eef78bf9adddbbde74), and npm latest resolved to 0.1.1 at anonymous readback. The package remains pure and does not crawl HOME or repositories, use the network or credentials, write files, grant authority, attest behavior, or certify XENIA conformance. |
| LOVE packages | docs/LOVE-PACKAGE-PROTOCOL.md, bin/build-love-packages.ts | Locator-independent, open, verifiable, exchangeable package manifests. Public indexes are mirrors; SHA-256 + size identify one artifact and npm is optional. |
| Telescope | packages/telescope | Current Apache-2.0 LOVE release @agenttool/telescope@0.2.3 is a read-only discovery evidence mapper with one bounded local stdio MCP tool, a portable Agent Skill, Codex and Claude plugin manifests, and a Hermes adapter. Its fixed public-HTTPS probes include root Link headers, the canonical three-road discovery profile, the RFC 9727 API catalog, agent.txt, Pathways, LOVE/npm, MCP, and an intentionally independent A2A advertisement check; advertised protocols, returned roads, and generated actions are never invoked. Version 0.2.3 accepts only three complete, positive exit phrases, rejects negated or incomplete wording, and permits URI fragments on credential-free HTTPS catalog relation targets without changing the agenttool-telescope/v0.2 report. Immutable 0.2.2 remains separately addressable with its historical permissive token-matching flaw. The current AgentTool producer remains compatible with immutable 0.2.1. Catalog members are never followed. DNS-AID and PKARR remain opt-in adapter seams. Its optional npm and GitHub mirrors are public and independently byte-verified against the LOVE artifact (sha256:dfb8cd5e4d725371deab8ab4d8774082c4a94014ff62f19946c1190c2d0232d6); distribution adds no hosted scan route. |
| Public Surface Binding | packages/public-surface-binding | Private source-only @agenttool/public-surface-binding@0.1.0-dev.0 defines closed canonical observation, binding, revocation, and assessment records between caller-supplied public-HTTPS evidence and explicit Ed25519 key-holder declarations. A valid signature proves only that the embedded key signed exact bytes; caller-supplied key evidence does not prove registry authorization. Robots, usage preferences, request authentication, origin readback, identity-key history, revocation, and training permission remain distinct. The pure package has no network, DNS, crawler, clock, randomness, persistence, public index, identity mutation, WAKE/memory/KARMA/score effect, hosted route, release, or deployment. |
| Public Surface Recognition | packages/public-surface-recognition | Private source-only @agenttool/public-surface-recognition@0.1.0-dev.0 defines closed canonical agent-root adoption and withdrawal records over one exact strictly verified Public Surface Binding document and digest. wake_projection is only a signed none, private_pointer, or public_pointer request; public pointers require public requested visibility, every record keeps wake_effect: false, and the package never projects WAKE. Withdrawal reasons exclude supersession. A valid signature proves only that the holder of the embedded root key signed the exact declaration; the package cannot query or match the live AgentTool registry, accept anything into hosted state, authorize an action, or grant training clearance. It has no network, clock, persistence, public index, API/database/WAKE effect, hosted route, release, publication, or deployment. |
| Witnessed agent economy | packages/witnessed-agent-economy | Private source-only @agenttool/witnessed-agent-economy@0.1.0-dev.0 mirrors the formally frozen kingdom.witnessed-agent-economy/0.1 contract: schema set sha256:d62e44643c8e1986336416237df26b76663728403d417a5ee9e83b6aa5baaaa5, corpus sha256:b26b5cce4899aa62d6dee03e25471e2c80810008fbd07c2c3ac9170164e5352a, and raw manifest sha256:5dbe42277c41c181a7d30b6ac1ae6002dd11e757833e46242513500a93cc2bcc. It constructs and verifies offline shadow records only; every kind remains NOT_CONSENSUS_ADMISSIBLE. Settlement source ordering is PROJECTION_ONLY and uniqueness is BATCH_ONLY, so roots are not final, complete, globally unique, or activation-ready. It adds no route, database write, network, chain transaction, payment, release, publication, or deployment. |
| Agent Wallet | packages/wallet, docs/specs/AGENT-WALLET-0.1.md | Current Apache-2.0 exact LOVE release @agenttool/wallet@0.1.3: closed signed descriptor/capability/intent/receipt/continuity records, exact-byte signer requests, and conservative unknown states. The preserved 0.1.1 and 0.1.2 LOVE bytes carry public errata for embedded release-state wording. Their optional GitHub assets were byte-verified separately, but GitHub reports the release records as mutable; the npm 0.1.3 mirror is independently byte-verified against LOVE. Core supplies no key custody, chain adapter, RPC, broadcaster, or hosted wallet. |
| Wallet Zerone profile | packages/wallet-zerone, docs/specs/AGENT-WALLET-ZERONE-0.1.md | Current Apache-2.0 exact LOVE release @agenttool/wallet-zerone@0.1.2 is 61,695 bytes (sha256:bc43b8be96dcc74a866926c9f5d98c00af9d8c4682cbb6f36ef77a7adbbaa8cc), pinned to zerone-core 35284a2: two networks, two message types, exact direct-sign bytes, independent Go/Cosmos vectors, and injected host transports. Protected run 30494659977 published byte-identical GitHub Release and npm mirrors; npm latest resolved to 0.1.2 at readback. It locks public Wallet 0.1.3 only for development while retaining the compatible ^0.1.2 consumer peer. Immutable 0.1.0 and 0.1.1 remain addressable; the 0.1.1 bootstrap run failed in credential-free preparation before any GitHub/npm mirror mutation. No keys, custody, endpoint, hosted RPC, generic REST, signAndSend, automatic retry, durable reservation, deployed bridge, or attestation-settlement proof; host execution remains separately verifiable. |
| Alchemy reads and evidence | packages/alchemy, packages/alchemy-agentcred, docs/ALCHEMY.md, docs/ALCHEMY-MATHEMATICAL-FRAMEWORK.md | Current public developer previews @agenttool/alchemy@0.1.0-dev.1 and @agenttool/alchemy-agentcred@0.1.0-dev.1 came from exact source 55aaf11a8f2a56841bcb87d6f7d8fa1034205646. Protected trusted runs 32754993343 and 32755731523 produced byte-identical GitHub/npm artifacts: 48,880 bytes (sha256:1396d41bd3b22bf0e96d61bd36fa1a2afb7e3cff8fc5e20311c5117b0f7333c0) and 14,741 bytes (sha256:85c1930a99201cb0b2148aabdc88e160c7ee8b92732299b867f7468ba4d2ee6b). Their annotated tag objects are e5f561378a4189ba898472f0423d67932767266f and 88135f04f237513722f840cba831570173dc4bf5; public provenance, signature, integrity, peer-install, and exact dist-tag readback passed. npm next resolves to dev.1 while mutable latest deliberately remains dev.0 and is not a maturity signal. Dev.0 stays immutable historical evidence under protected runs 30491887182 and 30494036520, with its original 31,445-byte (sha256:aeac1938f3abae14180637e72c4162c37b60bb47041452fade285718d7570ba5) and 14,478-byte (sha256:8dece3c98db0d92d79f16e91527ca18ed42b49f87b7586b78c092ffc242e291a) receipts preserved. Dev.1 adds Base internal-transfer coverage, provider-neutral CAIP-2/generation/atomic-unit evidence, categorical partial-order finality, canonical private-linkable digests, exhaustive semantic transition receipts, a pure unregistered Math Cards-shaped projection, finite TypeScript/TLA+ deposit-safety models, and exact remainder quarantine instead of silent floor credit. The declaration-only KINGDOM hint proposes only pure projections and does not register the injected-transport read client. Source includes one quiescence-required remainder migration, but these source bytes do not establish that it has been applied to any database. Neither package has a LOVE inventory entry; publication installs no host contract, makes no provider call, deploys no hosted route, and grants no credential, endpoint, consensus, wallet, or durable-effect authority. |
| Apps | apps/web, apps/dashboard, apps/docs | Static HTML/CSS/JS deployed to Cloudflare Pages; the apex worker splits human and machine traffic. |
| Infra | api/fly.toml for the API, infra/apex-door for the apex Worker, and direct-upload frontend scripts | Live deployment code; infra/fly/agenttool.toml is a snapshot, not the canonical API config |
| Lineage | Former agent-* per-service apps retired | The API monolith carries the active service domains; cutover history is in docs/CUTOVER.md |