Skip to content

architecture.md

Latest commit

 

History

History
58 lines (46 loc) · 3.2 KB

architecture.md

File metadata and controls

58 lines (46 loc) · 3.2 KB
Raw

Architecture (v0.3)

AURA is the harness around your host loop — ingress, policy, egress, record. Egress is a gate inside AURA, not a separate product name for the whole harness.

Ingress → Body ↔ Egress (policy) → Audit trail → Session export
                ↑                      ↓
           (tool execute)          Observers

Data flow

flowchart LR
    IN[Ingress] --> BODY[Body / host]
    BODY <-->|skills & turns| EG[Egress gate]
    EG --> BODY
    EG --> AUDIT[Audit trail]
    AUDIT --> EXPORT[Session export]
    AUDIT -.-> OBS[Observers]
Loading

→ Usage: using-aura.md · Identity: trust-paths.md

Core modules

Module Role
aura/agents/ Registry — ULID, agent_ref, ID trailer
aura/core/session.py Sessions, approve + principal
aura/core/spine.py Audit trail + hash chain
aura/core/constraints.py Live policy on emit
aura/core/conformance.py Declared vs observed
aura/core/audit_report.py Findings + recommendations
aura/core/spectrum.py Level, services, coat/planes summary
aura/core/spectrum_enforcement.py spectrum.level → injected egress rules at session open
aura/core/spectrum_services.py spectrum.services[] → observer preset wiring at session open
aura/core/spectrum_identity.py spectrum.identity_required + level defaults → verified operator gate at session open (#73)
aura/core/escalations.py escalations[] playbooks on SLO/drift/alert/constraint triggers (#47)
aura/core/capabilities.py capabilities[] parse, capability_scope, last-moment inject (#48)
aura/core/schema_validation.py variables.schema_refs, schema_check egress validation (#78)
aura/core/secrets.py SecretBroker protocol (env / map / callable / chain)
aura/core/payload_redaction.py Secret-like keys and injected values stripped from spine payloads
aura/membrane/ Ingress context, egress guarded calls
aura/sequencer/ Prescriptive step pipelines
aura/hosts/ Skillware / mock skill host
aura/observers/ Parallel subscribers
aura/exporters/ JSONL summary, OTel JSONL

Extension surface

Shipped: ToolHost protocol, Monitor + Break + Limit observer presets, spectrum.services[] runtime wiring (#77), OTel export with promoted span attributes, sequencer when guards, spectrum.level enforcement (low → full bind), capability broker at egress (#48) — see aura-levels.md, capabilities.md, and reference-tool-host-capstone.md.

Roadmap: Limit preset, signed audit packs, HTTP fleet API, brain/memory/MCP type plugins — ROADMAP.md.

Input-layer model (brain, memory, tools as adapters): stack-position.md.

Principle: new capabilities emit or subscribe to the spine — core loop unchanged.