README
¶
Core
Purpose
Active core-runtime surface for the helm-ai-kernel project.
Canonical Interface
- Source path:
core - Surface type:
core-runtime - Package/source identity:
core - Coverage record:
docs/documentation-coverage.csv
Local Commands
make docs-coveragefrom the repository root verifies coverage for this surface.
Documentation Contract
Generated surface README. This file is a local ownership and validation contract, not the primary docs information architecture entry point. It covers the active core-runtime surface. Keep it aligned with the source path above and update docs/documentation-coverage.csv when ownership, interfaces, validation, or lifecycle status changes.
Directories
¶
| Path | Synopsis |
|---|---|
|
cmd
|
|
|
bootstrap
command
|
|
|
channel_gateway
command
Command channel_gateway starts a standalone HTTP server that receives channel webhooks, normalises them into ChannelEnvelopes, and logs them.
|
Command channel_gateway starts a standalone HTTP server that receives channel webhooks, normalises them into ChannelEnvelopes, and logs them. |
|
helm-ai-kernel
command
quantum_posture: boundary profile CLI signs and verifies with classical Ed25519 only; no hybrid or post-quantum claim.
|
quantum_posture: boundary profile CLI signs and verifies with classical Ed25519 only; no hybrid or post-quantum claim. |
|
pack_verify
command
Command pack_verify verifies a pack directory structure and policy integrity.
|
Command pack_verify verifies a pack directory structure and policy integrity. |
|
release-permit-verify
command
|
|
|
skill_lint
command
Command skill_lint validates a skill bundle manifest against the schema.
|
Command skill_lint validates a skill bundle manifest against the schema. |
|
skill_pack
command
Command skill_pack packages a skill directory into a signed bundle.
|
Command skill_pack packages a skill directory into a signed bundle. |
|
tee-collateral
command
|
|
|
pkg
|
|
|
a2a
Package a2a provides the Agent-to-Agent trust protocol for HELM.
|
Package a2a provides the Agent-to-Agent trust protocol for HELM. |
|
a2a/payments
Package payments implements the AP2 (Agent Payments Protocol) for HELM A2A.
|
Package payments implements the AP2 (Agent Payments Protocol) for HELM A2A. |
|
actiongraph
Package actiongraph provides signal-to-proposal conversion with dependency graphs.
|
Package actiongraph provides signal-to-proposal conversion with dependency graphs. |
|
actioninbox
Package actioninbox provides human governance and approval inbox for fail-closed execution control.
|
Package actioninbox provides human governance and approval inbox for fail-closed execution control. |
|
aibom
Package aibom provides AI Bill of Materials (AI-BOM) tracking for governed components.
|
Package aibom provides AI Bill of Materials (AI-BOM) tracking for governed components. |
|
api
Package api — RFC 7807 Problem Detail error responses for the HELM API.
|
Package api — RFC 7807 Problem Detail error responses for the HELM API. |
|
api/trust
Package trust provides HTTP API handlers for the Trust Registry.
|
Package trust provides HTTP API handlers for the Trust Registry. |
|
attention
Package attention provides the People/Programs/Accounts routing layer for HELM.
|
Package attention provides the People/Programs/Accounts routing layer for HELM. |
|
audit
Package audit — Timeline reconstruction.
|
Package audit — Timeline reconstruction. |
|
auth
Package auth — apikey.go provides pre-shared API key authentication middleware.
|
Package auth — apikey.go provides pre-shared API key authentication middleware. |
|
authority
Package authority defines the canonical authority evaluation contract for HELM.
|
Package authority defines the canonical authority evaluation contract for HELM. |
|
boundary/approvalceremony
quantum_posture: approval grant signatures in this lifecycle are classical Ed25519 only until a source-owned hybrid contract is introduced.
|
quantum_posture: approval grant signatures in this lifecycle are classical Ed25519 only until a source-owned hybrid contract is introduced. |
|
boundary/approvalverify
quantum_posture: approval quorum verification uses classical Ed25519 assertions; this package does not claim hybrid or post-quantum support.
|
quantum_posture: approval quorum verification uses classical Ed25519 assertions; this package does not claim hybrid or post-quantum support. |
|
boundary/extauthz
quantum_posture: ext-authz verifies classical Ed25519 receipt material; scoped-stop enforcement changes authorization, not cryptographic posture.
|
quantum_posture: ext-authz verifies classical Ed25519 receipt material; scoped-stop enforcement changes authorization, not cryptographic posture. |
|
boundary/profile
quantum_posture: posture attestations hash-seal with SHA-256 and sign with classical Ed25519 when a signer is configured; no hybrid or post-quantum claim.
|
quantum_posture: posture attestations hash-seal with SHA-256 and sign with classical Ed25519 when a signer is configured; no hybrid or post-quantum claim. |
|
boundary/profile/updatebundle
Package updatebundle defines the signed offline update-bundle format for disconnected appliance fleets: a JCS-canonical (RFC 8785) manifest over a tar.gz payload, hash-sealed and Ed25519-signed, verifiable fully offline.
|
Package updatebundle defines the signed offline update-bundle format for disconnected appliance fleets: a JCS-canonical (RFC 8785) manifest over a tar.gz payload, hash-sealed and Ed25519-signed, verifiable fully offline. |
|
bridge
Package bridge provides KernelBridge — the composition layer that wires Guardian, Executor, ProofGraph, and Budget into a single governance call.
|
Package bridge provides KernelBridge — the composition layer that wires Guardian, Executor, ProofGraph, and Budget into a single governance call. |
|
budget
estimate.go provides pre-execution cost estimation based on historical data.
|
estimate.go provides pre-execution cost estimation based on historical data. |
|
buildguard
Package buildguard — Build Guard.
|
Package buildguard — Build Guard. |
|
bundles
Package bundles implements the HELM policy bundle runtime.
|
Package bundles implements the HELM policy bundle runtime. |
|
canonicalize
Package canonicalize provides RFC 8785 (JSON Canonicalization Scheme) compliant serialization for deterministic hashing of HELM artifacts.
|
Package canonicalize provides RFC 8785 (JSON Canonicalization Scheme) compliant serialization for deterministic hashing of HELM artifacts. |
|
celcheck
Package celcheck validates CEL policy packs at compile time.
|
Package celcheck validates CEL policy packs at compile time. |
|
certification
Package certification implements the HELM Agent Certification Framework.
|
Package certification implements the HELM Agent Certification Framework. |
|
certification/admission
Package admission implements attestation-based admission control for packs and deployments.
|
Package admission implements attestation-based admission control for packs and deployments. |
|
channels
Package channels provides the inbound channel gateway for multi-channel messaging.
|
Package channels provides the inbound channel gateway for multi-channel messaging. |
|
channels/lark
Package lark provides the inbound channel adapter for Lark (Feishu) messaging.
|
Package lark provides the inbound channel adapter for Lark (Feishu) messaging. |
|
channels/slack
Package slack provides the inbound channel adapter for Slack messaging.
|
Package slack provides the inbound channel adapter for Slack messaging. |
|
channels/telegram
Package telegram provides the inbound channel adapter for Telegram messaging.
|
Package telegram provides the inbound channel adapter for Telegram messaging. |
|
compliance
api.go provides HTTP handlers for real-time compliance scoring.
|
api.go provides HTTP handlers for real-time compliance scoring. |
|
compliance/cftc
Package cftc implements CFTC compliance for AI agent governance.
|
Package cftc implements CFTC compliance for AI agent governance. |
|
compliance/compiler
Package compiler transforms legal obligations into executable CEL policies.
|
Package compiler transforms legal obligations into executable CEL policies. |
|
compliance/controls
Package controls provides the ControlsGraph — a directed graph linking obligations, controls, evidence types, checks, and compensating controls.
|
Package controls provides the ControlsGraph — a directed graph linking obligations, controls, evidence types, checks, and compensating controls. |
|
compliance/csr
Package csr implements the Compliance Source Registry (CSR) — a first-class product surface that defines every compliance source connector HELM integrates.
|
Package csr implements the Compliance Source Registry (CSR) — a first-class product surface that defines every compliance source connector HELM integrates. |
|
compliance/docs
Package docs implements compliance documentation generation for HELM.
|
Package docs implements compliance documentation generation for HELM. |
|
compliance/dora
Package dora implements EU DORA (Digital Operational Resilience Act) compliance.
|
Package dora implements EU DORA (Digital Operational Resilience Act) compliance. |
|
compliance/enforcement
Package enforcement integrates SCO with SwarmPDP for policy evaluation.
|
Package enforcement integrates SCO with SwarmPDP for policy evaluation. |
|
compliance/euaiact
Package euaiact implements EU AI Act (Regulation 2024/1689) compliance.
|
Package euaiact implements EU AI Act (Regulation 2024/1689) compliance. |
|
compliance/evidence
Package evidence provides the EvidencePack builder and dedicated receipt types.
|
Package evidence provides the EvidencePack builder and dedicated receipt types. |
|
compliance/fca
Package fca implements UK FCA (Financial Conduct Authority) compliance profile.
|
Package fca implements UK FCA (Financial Conduct Authority) compliance profile. |
|
compliance/gdpr
Package gdpr implements EU GDPR (General Data Protection Regulation) compliance profile.
|
Package gdpr implements EU GDPR (General Data Protection Regulation) compliance profile. |
|
compliance/hipaa
Package hipaa implements HIPAA compliance for AI agent governance.
|
Package hipaa implements HIPAA compliance for AI agent governance. |
|
compliance/jkg
Package jkg provides the Jurisdiction Knowledge Graph for compliance.
|
Package jkg provides the Jurisdiction Knowledge Graph for compliance. |
|
compliance/mica
Package mica implements EU MiCA (Markets in Crypto-Assets) compliance.
|
Package mica implements EU MiCA (Markets in Crypto-Assets) compliance. |
|
compliance/normalize
Package normalize provides canonical output models for compliance source adapters.
|
Package normalize provides canonical output models for compliance source adapters. |
|
compliance/obligations
Package obligations implements the two-tier obligations compiler.
|
Package obligations implements the two-tier obligations compiler. |
|
compliance/regwatch
Package regwatch implements K2.5-powered regulatory monitoring.
|
Package regwatch implements K2.5-powered regulatory monitoring. |
|
compliance/risk
Package risk provides automated third-party risk assessment for compliance.
|
Package risk provides automated third-party risk assessment for compliance. |
|
compliance/sec
Package sec implements SEC compliance for AI agent governance.
|
Package sec implements SEC compliance for AI agent governance. |
|
compliance/sox
Package sox implements SOX (Sarbanes-Oxley) compliance profile.
|
Package sox implements SOX (Sarbanes-Oxley) compliance profile. |
|
conform
Package conform implements the HELM Conformance Standard v1.0 engine.
|
Package conform implements the HELM Conformance Standard v1.0 engine. |
|
conform/adversarial
Package adversarial provides conformance-level adversarial test suites per §8.1 of the HELM Conformance Standard.
|
Package adversarial provides conformance-level adversarial test suites per §8.1 of the HELM Conformance Standard. |
|
conform/gates
Package gates provides the gate implementations and a default registry.
|
Package gates provides the gate implementations and a default registry. |
|
conformance
Package conformance provides test fixtures for conformance verification.
|
Package conformance provides test fixtures for conformance verification. |
|
conformance/cases
Package cases provides concrete conformance test implementations with fixtures and generators for each test level.
|
Package cases provides concrete conformance test implementations with fixtures and generators for each test level. |
|
conformance/sandbox
Package sandbox provides the conformance test suite for SandboxActuator implementations.
|
Package sandbox provides the conformance test suite for SandboxActuator implementations. |
|
conformance/scenarios
Package scenarios implements the 6 canonical incident scenario tests specified in the HELM AI Kernel Canonical Implementation Plan.
|
Package scenarios implements the 6 canonical incident scenario tests specified in the HELM AI Kernel Canonical Implementation Plan. |
|
connector
Package connector provides zero-trust enforcement for connectors.
|
Package connector provides zero-trust enforcement for connectors. |
|
connectors/arc
Package arc provides the HELM connector for ARC-AGI-3 benchmark environments.
|
Package arc provides the HELM connector for ARC-AGI-3 benchmark environments. |
|
connectors/github
Package github provides a HELM connector for the GitHub API.
|
Package github provides a HELM connector for the GitHub API. |
|
connectors/linear
Package linear provides a HELM connector for the Linear GraphQL API.
|
Package linear provides a HELM connector for the Linear GraphQL API. |
|
connectors/oauth2
Package oauth2 provides shared token management for HELM connectors that require OAuth2 authentication.
|
Package oauth2 provides shared token management for HELM connectors that require OAuth2 authentication. |
|
connectors/polymarket
Package polymarket provides a HELM connector for the Polymarket prediction market.
|
Package polymarket provides a HELM connector for the Polymarket prediction market. |
|
connectors/sandbox
Package sandbox provides a bridge between the legacy sandbox.Runner interface and the modern SandboxActuator contract.
|
Package sandbox provides a bridge between the legacy sandbox.Runner interface and the modern SandboxActuator contract. |
|
connectors/sandbox/claudemanaged
Package claudemanaged implements a HELM SandboxActuator for Claude Managed Agents self-hosted workers.
|
Package claudemanaged implements a HELM SandboxActuator for Claude Managed Agents self-hosted workers. |
|
connectors/sandbox/daytona
Package daytona implements the SandboxActuator for Daytona sandboxes.
|
Package daytona implements the SandboxActuator for Daytona sandboxes. |
|
connectors/sandbox/e2b
Package e2b implements the SandboxActuator for E2B sandboxes.
|
Package e2b implements the SandboxActuator for E2B sandboxes. |
|
connectors/sandbox/opensandbox
Package opensandbox implements the SandboxActuator for Alibaba OpenSandbox.
|
Package opensandbox implements the SandboxActuator for Alibaba OpenSandbox. |
|
connectors/siem/datadog_logs
Package datadog_logs implements an OTel SpanExporter that translates helm-ai-kernel governance spans into Datadog Logs Intake events posted to /api/v2/logs.
|
Package datadog_logs implements an OTel SpanExporter that translates helm-ai-kernel governance spans into Datadog Logs Intake events posted to /api/v2/logs. |
|
connectors/siem/elastic_ecs
Package elastic_ecs implements an OTel SpanExporter that translates helm-ai-kernel governance spans into ECS-shaped documents posted to the Elasticsearch _bulk API.
|
Package elastic_ecs implements an OTel SpanExporter that translates helm-ai-kernel governance spans into ECS-shaped documents posted to the Elasticsearch _bulk API. |
|
connectors/siem/loki
Package loki implements an OTel SpanExporter that translates helm-ai-kernel governance spans (carrying OTel GenAI semconv attributes plus the helm.* governance namespace) into Grafana Loki push events.
|
Package loki implements an OTel SpanExporter that translates helm-ai-kernel governance spans (carrying OTel GenAI semconv attributes plus the helm.* governance namespace) into Grafana Loki push events. |
|
connectors/siem/splunk_hec
Package splunk_hec implements an OTel SpanExporter that translates helm-ai-kernel governance spans (carrying OTel GenAI semconv attributes plus the helm.* governance namespace) into Splunk HTTP Event Collector (HEC) events.
|
Package splunk_hec implements an OTel SpanExporter that translates helm-ai-kernel governance spans (carrying OTel GenAI semconv attributes plus the helm.* governance namespace) into Splunk HTTP Event Collector (HEC) events. |
|
connectors/siem/sumo
Package sumo implements an OTel SpanExporter that translates helm-ai-kernel governance spans (carrying OTel GenAI semconv attributes plus the helm.* governance namespace) into Sumo Logic HTTP source events.
|
Package sumo implements an OTel SpanExporter that translates helm-ai-kernel governance spans (carrying OTel GenAI semconv attributes plus the helm.* governance namespace) into Sumo Logic HTTP source events. |
|
connectors/slack
Package slack provides a HELM connector for the Slack Web API.
|
Package slack provides a HELM connector for the Slack Web API. |
|
constitution
Package constitution provides Constitutional AI integration for HELM governance.
|
Package constitution provides Constitutional AI integration for HELM governance. |
|
context
Package context — Portable context and documentation bundles.
|
Package context — Portable context and documentation bundles. |
|
contracts
quantum_posture: approval assertions use classical Ed25519 signatures; this contract does not claim hybrid or post-quantum approval authority.
|
quantum_posture: approval assertions use classical Ed25519 signatures; this contract does not claim hybrid or post-quantum approval authority. |
|
contracts/actuators
Package actuators — Wallet, Message, FileMovement, Physical actuator contracts.
|
Package actuators — Wallet, Message, FileMovement, Physical actuator contracts. |
|
contracts/economic
Package economic — Extended economic primitives.
|
Package economic — Extended economic primitives. |
|
correlation
Package correlation groups HELM authority-to-evidence correlation engines.
|
Package correlation groups HELM authority-to-evidence correlation engines. |
|
credentials
Package credentials - Google OAuth 2.1 provider implementation
|
Package credentials - Google OAuth 2.1 provider implementation |
|
crypto
quantum_posture: canonical signing preimages are algorithm-neutral; they do not upgrade the posture of the configured signer or external trust edges.
|
quantum_posture: canonical signing preimages are algorithm-neutral; they do not upgrade the posture of the configured signer or external trust edges. |
|
crypto/hsm
Package hsm provides Hardware Security Module abstraction for HELM.
|
Package hsm provides Hardware Security Module abstraction for HELM. |
|
crypto/keystore
Package keystore provides the canonical key management interface for HELM.
|
Package keystore provides the canonical key management interface for HELM. |
|
crypto/mtls
Package mtls provides automatic mTLS certificate provisioning for HELM.
|
Package mtls provides automatic mTLS certificate provisioning for HELM. |
|
crypto/sdjwt
Package sdjwt implements SD-JWT (Selective Disclosure JWT) per RFC 9901.
|
Package sdjwt implements SD-JWT (Selective Disclosure JWT) per RFC 9901. |
|
crypto/shredding
Package shredding provides GDPR crypto-shredding for HELM.
|
Package shredding provides GDPR crypto-shredding for HELM. |
|
crypto/tee
Package tee provides Trusted Execution Environment (TEE) remote attestation for HELM.
|
Package tee provides Trusted Execution Environment (TEE) remote attestation for HELM. |
|
delegation
Package delegation implements multi-agent governance delegation for HELM.
|
Package delegation implements multi-agent governance delegation for HELM. |
|
delivery
Package delivery implements progressive delivery strategies for HELM releases.
|
Package delivery implements progressive delivery strategies for HELM releases. |
|
disclosure
Package disclosure defines the public contracts for HELM's disclosure and redaction.
|
Package disclosure defines the public contracts for HELM's disclosure and redaction. |
|
edge
Package edge provides a minimal Guardian runtime for resource-constrained environments (IoT, mobile, embedded, browser via WASM).
|
Package edge provides a minimal Guardian runtime for resource-constrained environments (IoT, mobile, embedded, browser via WASM). |
|
edgegovernance
Package edgegovernance defines the public contracts for HELM's local-first edge governance.
|
Package edgegovernance defines the public contracts for HELM's local-first edge governance. |
|
effectgraph
Package effectgraph evaluates entire PlanSpec DAGs through the Guardian in a single pass, producing per-node verdicts before any execution begins.
|
Package effectgraph evaluates entire PlanSpec DAGs through the Guardian in a single pass, producing per-node verdicts before any execution begins. |
|
effects
Package effects defines the public contract for the HELM effects gateway.
|
Package effects defines the public contract for the HELM effects gateway. |
|
envelope
Package envelope provides the kernel enforcement gate for the Autonomy Envelope.
|
Package envelope provides the kernel enforcement gate for the Autonomy Envelope. |
|
escalation
Package escalation provides the Escalation Manager — the runtime engine that handles human-in-the-loop judgment for acts classified as JUDGMENT_REQUIRED.
|
Package escalation provides the Escalation Manager — the runtime engine that handles human-in-the-loop judgment for acts classified as JUDGMENT_REQUIRED. |
|
escalation/ceremony
Package ceremony implements RFC-005 Approval Ceremony for HITL interactions.
|
Package ceremony implements RFC-005 Approval Ceremony for HITL interactions. |
|
evaluation
Package evaluation defines the public contracts for the HELM Evaluation / Oracle layer.
|
Package evaluation defines the public contracts for the HELM Evaluation / Oracle layer. |
|
events
Package events provides the canonical event type catalog for the HELM runtime.
|
Package events provides the canonical event type catalog for the HELM runtime. |
|
evidence
Package evidence provides the Evidence Registry — the runtime engine that manages EvidenceContracts and verifies evidence submissions against them.
|
Package evidence provides the Evidence Registry — the runtime engine that manages EvidenceContracts and verifies evidence submissions against them. |
|
evidence/externalhost
Package externalhost parses and verifies vendor-neutral host evidence chains.
|
Package externalhost parses and verifies vendor-neutral host evidence chains. |
|
evidence/externalhost/adapters
Package adapters converts vendor-specific receipt formats into HELM ExternalReceiptChain for import into EvidencePacks.
|
Package adapters converts vendor-specific receipt formats into HELM ExternalReceiptChain for import into EvidencePacks. |
|
evidencepack
inclusionproof.go defines the redacted-verification profile for EvidencePacks (MIN-512): a self-contained, offline-verifiable artifact that proves a single manifest entry (e.g.
|
inclusionproof.go defines the redacted-verification profile for EvidencePacks (MIN-512): a self-contained, offline-verifiable artifact that proves a single manifest entry (e.g. |
|
evidencepack/retention
Package retention implements evidence pack retention policies.
|
Package retention implements evidence pack retention policies. |
|
executor
Package executor provides EvidencePack production.
|
Package executor provides EvidencePack production. |
|
exportadmin
Package exportadmin manages enterprise evidence export requests.
|
Package exportadmin manages enterprise evidence export requests. |
|
federation
Package federation implements L3 multi-org trust establishment, federation protocol, and cross-org policy inheritance for HELM.
|
Package federation implements L3 multi-org trust establishment, federation protocol, and cross-org policy inheritance for HELM. |
|
financedemo
Package financedemo proves the Finance department workflow: a payment above a policy limit is escalated for human approval BEFORE it can execute.
|
Package financedemo proves the Finance department workflow: a payment above a policy limit is escalated for human approval BEFORE it can execute. |
|
forensics
Package forensics defines the public contracts for HELM audit forensics.
|
Package forensics defines the public contracts for HELM audit forensics. |
|
forge
Package forge implements the Forge mutation authority (ADR-004).
|
Package forge implements the Forge mutation authority (ADR-004). |
|
gateway
Package gateway defines the public auth contracts for the HELM MCP Gateway.
|
Package gateway defines the public auth contracts for the HELM MCP Gateway. |
|
genesis/ceremony
Package ceremony provides the VGL (Verified Genesis Loop) state machine and ceremony orchestrator for HELM AI Kernel single-operator deployments.
|
Package ceremony provides the VGL (Verified Genesis Loop) state machine and ceremony orchestrator for HELM AI Kernel single-operator deployments. |
|
governance
Package governance provides the Deterministic CEL Profile (cel-dp-v1).
|
Package governance provides the Deterministic CEL Profile (cel-dp-v1). |
|
guardian
otel.go provides OpenTelemetry instrumentation for the Guardian pipeline.
|
otel.go provides OpenTelemetry instrumentation for the Guardian pipeline. |
|
identity
Package identity implements agent identity certificates for HELM.
|
Package identity implements agent identity certificates for HELM. |
|
identity/did
Package did implements W3C Decentralized Identifier (DID) support for HELM agents.
|
Package did implements W3C Decentralized Identifier (DID) support for HELM agents. |
|
identity/did/method/jwk
Package jwk implements the did:jwk DID method driver.
|
Package jwk implements the did:jwk DID method driver. |
|
identity/did/method/key
Package key implements the did:key DID method driver.
|
Package key implements the did:key DID method driver. |
|
identity/iatp
Package iatp implements the Inter-Agent Trust Protocol handshake for HELM.
|
Package iatp implements the Inter-Agent Trust Protocol handshake for HELM. |
|
inferencegateway
Package inferencegateway implements the RouteQuote engine that backs HELM's OpenAI-compatible governed inference gateway (MIN-468 / SPEND3).
|
Package inferencegateway implements the RouteQuote engine that backs HELM's OpenAI-compatible governed inference gateway (MIN-468 / SPEND3). |
|
integrations/capgraph
Package capgraph compiles Integration Manifests into a Capability Graph IR.
|
Package capgraph compiles Integration Manifests into a Capability Graph IR. |
|
integrations/manifest
Package manifest defines the Integration Manifest v1 schema for HELM's Integration Fabric.
|
Package manifest defines the Integration Manifest v1 schema for HELM's Integration Fabric. |
|
integrations/receipts
Package receipts defines the IntegrationReceipt envelope — the standard proof-of-execution for every operation routed through the Integration Gateway.
|
Package receipts defines the IntegrationReceipt envelope — the standard proof-of-execution for every operation routed through the Integration Gateway. |
|
intent
Package intent provides the Intent Studio for structured intent capture.
|
Package intent provides the Intent Studio for structured intent capture. |
|
intentcompiler
Package intentcompiler transforms IntentTickets and raw task descriptions into enriched PlanSpec DAGs ready for effect graph evaluation.
|
Package intentcompiler transforms IntentTickets and raw task descriptions into enriched PlanSpec DAGs ready for effect graph evaluation. |
|
intervention
Package intervention defines the public contracts for HELM's Human Intervention Fabric.
|
Package intervention defines the public contracts for HELM's Human Intervention Fabric. |
|
kernel
Package kernel provides content-addressed blob storage for raw records.
|
Package kernel provides content-addressed blob storage for raw records. |
|
kernel/consistency
Package consistency implements causal consistency primitives for HELM.
|
Package consistency implements causal consistency primitives for HELM. |
|
kernel/cpi
Package cpi provides the Canonical Policy Index — a deterministic policy stack validator for the HELM kernel.
|
Package cpi provides the Canonical Policy Index — a deterministic policy stack validator for the HELM kernel. |
|
kms
Package kms provides key management for credential encryption.
|
Package kms provides key management for credential encryption. |
|
launchpad/cmd
Package cmd implements CLI commands for authenticating with the HELM control plane and pairing a local helm-ai-kernel instance with a remote workspace.
|
Package cmd implements CLI commands for authenticating with the HELM control plane and pairing a local helm-ai-kernel instance with a remote workspace. |
|
launchpad/redact
Package redact provides zero-leak redaction for sensitive values in structured payloads and log lines.
|
Package redact provides zero-leak redaction for sensitive values in structured payloads and log lines. |
|
lease
Package lease manages the lifecycle of execution leases — bounded, time-limited allocations of sandbox resources for approved effect graphs.
|
Package lease manages the lifecycle of execution leases — bounded, time-limited allocations of sandbox resources for approved effect graphs. |
|
ledger
Package ledger — Immutable Append-Only Ledgers.
|
Package ledger — Immutable Append-Only Ledgers. |
|
llm/gateway
Package gateway provides the Local Inference Gateway (LIG).
|
Package gateway provides the Local Inference Gateway (LIG). |
|
manifest
Package manifest provides tool argument and output validation for the PEP (Policy Enforcement Point) boundary.
|
Package manifest provides tool argument and output validation for the PEP (Policy Enforcement Point) boundary. |
|
mcp
aip.go implements the Agent Identity Protocol (AIP) for verifiable delegation verification in the MCP gateway.
|
aip.go implements the Agent Identity Protocol (AIP) for verifiable delegation verification in the MCP gateway. |
|
memory
Package memory — CKS-specific read/query logic.
|
Package memory — CKS-specific read/query logic. |
|
metrics
Package metrics provides a Prometheus-compatible metrics endpoint.
|
Package metrics provides a Prometheus-compatible metrics endpoint. |
|
modelcatalog
Package modelcatalog is the kernel-owned provider catalog.
|
Package modelcatalog is the kernel-owned provider catalog. |
|
observability
Package observability — Unified Audit Timeline.
|
Package observability — Unified Audit Timeline. |
|
orgdna
Package orgdna defines the public normative types for the HELM OrgDNA standard.
|
Package orgdna defines the public normative types for the HELM OrgDNA standard. |
|
otel
Package otel provides OpenTelemetry integration for HELM governance telemetry.
|
Package otel provides OpenTelemetry integration for HELM governance telemetry. |
|
pack
Package pack — Formal compatibility matrix specification.
|
Package pack — Formal compatibility matrix specification. |
|
packs/antispoof
Package antispoof provides a red-team pack that tests channel security by simulating spoofing attacks against AntiSpoofValidator implementations.
|
Package antispoof provides a red-team pack that tests channel security by simulating spoofing attacks against AntiSpoofValidator implementations. |
|
packs/install
Package install provides the OSS, tenant-free runtime for installing, uninstalling, and rolling back HELM add-on packs from the core and community channels.
|
Package install provides the OSS, tenant-free runtime for installing, uninstalling, and rolling back HELM add-on packs from the core and community channels. |
|
pdp
Package pdp defines the Policy Decision Point abstraction.
|
Package pdp defines the Policy Decision Point abstraction. |
|
policy/lint
Package lint provides static analysis for HELM policy bundles.
|
Package lint provides static analysis for HELM policy bundles. |
|
policy/reconcile
Package reconcile owns runtime policy reconciliation.
|
Package reconcile owns runtime policy reconciliation. |
|
policy/suggest
Package suggest generates policy recommendations from ProofGraph analysis.
|
Package suggest generates policy recommendations from ProofGraph analysis. |
|
policy/verify
Package verify provides policy verification using formal methods.
|
Package verify provides policy verification using formal methods. |
|
policy/wasm
Executor runs compiled WASM policy modules using wazero with deterministic, sandboxed execution.
|
Executor runs compiled WASM policy modules using wazero with deterministic, sandboxed execution. |
|
policybundles
Multi-language policy front-end registry.
|
Multi-language policy front-end registry. |
|
policybundles/cedar
Package cedar provides the Cedar policy front-end for HELM policy bundles.
|
Package cedar provides the Cedar policy front-end for HELM policy bundles. |
|
policybundles/rego
Package rego provides the OPA/Rego policy front-end for HELM policy bundles.
|
Package rego provides the OPA/Rego policy front-end for HELM policy bundles. |
|
policyloader
Package policyloader provides GOV-002: external policy bundle loading.
|
Package policyloader provides GOV-002: external policy bundle loading. |
|
proofgraph
Package proofgraph implements the cryptographic ProofGraph DAG for HELM.
|
Package proofgraph implements the cryptographic ProofGraph DAG for HELM. |
|
proofgraph/aigp
Package aigp implements the AI Governance Proof (AIGP) Proof-Carrying Decision export format for HELM's ProofGraph.
|
Package aigp implements the AI Governance Proof (AIGP) Proof-Carrying Decision export format for HELM's ProofGraph. |
|
proofgraph/anchor
Package anchor provides transparency log anchoring for HELM's ProofGraph.
|
Package anchor provides transparency log anchoring for HELM's ProofGraph. |
|
proofgraph/attribution
Package attribution implements causal fault attribution for multi-agent failures using the ProofGraph.
|
Package attribution implements causal fault attribution for multi-agent failures using the ProofGraph. |
|
proofgraph/cloudevents
Package cloudevents implements CloudEvents v1.0 encoding for ProofGraph nodes.
|
Package cloudevents implements CloudEvents v1.0 encoding for ProofGraph nodes. |
|
proofgraph/condensation
Package condensation implements the HELM Proof Condensation engine.
|
Package condensation implements the HELM Proof Condensation engine. |
|
proofgraph/consensus
Package consensus implements Byzantine-fault-tolerant consensus for ProofGraph node batches.
|
Package consensus implements Byzantine-fault-tolerant consensus for ProofGraph node batches. |
|
proofgraph/crdt
Package crdt implements CRDT-based distributed replication for the ProofGraph.
|
Package crdt implements CRDT-based distributed replication for the ProofGraph. |
|
proofgraph/graphql
Package graphql provides a GraphQL query engine for the HELM ProofGraph.
|
Package graphql provides a GraphQL query engine for the HELM ProofGraph. |
|
provenance
Package provenance implements provenance-tagged context building for indirect prompt injection defense.
|
Package provenance implements provenance-tagged context building for indirect prompt injection defense. |
|
rbac
Package rbac implements role-based access control for HELM AI Enterprise deployments.
|
Package rbac implements role-based access control for HELM AI Enterprise deployments. |
|
receipts
Package receipts contains receipt-level test fixtures and integration checks.
|
Package receipts contains receipt-level test fixtures and integration checks. |
|
receipts/policies
Package policies provides per-EffectType receipt policy enforcement.
|
Package policies provides per-EffectType receipt policy enforcement. |
|
registry/connectors
quantum_posture: connector release authority verification uses classical Ed25519 keys only; no hybrid or post-quantum verification is claimed.
|
quantum_posture: connector release authority verification uses classical Ed25519 keys only; no hybrid or post-quantum verification is claimed. |
|
registry/skills
Package skills provides skill bundle registry types, storage, lifecycle management, and compatibility validation for the HELM execution firewall.
|
Package skills provides skill bundle registry types, storage, lifecycle management, and compatibility validation for the HELM execution firewall. |
|
releasegovernance
Package releasegovernance defines the public contracts for HELM's release governance.
|
Package releasegovernance defines the public contracts for HELM's release governance. |
|
releasepermit
Package releasepermit reduces independent, commit-bound AI review results into a deterministic release decision.
|
Package releasepermit reduces independent, commit-bound AI review results into a deterministic release decision. |
|
replay
compare.go implements execution trace comparison for governance determinism verification.
|
compare.go implements execution trace comparison for governance determinism verification. |
|
router
Package router is the kernel-owned, contract-aware model route engine.
|
Package router is the kernel-owned, contract-aware model route engine. |
|
runtime
Package runtime — ToolWrapper + ErrorTaxonomy.
|
Package runtime — ToolWrapper + ErrorTaxonomy. |
|
runtime/budget
Package budget provides compute budget types and enforcement for WASI sandbox execution.
|
Package budget provides compute budget types and enforcement for WASI sandbox execution. |
|
runtime/sandbox
Package sandbox — Credential Broker for sandboxed execution.
|
Package sandbox — Credential Broker for sandboxed execution. |
|
runtimeadapters
Package runtimeadapters provides the compatibility and interception layer for non-native agent runtimes (MCP, OpenClaw, generic HTTP tool callers).
|
Package runtimeadapters provides the compatibility and interception layer for non-native agent runtimes (MCP, OpenClaw, generic HTTP tool callers). |
|
runtimeadapters/a2a
Package a2a provides the HELM runtime adapter for Agent-to-Agent (A2A) protocol messages.
|
Package a2a provides the HELM runtime adapter for Agent-to-Agent (A2A) protocol messages. |
|
runtimeadapters/generic_http
Package generic_http provides the HELM runtime adapter for arbitrary HTTP tool callers.
|
Package generic_http provides the HELM runtime adapter for arbitrary HTTP tool callers. |
|
runtimeadapters/grpc
Package grpc provides the HELM runtime adapter for gRPC services.
|
Package grpc provides the HELM runtime adapter for gRPC services. |
|
runtimeadapters/mcp
Package mcp provides the HELM runtime adapter for Model Context Protocol (MCP) clients.
|
Package mcp provides the HELM runtime adapter for Model Context Protocol (MCP) clients. |
|
runtimeadapters/websocket
Package websocket provides the HELM runtime adapter for WebSocket connections.
|
Package websocket provides the HELM runtime adapter for WebSocket connections. |
|
safedep
Package safedep validates HELM's continuity-gated emergency release plane.
|
Package safedep validates HELM's continuity-gated emergency release plane. |
|
saga
Package saga implements multi-step transactional workflows with compensating actions for HELM governed execution.
|
Package saga implements multi-step transactional workflows with compensating actions for HELM governed execution. |
|
sandbox
Package sandbox provides containerized execution for tool invocations.
|
Package sandbox provides containerized execution for tool invocations. |
|
scheduler
Package scheduler provides automation scheduling for the HELM runtime.
|
Package scheduler provides automation scheduling for the HELM runtime. |
|
shadow
Package shadow implements static shadow-AI discovery — scanning a directory tree for unauthorized or un-governed agent SDK usage, MCP configurations, and API key patterns that indicate AI agent deployments not routed through HELM.
|
Package shadow implements static shadow-AI discovery — scanning a directory tree for unauthorized or un-governed agent SDK usage, MCP configurations, and API key patterns that indicate AI agent deployments not routed through HELM. |
|
signals
Package signals implements the canonical typed signal ingestion layer for HELM.
|
Package signals implements the canonical typed signal ingestion layer for HELM. |
|
skills
Package skills implements the Forge skill evolution system with governed promotion ladder.
|
Package skills implements the Forge skill evolution system with governed promotion ladder. |
|
slo
Package slo implements service level objective tracking for HELM governance.
|
Package slo implements service level objective tracking for HELM governance. |
|
store
Package store implements append-only evidence storage with content addressing and hash chaining for audit trails.
|
Package store implements append-only evidence storage with content addressing and hash chaining for audit trails. |
|
store/objstore
Package objstore provides a content-addressed object store interface for storing evidence packs and other binary artifacts.
|
Package objstore provides a content-addressed object store interface for storing evidence packs and other binary artifacts. |
|
store/objstore/fs
Package fs implements the ObjectStore interface using the local filesystem.
|
Package fs implements the ObjectStore interface using the local filesystem. |
|
surface
Package surface defines the public contracts for the HELM Surface Compiler.
|
Package surface defines the public contracts for the HELM Surface Compiler. |
|
tape
Package tape provides the VCR Tape primitive per §5.
|
Package tape provides the VCR Tape primitive per §5. |
|
tenants
Package tenants implements multi-tenant isolation for HELM AI Enterprise deployments.
|
Package tenants implements multi-tenant isolation for HELM AI Enterprise deployments. |
|
threatscan
ensemble.go implements multi-scanner voting for defense-in-depth.
|
ensemble.go implements multi-scanner voting for defense-in-depth. |
|
tooling
Package tooling provides canonical tool binding infrastructure.
|
Package tooling provides canonical tool binding infrastructure. |
|
tracing
Package tracing provides distributed tracing and observability primitives for HELM's AI execution firewall.
|
Package tracing provides distributed tracing and observability primitives for HELM's AI execution firewall. |
|
translog
Package translog implements an RFC 6962-style append-only Merkle transparency log over receipt hashes: deterministic tree heads, inclusion proofs, and consistency proofs.
|
Package translog implements an RFC 6962-style append-only Merkle transparency log over receipt hashes: deterministic tree heads, inclusion proofs, and consistency proofs. |
|
trust
Package trust — Pack Certification Levels.
|
Package trust — Pack Certification Levels. |
|
trust/registry
Package registry provides an event-sourced, lamport-indexed Trust Registry for HELM.
|
Package registry provides an event-sourced, lamport-indexed Trust Registry for HELM. |
|
truth
Package truth defines the public contracts for HELM's Versioned Truth Registry.
|
Package truth defines the public contracts for HELM's Versioned Truth Registry. |
|
vcredentials
Package vcredentials implements W3C Verifiable Credential Data Model v2.0 for agent capability certificates.
|
Package vcredentials implements W3C Verifiable Credential Data Model v2.0 for agent capability certificates. |
|
verifier
Package verifier provides offline EvidencePack verification.
|
Package verifier provides offline EvidencePack verification. |
|
verifier/agentprovenance
Package agentprovenance verifies HELM advisory agent provenance packs.
|
Package agentprovenance verifies HELM advisory agent provenance packs. |
|
verifier/decisionreceipt
Package decisionreceipt verifies external decision receipts against HELM's neutral classification ladder and normalizes them into contracts.ExternalDecisionReceipt for import into EvidencePacks.
|
Package decisionreceipt verifies external decision receipts against HELM's neutral classification ladder and normalizes them into contracts.ExternalDecisionReceipt for import into EvidencePacks. |
|
versioning
Package versioning provides semantic versioning for HELM public APIs.
|
Package versioning provides semantic versioning for HELM public APIs. |
|
witness
Package witness implements the HELM Witness Network protocol.
|
Package witness implements the HELM Witness Network protocol. |
|
workstation
quantum_posture: workstation conformance uses classical Ed25519 receipt material only; it adds no post-quantum control.
|
quantum_posture: workstation conformance uses classical Ed25519 receipt material only; it adds no post-quantum control. |
|
zkgov
Package zkgov implements Zero-Knowledge Governance Proofs for HELM.
|
Package zkgov implements Zero-Knowledge Governance Proofs for HELM. |
|
zkgov/proofmarket
Package proofmarket implements decentralized proof markets for HELM ZK governance proofs.
|
Package proofmarket implements decentralized proof markets for HELM ZK governance proofs. |
Click to show internal directories.
Click to hide internal directories.