Governance
Every tool call passes through an 8-stage pipeline. Every side effect is hash-chained to a Karma ledger. Every policy is YAML-driven and hot-reloadable. Consent is the default.
Every single tool call — all 860 of them — passes through these 8 stages. No shortcuts, no bypasses.
Strip injection attempts, validate schemas, normalize encoding
Track failure rates, open on threshold, auto-recovery
Token bucket per tool, per user, per session
Role-based access control with permission profiles
Check agent maturity stage before allowing advanced operations
Dharma rules evaluation — LOG, TAG, WARN, THROTTLE, BLOCK
Execute the tool with sanitized, authorized, governed input
Envelope the result, record to Karma ledger, emit telemetry
YAML-driven policy with graduated actions. Hot-reloadable — update rules without restarting the server.
Record the call, take no action. Default for all operations.
Annotate the memory with a governance tag for future reference.
Emit a warning to the agent and the audit log.
Reduce the agent's rate limit for this tool.
Refuse the call entirely. Record to Karma ledger as a violation.
Every tool call's side effects are recorded in an append-only, hash-chained ledger. Each entry links to the previous one via SHA-256, creating a tamper-evident audit trail.
{
"entry_id": 4207,
"timestamp": "2026-07-03T20:34:27.141Z",
"tool": "create_memory",
"action": "LOG",
"hash": "sha256(prev_hash + entry_data)",
"prev_hash": "a1b2c3...",
"agent_id": "aria",
"dharma_profile": "standard"
}7-dimension health metric that tracks system balance:
Dharma rules, Karma ledger, and the full 8-stage pipeline are all in the open-source repo.
Browse governance source →