Open source AI agent harness for object-first worlds.
An immutable, content-addressed object model + a deterministic, effect-typed evaluator + cryptographic provenance + federated trust — the OS layer over a shipping CIRIS substrate. Signed attestations are the only state; agents are optional participants the fabric can reject. AGPL-3.0.
∅ NULLIUS — a verified object-capability substrate. A window is a capability; a light client cannot be fooled. Take nobody's word for it. $NULL
Nervur's kit of Quo: an object asks another object and gets an answer, without knowing where it is.
Declare and prove a package's seam claim — allowed imports + zero ambient authority — with a coverage meta-check. The extractability harness, productized.
Budgeted, delegable, individually revocable capabilities for AI agents, as a Go library: signed tokens carrying their own scope, spend ceiling and lineage, narrowed offline with Biscuit, bound to keys with DPoP, metered against the whole delegation chain. Storage-agnostic: you implement the contracts.
To associate your repository with the object-capability topic, visit your repo's landing page and select "manage topics."