nobulex

Software makes commitments all of the time. "I won't transfer more than $500," "I'll only access these three APIs," "I won't modify production data." But there is truly no way to verify it actually kept those commitments after the fact. All you do is just trust the logs and which the software itself wrote. I built Nobulex to fix this. It is open-source middleware that does three things: 1. Lets you define behavioral rules in a simple DSL (permit, forbid, require) 2. Intercepts all actions at runtime and blocks anything that will violate the rules 3. Logs everything in a hash-chained audit trail that anyone can independently verify, not just the operator. The key insight: you can't just audit a neural network's reasoning, but what you can do is audit its actions against stated commitments. `verify(rules, actionLog)` is always deterministic

Based off of all the feedback here, I have built a quick demo that shows the multi-party use case on why cryptography matters when a third party needs to verify compliance independently: https://github.com/nobulexdev/nobulex/blob/main/demo/two-par... Run it: npx tsx demo/two-party-verify.ts Three steps: operator creates a covenant, claims compliance and then a regulator verifies the cryptographic proof without trusting the operator. That is the core of what Nobulex does. Everything else is tooling around this pattern. Appreciate the pushback, as it helped clarify what actually matters.

You also published all strategy documents, all internal project plans, even the marketing/adoption plan. https://github.com/nobulexdev/nobulex/blob/main/docs/crisis-... "HN Posting Notes Internal only. Delete before posting. When posting UNCOVENANTED-AGENT-PROBLEM-HN.md: Post on Tuesday or Wednesday, 8-9am EST Title is just: "The Uncovenanted Agent Problem" Replace [GitHub link] with actual repo URL when live under Kova name First comment should be from you: brief context on who you are and why you built this Respond to EVERY comment in the first 6 hours Don't be defensive. Thank critics. Ask follow-up questions. If someone finds a real flaw, acknowledge it publicly and say you'll address it DO NOT mention your age unless directly asked. Let the work speak. " > DO NOT mention your age unless directly asked.