metaspace-membrane

Deny-by-default agent membrane: a PreToolUse hook that keeps the coding agent inside a hardened .bio constitution (project-only writes, network host allowlist, dangerous-command block).

CLEARED_STATICclaude-onlyv0.3.5

Pipeline results

Coverage

CLEARED_STATIC

Tests run

7 / 8

Portability

Claude-only

Type

Plugins

Tests & results

What the pipeline checked

TestStateResult or reason

eligibilityranall eligibility checks passed

dedupranunique -- no near-duplicate found

clocran12442 code lines / 147 files

secretsranno secret patterns matched

egressran18 lexical match(es) — FLAG-INFO (C-01: semantic analysis deferred to v2)

injectionranno patterns matched (confidence: STANDARD)

required-fieldsranrequired fields present: name, version, description

behaviouraldeferredbehavioural assessment deferred (v1): Python with non-stdlib imports (committed-only policy): [('cli.py', 'importlib'), ('cli.py', 'core')]

What's inside

Components found

commands/metaspace-ratify.md

componentmedium

commands/metaspace-report.md

componentmedium

commands/metaspace-status.md

componentmedium

commands/metaspace-verify.md

componentmedium

Coverage

Not assessed

behavioural execution not run
egress patterns logged (FLAG-INFO): 18 lexical match(es)

README

From the repository

# MetaSpace Membrane

**A deterministic safety membrane for machine-generated software.**

![proofs: reproducible](https://img.shields.io/badge/proofs-reproducible-brightgreen)
[![DOI](https://zenodo.org/badge/DOI/10.5281/zenodo.21426513.svg)](https://doi.org/10.5281/zenodo.21426513)
![License: BUSL-1.1](https://img.shields.io/badge/license-BUSL--1.1-blue)

MetaSpace Membrane turns an *undecidable* question — *"is this AI doing the right thing?"* —
into a *decidable* one — *"is this effect inside the declared boundary?"* — and enforces the
answer **deny-by-default**. One `.bio` constitution, three membranes, two products.

> Part of the **MetaSpace.Bio Engine Project** — Szőke László-Ferenc (admin@metaspace.bio).
> **Patent pending.**

---

## Watch the 60-second explainer

[![MetaSpace Membrane — 60-second explainer](assets/explainer-poster.png)](assets/explainer.mp4)

*Containment, not correctness — the idea in one minute.* ▶ click to play

---

## Screenshots

**The Warden control panel** (`metaspace ui`) — a localhost web UI to configure the membrane
per working directory. No config files to hand-edit; every project shows its mode
(observe / dry-run / **enforcing**) at a glanc…

← Back to Plugins