{"id":47141020,"title":"Show HN: Connector-OSS – Memory integrity kernel for AI agents","points":1,"user":"umeshlamton","time":1771959221,"time_ago":"5 hours ago","type":"link","content":"

I built connector-oss because I kept running into the same problem with\nmulti-agent AI systems: when something goes wrong, you have no cryptographic\nground truth of what any agent stored, read, or accessed. Log files are\nmutable. There's no tamper-proof record.

connector-oss is an in-process Rust kernel that adds memory integrity\nprimitives to existing agent frameworks (LangChain, CrewAI, AutoGen).

How it works:

1. Every memory write is content-addressed with Blake3 — the CID is\n deterministic, so any modification to stored content produces a\n different CID and is detected on next read.

2. Every agent operation is logged to an Ed25519-signed Merkle chain.\n The chain links H(n) = hash(H(n-1) + op_n), so altering any entry\n breaks every downstream entry. Retroactive tampering is detectable.

3. Namespace isolation is enforced at the Rust kernel level — agents\n are confined to their namespace in vac-core, not by a Python\n convention that can be bypassed.

4. An 8-dimension trust score (consistency, accuracy, recency,\n isolation, integrity, coverage, coherence, provenance) is computed\n from kernel state — not from LLM self-report.

Crate structure:\n- vac-core: MemoryKernel, 28 syscalls, RangeWindow, Interference engine\n- vac-store: ProllyKernelStore (Prolly Tree + Blake3), IndexDbKernelStore\n- vac-ffi: ~500-line PyO3 thin wrapper\n- connector-engine: AgentFirewall, DualDispatcher, KnowledgeEngine\n- connector-server: axum REST + Prometheus metrics

One interesting problem: the Prolly Tree backend is async (tokio) but\nPyO3 calls are synchronous. We bridge this with block_in_place +\nhandle.block_on(), which requires flavor = "multi_thread" in tokio\ntest configs. Namespace packet keys include a timestamp to avoid CID\ncollisions: ns:{ns}:{ts}:{cid}.

788 tests, 0 failures. <50μs overhead per memory operation.\n4-agent pipeline produces 105 audit entries, integrity check passes.

pip install connector-oss\nApache 2.0.\n```","url":"https://github.com/GlobalSushrut/connector-oss","domain":"github.com","comments":[],"comments_count":0}