Agente local privado · activo

SEBAS

Arquitectura privada de asistente local construida alrededor de IPC explícito, aprobaciones y herramientas de sistema acotadas.

Resumen

Problem

Un asistente local se vuelve peligroso cuando intención del modelo y ejecución del sistema comparten una autoridad implícita.

Design

La ejecución se separa tras contratos IPC, políticas y superficies de aprobación humana para acciones sensibles.

Outcome

Un modelo de asistente que trata autoridad del sistema como capacidad separada y controlada, no como consecuencia automática del chat.

Verification

La superficie pública documenta únicamente el modelo de autoridad.

Local agentIPCApprovalsSystem toolsAI agentsLocal automationSecurity

Arquitectura

  1. local assistant
  2. IPC boundary
  3. approval registry
  4. system policy
  5. safe executor
  6. tool surfaces
  7. memory window
Public architecture diagram for SEBAS

Componentes

component

IPC boundary

Local message transport between UI and assistant core.

component

System policy

Allow/deny and approval constraints around execution.

component

Approval registry

Durable pending decisions before sensitive operations.

component

Tool surfaces

Explicit local capabilities exposed under policy.

Decisiones

active

Require explicit approval for sensitive execution

A local assistant should not treat model intent as authority to perform sensitive system actions.

Línea de tiempo

  1. Local IPC assistantmilestone · active
  2. Hardeningmilestone · ongoing
  3. Authority and approval architecture is public; IPC, commands and local memory remain private — public_boundaryevidence · 2026-08-11

Experiments

No additional public experiment records.

Releases

No project-specific public release record.

Evidencia

public_boundary

Authority and approval architecture is public; IPC, commands and local memory remain private

Authority and approval architecture is public; IPC, commands and local memory remain private

source-contract · checked 2026-08-11 · fresh until 2027-08-11

Límites

La web pública no expone endpoints IPC, control del equipo, ejecución de comandos ni memoria local.