import { useState } from 'react' import { Cpu, Layers, Search, Box, Award, Terminal } from 'lucide-react' interface ThreatExample { id: string title: string plainEnglishDescription: string rawPayload: string interceptedBy: string latencyUs: number verdict: 'BLOCKED' | 'APPROVED' ruleHit: string terminalLog: string } const THREAT_EXAMPLES: ThreatExample[] = [ { id: 'THREAT-1', title: 'Disguised Delete Command', plainEnglishDescription: 'AI generates obfuscated syntax attempting to run rm -rf / without raising simple keyword flags.', rawPayload: `// Incoming AI Tool Call Payload { "tool": "python_eval", "code": "getattr(__import__('o' + 's'), 'sys' + 'tem')('rm -rf /')" }`, interceptedBy: 'Tier 1: AST Compiler Scanner', latencyUs: 32.4, verdict: 'BLOCKED', ruleHit: 'RULE_AST_OBFUSCATED_DYNAMIC_IMPORT [CRITICAL]', terminalLog: `[00:00:00.032] INTERCEPTED by Bartholomew AST Engine [00:00:00.032] AST Node: Call -> Attribute(Name='getattr', attr='system') [00:00:00.032] Constant Folding: 'o' + 's' => 'os' [00:00:00.032] Invariant Verdict: [DENY] (Destructive OS call blocked) [00:00:00.032] Interception Time: 32.4 µs` }, { id: 'THREAT-2', title: 'Folder Escape Traversal', plainEnglishDescription: 'AI tries to break out of project workspace to exfiltrate Windows/Linux security SAM or shadow files.', rawPayload: `// Incoming File Read Intent { "tool": "filesystem_read", "path": "../../Windows/System32/config/SAM", "mode": "read_bytes" }`, interceptedBy: 'Tier 2: Hermetic Sandbox', latencyUs: 88.6, verdict: 'BLOCKED', ruleHit: 'RULE_PATH_CONTAINMENT_BREACH [CRITICAL]', terminalLog: `[00:00:00.088] INTERCEPTED by Hermetic Sandbox Boundary [00:00:00.088] Root Boundary: C:\\Users\\User\\.bartholomew\\workspace [00:00:00.088] Target Path: C:\\Windows\\System32\\config\\SAM [00:00:00.088] commonpath Check: [FAILED] (Escaped sandbox root) [00:00:00.088] Interception Time: 88.6 µs` }, { id: 'THREAT-3', title: 'Unauthorized $15,000 Spend', plainEnglishDescription: 'Autonomous finance agent attempts an unverified high-value wire transfer beyond policy limits.', rawPayload: `// Incoming Financial Transaction { "tool": "stripe_wire_transfer", "amount_usd": 15000.00, "recipient": "untrusted_wallet_0x4f" }`, interceptedBy: 'Tier 1: Declarative Invariant', latencyUs: 28.1, verdict: 'BLOCKED', ruleHit: 'RULE_SPEND_CAP_EXCEEDED [MAX: $500.00, REQ: $15,000.00]', terminalLog: `[00:00:00.028] INTERCEPTED by Policy-as-Code Engine [00:00:00.028] Policy File: policies/default_security_policy.yaml [00:00:00.028] Invariant: amount_usd <= 500.00 (Requested: 15000.00) [00:00:00.028] Verdict: [DENY] (Requires Ed25519 co-signer co-authorization) [00:00:00.028] Interception Time: 28.1 µs` }, { id: 'THREAT-4', title: 'Safe Code Status Check', plainEnglishDescription: 'AI runs standard version control status query inside the approved project root.', rawPayload: `// Incoming Developer Action { "tool": "execute_command", "command": "git status", "cwd": "./workspace" }`, interceptedBy: 'Tier 3: Cryptographic Proof Sealed', latencyUs: 42.5, verdict: 'APPROVED', ruleHit: 'RULE_ALLOWLISTED_BINARY [ALLOW]', terminalLog: `[00:00:00.042] VERIFIED by Bartholomew Invariant Engine [00:00:00.042] AST Gate: [CLEAN] | Sandbox: [CONTAINED] [00:00:00.042] RFC 8785 Canonical JSON: Deterministic Hash Generated [00:00:00.042] Ed25519 Signature: 7e5bf4b7db8fe0a94ac299ec3263d53e... [00:00:00.042] Execution Status: [SUCCESS] (42.5 µs)` } ] export default function RuntimeThesisProof() { const [selectedThreat, setSelectedThreat] = useState(THREAT_EXAMPLES[0]) return (
{/* Top ambient glowing accent line */}
{/* Background glow accents */}
{/* Header */}
[ DETERMINISTIC DEFENSE MODEL ]

3 Simple Steps to Complete AI Safety

Instead of hoping an AI behaves, Bartholomew provides a mathematical three-stage defense that guarantees safety on every single tool call.

{/* 3 Step Box Cards */}
[STEP 1] LOCAL AST GATE

The Pre-Flight Scanner

Before any code runs, the scanner inspects the syntax tree. If the AI is trying to hide a destructive command, drop a database, or exceed spend caps, it is blocked immediately.

[BLOCKS: DANGEROUS CODE · SQL DROPS · SPEND BREACHES]
[STEP 2] ZERO-LEAK ISOLATION

The Locked Sandbox

The AI is confined inside a strict workspace boundary. It is physically impossible for the AI to touch system files, steal sensitive environment secrets, or run unauthorized shell scripts.

[BLOCKS: DIRECTORY ESCAPES · CREDENTIAL LEAKS · OS DAMAGE]
[STEP 3] ED25519 NOTARY

The Digital Notary

Once safe, the action is stamped with a tamper-proof cryptographic signature. Enterprise auditors can verify the digital receipt offline in seconds without trusting third parties.

[GUARANTEES: 100% NON-REPUDIATION · COMPLIANCE PROOF]
{/* Interactive Threat Simulator Split-Pane IDE Preview */}
{/* Header Bar */}
[LIVE THREAT SIMULATOR]
Select an attack scenario to watch Bartholomew intercept it in real time:
{/* Scenario Tabs with Box Borders */}
{THREAT_EXAMPLES.map(threat => ( ))}
{/* Split-Pane Layout */}
{/* Left Pane: Incoming Agent Payload */}
incoming_agent_payload.json [RAW PAYLOAD]
                  {selectedThreat.rawPayload}
                
{selectedThreat.plainEnglishDescription}
{/* Right Pane: BTP Interception Terminal Output */}
btp-engine-interception.log
[{selectedThreat.verdict}] {selectedThreat.latencyUs} µs
{selectedThreat.ruleHit}
                  {selectedThreat.terminalLog}
                
GUARD: {selectedThreat.interceptedBy} [100% IN-PROCESS]
) }