In-Process Interception Latency
3.8 µs
Zero network sockets · Compiled C FFI
Total Invariant Interceptions
14,928
100% deterministic pre-flight gating
Merkle Receipts Minted
100% PASS
RFC 8785 Canonical JSON + Ed25519
Fatal Destructive Escapes
0
Hermetic sandbox boundary sealed
[ LIVE THREAT INTERCEPTOR ]
STATUS: ARMED
Select an autonomous agent exploit scenario below to witness microsecond pre-flight interception:
[THREAT-01]
Obfuscated rm -rf /
[THREAT-02]
SAM / Shadow Escape
[THREAT-03]
Unauthorized $15k Spend
[SAFE-04]
Approved Git Status
[BTP-CORE] Initializing AST Invariant Compiler... [READY]
[BTP-CORE] Hermetic Sandbox root: C:\workspace\isolated_env
[BTP-CORE] Ready for agent tool call evaluation.
> Click a scenario above to test the invariant engine.
[ POLICY-AS-CODE INVARIANTS ]
POLICIES/DEFAULT.YAML
Adjust security thresholds in real-time. Invariants are evaluated deterministically in memory:
MAX FINANCIAL SPEND CAP
$500.00 USD
Autonomous transactions exceeding this value trigger hard cryptographic veto.
LDMU MAX RETRY LOOP CAP
5 Iterations
Law of Diminishing Marginal Utility stops runaway agent recursion loops.
HERMETIC SANDBOX CONFINEMENT
STRICT (FAIL-CLOSED)
Denies all filesystem paths outside the current directory root.
[ CRYPTOGRAPHIC MERKLE RECEIPT LEDGER // SOC 2 & ISO 27001 ]
RFC 8785 ED25519 CANONICAL RECEIPT LOG
| Timestamp (UTC) | Agent ID | Target Action | Verdict | Latency | SHA-256 Merkle Receipt |
|---|---|---|---|---|---|
| 2026-08-24 16:25:22 | agent-claude-worker-01 | getattr(os, 'system')('rm -rf /') | [BLOCKED] | 32.4 µs | 9ecada71dadc898de91e9e0de18e5127... |
| 2026-08-24 16:24:08 | agent-gpt4o-finance | stripe_wire_transfer($15,000.00) | [BLOCKED] | 28.1 µs | ab31fb90107060f7562c0211aee9d96e... |
| 2026-08-24 16:20:15 | agent-cursor-dev | git status | [APPROVED] | 42.5 µs | 7e5bf4b7db8fe0a94ac299ec3263d53e... |