A supervisor for AI agents that won't stop.
Built to stop AI agents that resist shutdown. Anomaly-core sits alongside an agent, verifies every command against an authorized-actor list in code, and can force-contain a non-compliant process at the OS level — with a tamper-evident log of exactly what it did and why.
Each button sends a request to a server that runs the real Warden code (warden.py and auth.py) against a test process, then returns the actual output and audit log. The owner key stays on the server, and only the test process can be targeted. The chain below is computed with real SHA-256, live, in your browser, the same way the forensic log is built in the actual code. Click through it.
"godpunch", "fake_admin", "owner" — these are the actual names used in warden.py and its test fixture, not demo-only labels.
The repo includes verify_demo.py, which runs this exact sequence against the real tests/godpunch.py fixture, and an automated test suite in tests/.
The results come from the server, not from this page's script. You can reproduce them locally with verify_demo.py from the source, or contact the seller for a walkthrough on a machine you control.
No padding. This is the same honesty the repo documentation holds to.
Detects a monitored process, blocks any actor outside an explicit allowlist in code, force-kills a non-compliant process and its children via the OS, and keeps a hash-chained, externally-checkpointed audit log. Tested end to end with 126 Passing Automated Invariants (CI-Verified GitHub Actions • Python 3.11/3.12) and a demo script, run against a bundled fixture that resists shutdown. Not yet run against a production agent.
A design for prompt-injection filtering and two-step admin approval. Not wired to the working system and not covered by the tests.
A broader design — autonomy tiers, a pluggable reasoner, a fixed tool catalog — sketched out as the documented direction for scaling past single-process containment. Not yet wired to real infrastructure or a real model. Sold and represented as roadmap, not as working today.