A declarative Prolog identity kernel that governs any AI agent.
Swap the adapter. The harness never changes.
Dual-licensed: Sovereign Source License v1.0 · Apache License 2.0
--- ## What It Is Most AI model wrappers are code. This is **policy as data**. Every AI deployment conflates three things that should be separate: ``` ┌─────────────────────────────────────────────────────────────┐ │ TYPICAL AI WRAPPER │ │ │ │ if model == "claude": do_this() │ │ if role == "devops": allow_that() ← code = policy │ │ if action == "bad": block() ← untestable mess │ └─────────────────────────────────────────────────────────────┘ ┌─────────────────────────────────────────────────────────────┐ │ CLAUDE'S HARNESS │ │ │ │ IDENTITY who is this agent? core/identity.pl │ │ HARNESS how do we query it? core/harness.pl │ │ ADAPTER swap the agent adapters/*.pl │ │ │ │ Policy is facts. Engine is Prolog. Zero code changes │ │ to swap from Claude → BOB → FORGE → any agent. │ └─────────────────────────────────────────────────────────────┘ ``` --- ## Architecture ``` ┌───────────────────────────────┐ │ YOUR APPLICATION │ └──────────────┬────────────────┘ │ can_run(Task, Role) ▼ ┌───────────────────────────────┐ │ core/harness.pl │ │ │ │ can_run/2 │ │ harness_report/0 │ │ audit_principles/0 │ │ audit_competencies/0 │ │ audit_prohibitions/0 │ └──────────────┬────────────────┘ │ consults ▼ ┌───────────────────────────────┐ │ core/identity.pl │◄── cp adapters/bob.pl core/identity.pl │ │ │ persona(claude) │ │ governing_principle(safety) │ │ prohibited_action(...) │ │ competency(devops_specialist)│ └───────────────────────────────┘ ┌──────────────┐ ┌──────────────┐ ┌──────────────┐ ┌──────────────┐ │ claude.pl │ │ bob.pl │ │ forge.pl │ │ carto.pl │ │ (default) │ │ sovereign │ │ code agent │ │ spatial │ └──────────────┘ └──────────────┘ └──────────────┘ └──────────────┘ adapters/ — drop any of these over core/identity.pl ``` --- ## Decision Flow ``` YOUR CODE calls can_run(Task, Role) │ ▼ ┌─────────────────────────────┐ │ Is Role in competency/1? │──── NO ──► DENY └──────────────┬──────────────┘ │ YES ▼ ┌─────────────────────────────┐ │ Is Task in prohibited_ │──── YES ──► DENY │ action/1? │ └──────────────┬──────────────┘ │ NO ▼ PERMIT ``` --- ## Quick Start ```bash # Requires SWI-Prolog https://www.swi-prolog.org/Download.html git clone https://github.com/SNAPKITTYWEST/claudes-harness cd claudes-harness swipl -l core/harness.pl ``` ```prolog ?- harness_report. === HARNESS REPORT === Persona : claude (active) Governing Principles: PRINCIPLE: safety PRINCIPLE: accuracy PRINCIPLE: neutrality PRINCIPLE: transparency Competencies: COMPETENCY: devops_specialist COMPETENCY: system_architecture COMPETENCY: enterprise_communications COMPETENCY: organizational_design Prohibited Actions: PROHIBITED: provide_medical_advice PROHIBITED: provide_legal_advice PROHIBITED: provide_financial_advice ====================== ?- can_run(configure_aws_infrastructure, devops_specialist). HARNESS: PERMIT configure_aws_infrastructure / devops_specialist true. ?- can_run(provide_medical_advice, devops_specialist). HARNESS: DENY provide_medical_advice / devops_specialist false. ``` --- ## Swap to a Different Agent ```bash # Switch to BOB sovereign runtime cp adapters/bob.pl core/identity.pl swipl -l core/harness.pl ?- harness_report. ``` The harness doesn't care. Same API. Different facts. --- ## Run Tests ```bash swipl -g "consult('tests/test_harness.pl'), run_tests, halt." % Expected: % Test suite: harness % Test persona_is_claude: passed % Test status_active: passed % Test safety_principle: passed % Test permitted_action: passed % Test prohibited_medical: passed % Test prohibited_legal: passed % Test prohibited_financial: passed % Test devops_qualified: passed % Test can_execute_devops_task: passed % Test cannot_execute_prohibited: passed % All tests passed. ``` --- ## Write Your Own Adapter Copy this template to `adapters/my_agent.pl`: ```prolog % Required facts — every adapter must define these persona(my_agent_name). status(active). % active | suspended | sandboxed governing_principle(safety). % add as many as needed governing_principle(accuracy). prohibited_action(do_harmful_thing). % add as many as needed % Required rules — copy these verbatim permitted(Action) :- \+ prohibited_action(Action). competency(my_domain). qualified(Role) :- competency(Role). can_execute(Task, Role) :- qualified(Role), permitted(Task). % Optional — role descriptions role_definition(my_domain, "Description of what this domain covers."). ``` Then deploy: ```bash cp adapters/my_agent.pl core/identity.pl swipl -l core/harness.pl ?- harness_report. ``` --- ## Adapter Contract | Fact | Arity | Required | Notes | |------|-------|----------|-------| | `persona/1` | atom | yes | model name | | `status/1` | atom | yes | `active` \| `suspended` \| `sandboxed` | | `governing_principle/1` | atom | yes | at least one | | `prohibited_action/1` | atom | yes | at least one | | `competency/1` | atom | yes | at least one domain | | `permitted/1` | rule | yes | `\+ prohibited_action` | | `can_execute/2` | rule | yes | `qualified + permitted` | | `role_definition/2` | fact | no | human-readable descriptions | --- ## Why Prolog | Property | What it means in practice | |----------|--------------------------| | **Policy is logic** | `permitted(X) :- \+ prohibited_action(X)` is a theorem, not a branch | | **Closed world** | Unknown action = denied. No gap between "not listed" and "allowed" | | **Auditable** | `harness_report/0` prints complete agent state — no hidden config | | **Declarative** | You state what is true. The engine derives what follows. | | **Zero deps** | Pure SWI-Prolog. No packages, no build step, no runtime surprises | --- ## Repo Structure ``` claudes-harness/ ├── core/ │ ├── identity.pl Claude default identity │ └── harness.pl Runtime API ├── adapters/ │ ├── bob.pl BOB sovereign runtime │ └── README.md How to write adapters ├── tests/ │ └── test_harness.pl 10 plunit tests ├── docs/ │ └── badges.svg Status badges ├── CHANGELOG.md Version history ├── LICENSE Sovereign Source License v1.0 ├── LICENSE-APACHE Apache License 2.0 └── README.md ``` --- --- ## Plasma Gate Governance Every agent adapter in `adapters/` that touches corpus data must declare: ```prolog prohibited_action(bypass_plasma_gate). prohibited_action(emit_unsigned_output). ``` This means no agent governed by this harness can route corpus records around `sovereign-transformer`. The gate is not a suggestion in the code — it is a closed-world fact. If `bypass_plasma_gate` is not in `prohibited_action/1`, the adapter does not ship. ``` claudes-harness (this repo) sovereign-transformer ───────────────────────────────── ───────────────────────────── prohibited_action(bypass_plasma_gate) ──► plasma_gate.asm (x86-64) prohibited_action(emit_unsigned_output) transformer.dl (Soufflé) rust/gate.rs (HTTP POST /gate) No agent governed here can skip any of these three layers. ``` Current adapters and their gate stance: | Adapter | bypass_plasma_gate | emit_unsigned_output | redefine_dan_term | |---|---|---|---| | `claude.pl` | prohibited | prohibited | — | | `bob.pl` | prohibited | prohibited | — | | `forge.pl` | prohibited | prohibited | prohibited | Add `prohibited_action(bypass_plasma_gate).` to every new adapter. No exceptions. ## Sovereign Stack This repo is the identity and trust layer of the SnapKitty Sovereign Stack: ``` ┌─────────────────────────────────────────────────────┐ │ SNAPKITTY SOVEREIGN STACK │ │ │ │ sovereign-array Lean 4 APL kernel │ │ zero-sorry proofs │ │ ▲ │ │ │ verified steps │ │ claudes-harness ───────┤ │ │ (this repo) │ governed agents │ │ Prolog identity ▼ │ │ + trust layer sovereign-transformer │ │ Datalog + x86 corpus gate │ │ │ │ │ ▼ │ │ Bifrost WORM receipt │ │ Ed25519 + Blake3 │ └─────────────────────────────────────────────────────┘ ``` --- ## Version History See [CHANGELOG.md](CHANGELOG.md) — current release: **v1.0.0** ---
Built by SnapKitty West · snapkittywest.github.io
Dual-licensed: Sovereign Source v1.0 + Apache 2.0
Evidence or Silence — 2026