Molten
Governed agent runtime: kill switch, circuit breakers, four-tier sandbox, dead-man's switch. Private build with no public artifacts.
Proof ledger
- Classification
- Private build
- Repository
- Not public
- Language
- TypeScript
- Licence
- Private
- Status
- Paused
- Tests
- 1 recorded gates
- Last verified
- 2026-08-06
This is a private build. No source artifacts are published, so the claims below are architectural descriptions rather than externally verifiable evidence.
What it is
Molten is a runtime that assumes an agent will eventually misbehave and makes stopping it cheap. It is a private build. There is no public repository and no public CI, so treat the description as architecture context rather than as verified proof.
Architecture
- Kill switch terminates a run from outside the agent's own control loop.
- Circuit breakers trip on repeated tool failure instead of retrying indefinitely.
- Four-tier sandbox escalates capability only as the run earns it.
- Dead-man's switch halts execution when the operator heartbeat stops.
Tests and gates
- No public test artifacts. Test claims for this build are not independently verifiable.
Limits
- Private build. No repository URL, no package, no public CI.
- Described here for architecture context only.
Patterns applied
Acceptance tests for agent work →
Define done before the agent starts.
Evals that gate releases →
A golden suite in CI, not a spreadsheet.
MCP permission scoping →
Deny by default, declare every tool.
Observability for agent runs →
One trace ID from request to receipt.
Cost controls that actually stop spend →
Ceilings enforced before the call, not after the invoice.
Approval gates that suspend the run →
Nothing downstream executes before a human approves.
Related proof
ClawKeeper →
Governed Claude agent control plane. A deterministic policy engine runs before every LLM call, autonomous spend defaults to zero, and the audit log is enforced by the database.
TechTide Harness Kit →
Trust contracts for agent skills expressed as JSON Schema: risk tiers, tool permissions, deny-by-default egress, approval gates, and prompt-injection fixtures behind a wall of CI validation gates.
CipherClaw →
Deterministic multi-agent debugger with zero LLM calls in the analysis path: causal graphs, weighted root-cause scoring, and failure prediction.
Swarm 357 →
357 Claude agent roles across six business layers, with portable memory, enforced cost caps, a bash policy gate, and durable checkpoints.
This page is implementation proof only. Engagement scope and pricing live on TechTide AI.
AI Production Systems at TechTide AI→© 2026 Alex Cinovoj · TechTide AI · Columbus, OH