You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
<imgsrc="./image-1.png?v=1"alt="KryptoDB Web Dashboard"style="max-width: 100%" />
25
29
</div>
26
30
27
-
---
31
+
28
32
29
33
## 🔒 Security Model & Residual Trust
30
34
@@ -36,7 +40,7 @@ The system is designed to isolate agents from one another, but heavily relies on
36
40
-**Master & Scope Keys:** KEKs are held in memory by the daemon. The host filesystem must aggressively protect `.env` and `synapse-scope-keys.json`.
37
41
-**Backend Storage:** Redis and Neo4j hold ciphertexts and perform pre-filtering. Standard network isolation and database ACLs are still required to prevent tampering.
38
42
39
-
---
43
+
40
44
41
45
## ⬡ Architecture Overview
42
46
@@ -51,7 +55,7 @@ KryptoDB operates as an intermediary broker between LLM agents and the encrypted
51
55
52
56
*Note: Ephemeral clustering (Louvain community detection) can be invoked by setting `mode='global'` on queries, which temporarily projects the graph into Neo4j RAM and instantly destroys it after summarization to protect memory limits.*
53
57
54
-
---
58
+
55
59
56
60
## 🌟 Key Features
57
61
@@ -61,7 +65,7 @@ KryptoDB operates as an intermediary broker between LLM agents and the encrypted
61
65
***Asynchronous Human-in-the-Loop (HITL):** Fully asynchronous, non-blocking FastAPI endpoints for reviewing, approving, or rejecting sensitive agent writes to the graph database.
62
66
***Cryptographic Memory Partitioning:** Strict AES-256-GCM envelope encryption guarantees agents can only traverse and recall nodes within their authorized scopes.
*The web UI is now accessible at http://127.0.0.1:8000.*
89
93
90
-
---
94
+
91
95
92
96
## 🔑 Provision an Agent API Key
93
97
Once your deployment is running (via Docker or Python), use the admin key to mint an agent credential:
@@ -141,14 +145,14 @@ args = [
141
145
]
142
146
```
143
147
144
-
---
148
+
145
149
146
150
## 🛠 MCP Tools Reference
147
151
148
152
The primary interface for agents is the MCP tool suite.
149
153
150
154
| Tool Name | Purpose | Example Payload |
151
-
|-----------|---------|-----------------|
155
+
| --||--|
152
156
|`session_activate_tool`| Unlocks partition keys for the current session. **Must be called before querying.**|`{"active_partitions": ["research"]}`|
153
157
|`propose_fact_tool`| Write a new encrypted fact to a specific scope. |`{"subject": "Project X", "predicate": "relies_on", "obj": "DB1", "scope": "research"}`|
154
158
|`query_memory_tool`| Search authorized knowledge. Set `mode='global'` for Louvain clustering. |`{"subject_id": "Project X"}`|
@@ -157,7 +161,7 @@ The primary interface for agents is the MCP tool suite.
157
161
|`migrate_legacy_tool`| Convert authorized legacy facts into per-knowledge envelopes. |`{"scopes": ["research"]}`|
158
162
|`reclassify_tool`| Re-encrypt a knowledge item under a different active scope. |`{"node_id": "uuid-here", "to_scope": "operations"}`|
159
163
160
-
---
164
+
161
165
162
166
## 🛡 Production Deployment
163
167
@@ -186,10 +190,10 @@ docker run --rm \
186
190
```
187
191
*(Ensure input and output files are pre-created with `0600` permissions on the host. The CLI writes the new agent key to the output file without printing it to stdout.)*
188
192
189
-
---
193
+
190
194
## License
191
195
Released under the MIT License.
192
196
193
-
---
197
+
194
198
## Contributors
195
199
Made with ❤️ by **Harshit Kandpal** - *Creator & Lead Developer*
0 commit comments