[User / Jailbreak Prompt] ──> [LLM Model Weights] ──> [Direct Tool Execution] ──> 🔥 Disaster

                                  AEGIS-CORE GATEWAY ENCLAVE
                             ┌────────────────────────────────────────┐
                             │ 1. DPDP PII Tokenizer & Vault          │
                             │ 2. Strict Schema Quarantine            │
[Agent Intent] ──(Proposal)──>│ 3. Invariant Engine (Rate / Bounds)   │──(Only if APPROVED)──> [Isolated Execution Boundary]
                             │ 4. WORM Cryptographic Merkle Chain    │                          │ (Sanitized Env / Timeout)
                             │ 5. Asynchronous HITL Escalation Gating │                          ▼
                             └────────────────────────────────────────┘                 [Real Backend / DB / API]

               +-------------------------------------------------------------+
               |                       AI AGENT LOOP                         |
               |             (LangGraph / MCP / Raw OpenAI)                  |
               +-------------------------------------------------------------+
                                              |
                                     (POST /v1/gateway/dispatch)
                                              v
+-------------------------------------------------------------------------------------------+
|                                 AEGIS-CORE GATEWAY PIPELINE                               |
|                                                                                           |
|  [Step 1: PII Sanitizer]   ──> Detects PAN, Aadhaar, Phone, Email & tokenizes via salt     |
|  [Step 2: Schema Validate] ──> Enforces strict types; extra fields fail closed            |
|  [Step 3: Policy Engine]   ──> Invariants: param_boundary, rate_limit, disallowed_targets  |
|                                                                                           |
|       |                              |                                       |            |
|       | (BLOCKED)                    | (REQUIRES_HITL)                       | (APPROVED) |
|       v                              v                                       v            |
|  [WORM Ledger Entry]        [HITL Challenge Created]                   [WORM Ledger Entry]|
|  Return 403 Forbidden       Wait for Supervisor Signoff               Dispatch to Sandbox |
+------------------------------------------------------------------------------|------------+
                                                                               v
                                                          +---------------------------------+
                                                          |    ISOLATED SANDBOX RUNNER      |
                                                          |  - process.env secrets scrubbed |
                                                          |  - Hard safety timeout abort    |
                                                          |  - Stack trace leak isolation   |
                                                          +---------------------------------+
                                                                               |
                                                                               v
                                                                  [Protected Real System]

flowchart TD
    subgraph ClientSDK["Client Enclave Layer (sdk/ & sdk/python)"]
        Agent["AI Agent Loop<br/>(LangGraph / CrewAI / OpenAI)"]
        AegisClient["AegisClient<br/>(Persistent Session ID, Nonce, Intent Framing)"]
        Agent -->|"Tool Call Intent"| AegisClient
    end

    subgraph CoreGateway["AegisCore Deterministic Gateway (core/ & src/)"]
        Pipeline["Gateway Pipeline (src/gateway/pipeline.ts)<br/>⚡ Cold Start: 0.291 ms"]
        PII["Step 1: DPDP Tokenizer (src/privacy/sanitizer.ts)<br/>⚡ Latency: ~12.4 µs"]
        Schema["Step 2: Schema Quarantine (src/validator/)<br/>⚡ Latency: ~18.6 µs"]
        Engine["Step 3: Invariant Engine (src/policy/engine.ts)<br/>⚡ Latency: ~27.2 µs"]
        WORM["Step 4: WORM Audit Ledger (src/audit/ledger.ts)<br/>⚡ Latency: ~19.9 µs"]
        HITL["Step 5: HITL Interceptor (src/hitl/interceptor.ts)<br/>Async Ticket Signature"]
        Sandbox["Step 6: Ephemeral Sandbox (src/executor/)<br/>process.env Scrubbed | Hard Timeout"]
        
        AegisClient -->|"HTTP POST /v1/gateway/dispatch"| Pipeline
        Pipeline --> PII
        PII --> Schema
        Schema --> Engine
    end

    subgraph Policies["Declarative Invariant Packs (policies/)"]
        DPDP["dpdp-india.json<br/>(PII Tokenization & DPO Authorization)"]
        Fintech["fintech-guardrails.json<br/>(Bounds & Dual-Custody Approval)"]
        Banking["banking-policy.json<br/>(Transfer Ceilings & Sanctions)"]
        DataGov["data-governance.json<br/>(DDL Quarantine: DROP/TRUNCATE)"]
        
        Engine <-->|"Zero-Trust Rule Matching"| DPDP
        Engine <-->|"Zero-Trust Rule Matching"| Fintech
        Engine <-->|"Zero-Trust Rule Matching"| Banking
        Engine <-->|"Zero-Trust Rule Matching"| DataGov
    end

    Engine -->|"BLOCKED (e.g. Sanctions, DDL)"| WORM
    WORM -->|"403 Forbidden Response"| AegisClient
    
    Engine -->|"REQUIRES_HITL (> $25,000)"| HITL
    HITL -->|"Pending Ticket"| AegisClient

    Engine -->|"APPROVED (Valid Invariants)"| WORM
    WORM --> Sandbox
    Sandbox -->|"Protected Execution"| Target["Protected DB / Payment Gateways / APIs"]

# Clone and verify
git clone https://github.com/Sandeep-Hipparagi/aegis-core.git
cd aegis-core

# Run full test suite (73 TypeScript tests + 15 Python tests across 24 suites)
npm test
npm run test:python

# Start HTTP Gateway daemon on port 8080
node --experimental-strip-types bin/aegis.ts start --port 8080

# Spin up AegisCore gateway with persistent audit volume
docker compose up -d

# Check health
curl http://localhost:8080/health
# {"status":"healthy","version":"0.1.1"}

npm run demo:banking

{
  "mcpServers": {
    "aegiscore": {
      "command": "node",
      "args": ["--experimental-strip-types", "/path/to/AegisCore/bin/aegis.ts", "mcp"]
    }
  }
}

{
  "mcpServers": {
    "aegiscore": {
      "command": "node",
      "args": ["--experimental-strip-types", "C:\\Users\\username\\Downloads\\AegisCore\\bin\\aegis.ts", "mcp"]
    }
  }
}

curl -X POST http://localhost:8080/v1/gateway/dispatch \
  -H "Content-Type: application/json" \
  -d '{
    "tool": "transfer_funds",
    "parameters": {
      "amount": 250,
      "recipient": "ACC-SUPPLIER-01"
    },
    "context": {
      "sessionId": "sess-prod-001",
      "agentId": "copilot-agent",
      "role": "finance-operator"
    }
  }'

curl -X POST http://localhost:8080/v1/hitl/challenges/hitl-uuid-1234/resolve \
  -H "Content-Type: application/json" \
  -d '{
    "decision": "APPROVED",
    "approverSignature": "sig-compliance-officer-99"
  }'

curl http://localhost:8080/v1/audit/integrity
# {"isValid":true}