LDT / flowaxon

$ whoami — AI agent systems architect · 11y production · UTC+7

Most agents in production have no brakes. I build them.

When autonomous workers run without mechanical brakes, one unconstrained loop overwrites production configs, leaks API keys into git history, or breaks live traffic on your watch.

Autonomous AI agents are already in production. Eleven years of operating real infrastructure — from a 48-hour ransomware crucible to a Proxmox/podman fleet in production. One drive underneath it all: take what repeats, and make it obey — one system, seen from above. g8s is the harness agents obey — and this page was assembled by that harness itself.

g8scontainment F0/F1/F2sealed writes6-stage zero-trust CIzero-origin edge
1,146repos surfed · 5yr
star corpus taste-mined 2026-10-31 · AI wave 2025 = 456★github.com/tamld?tab=stars
6/6CI stages green
code-sync · structure · links · SAST · DAST · devsecops — flowaxon enginegithub.com/tamld/flowaxon/actions
166msp95 · production edge
k6 baseline, 0% failures, zero-origin by designcommit 1b7405f · k6 runbook
1:1issue = worker = receipt
cardinality law — one task, one worker, one sealed receiptgithub.com/tamld/g8s

hover / focus a stat → its source

The site that assembled itself.

Act I — Built by its own harness. Every line of this page passed through the containment it describes: briefs issued, workers claimed tasks under a lease (a timed credential that bounds sandbox execution and auto-expires), write receipts (a one-time permission slip that names exactly which files a worker may touch) sealed every write, and human-confirmed gates (a mandatory checkpoint where an engineer reviews diffs before merge) guarded every commit. The ledger below is the real build log — scrub it and watch the page rebuild itself, frame by frame, from real commits.

BUILD LEDGER — g8s harness2026-10-31 → 11-01
t+0.0s

the wireframe above reassembles in commit order — the same order the real page was built

DWG:FX-V5-BLD
REV:5.1
SCALE:1:1
DATE:2026-11-01
ATTEST:g8s-harness

sources: every row links its commit in github.com/tamld/tamld.github.io · doctrine in docs/research/

One task travels the containment. Watch it.

Act II — The containment rig. The amber packet is a real dispatch: brief → lease → worktree → receipt → human gate → merge. Click a tier to descend into its anatomy. Drag to orbit. Press Space or click the packet to freeze the story.

dispatching…

F2 sandbox · isolated worktrees · killable process group F1 executor · single-use write receipts F0 architect · human-confirmed · the only tier that commits

ground truth: ADR-0032 — containment levels · the packet replays the real capture in ACT III

Keyboard-first. Trust nothing.

Act III — Interactive drill. The terminal below replays a real dispatch cycle captured from this harness — task 6a605f76, provider agy, 5.86s end to end. Nothing scripted by hand. Press / for the command palette, Tab to complete, Enter to run.

$
SPECIMEN-01 // FORENSIC WRITE-RECEIPT RECORDED 2026-11-01 · 5.86s
{
  "receipt_id": "96fd2088fe80da90",
  "status": "SEALED · SINGLE-USE",
  "task_id": "6a605f76-8a88-4b7f-a457-df194c6775e6",
  "operator": "tamld@████████",
  "lease": {
    "token": "b9f379a2████████████████",
    "duration_s": 60,
    "affinity": "provider=agy model=gemini-3.8-flash-low"
  },
  "sandbox": {
    "tier": "F1",
    "worktree": "/private/tmp/g8s-sandboxes/wt-████████",
    "path_scope": [
      "+/sites/v5/index.html",
      "+/assets/v5/*",
      "-/etc/████████",
      "-~/.ssh/████████"
    ]
  },
  "attempt": {
    "response": { "ok": true, "harness": "g8s" },
    "result_hash": "sha256:99bcdd7e████████████████████████████",
    "duration_ms": 5860
  },
  "human_gate": "CONFIRMED · MERGE_PERMITTED (tamld, 2026-11-01T22:12:00Z)"
}
AUDIT: immutable-wal · hash-verified RECEIPT: 96fd2088fe80da90

capture artifact: task 6a605f76 · receipt 96fd2088 · result {"ok":true,"harness":"g8s"} · commands: submit · watch · verify · charter

The Harness — one minute, with sound.

Act IV — The film. Three movements: the problem, the harness, the proof. The terminal in the second movement is the same real capture you can drill above.

◈ sound on · Foley + VO · EBU R128 −14 LUFS 16:9 master · 9:16 vertical cut · v3 remaster −14.7 LUFS