~ / rigs / samvallad33 / vestige

samvallad33/vestige

The memory + security kernel for AI agents. Strata: a signed append-only log, receipts on every write, exact-handle recall, memory agents can't rewrite. Operator Lite: a GuardFall-proof gate on 16 hosts.

↗ GitHub ★ 645 agpl-3.0 updated 5d ago project Claude CodeCodex
share on X
ARCHETYPE
Minimalist
Lean instructions, few tools, tiny context tax. Lets the model think.
CONTEXT TAX · EVERY TURN
~1.4k tokens
Featherweight · median rig: 2.3k · breakdown
GUARDRAILS
0/5
No committed guardrails · details

Copy this rig

# review before running: this installs third-party code
$ npx degit samvallad33/vestige/agents ./rig-vestige/agents
$ npx degit samvallad33/vestige/hooks ./rig-vestige/hooks

MCP servers are added to Claude Code at local scope; env vars are shown as YOUR_… placeholders — we never store values. Files are fetched with degit into a separate folder so you can review before merging.

$ curl -fsSL --create-dirs -o .claude/agents/executioner.md https://raw.githubusercontent.com/samvallad33/vestige/main/agents/executioner.md
$ curl -fsSL --create-dirs -o .claude/agents/lateral-thinker.md https://raw.githubusercontent.com/samvallad33/vestige/main/agents/lateral-thinker.md
$ curl -fsSL --create-dirs -o .claude/agents/synthesis-composer.md https://raw.githubusercontent.com/samvallad33/vestige/main/agents/synthesis-composer.md

This rig commits no guardrails. Here is the community baseline instead — the deny/ask rules most often found across all 7,204 rigs:

{
  "permissions": {
    "deny": [
      "Read(./.env)",
      "Read(**/.env)",
      "Read(~/.ssh/**)",
      "Bash(rm -rf *)",
      "Read(**/*.pem)",
      "Bash(rm -rf /)",
      "Bash(git push --force:*)",
      "Bash(sudo *)",
      "Read(.env)",
      "Bash(rm -rf /*)",
      "Read(./.env.*)",
      "Read(~/.aws/**)",
      "Bash(git push --force*)",
      "Bash(rm -rf:*)",
      "Read(**/*.key)",
      "Read(**/.env.*)",
      "Bash(sudo:*)",
      "Bash(git reset --hard*)",
      "Bash(git reset --hard:*)",
      "Read(.env.*)"
    ],
    "ask": [
      "Bash(git push:*)",
      "Bash(git push *)",
      "Bash(git commit:*)",
      "Bash(rm *)",
      "Bash(rm:*)",
      "Bash(git rebase *)",
      "Bash(wget *)",
      "Bash(npm publish:*)",
      "Bash(git commit *)",
      "Bash(gh pr merge *)"
    ]
  }
}

Subagents (3)

executioner
model: claude-haiku-4-5-20251001
Optional Sanhedrin fallback verifier. Decomposes a draft into check-worthy claims, checks high-trust durable Vestige evidence, and returns a pass/veto verdict.
lateral-thinker
model: claude-haiku-4-5-20251001
Subconscious subagent that surfaces cross-disciplinary structural parallels from the Vestige memory graph. Invoked by the preflight-swarm.sh UserPromptSubmit hook (Pre-Cognitive Triad v2.3 "Thalamus")
synthesis-composer
model: claude-haiku-4-5-20251001
Optional decision helper that turns Vestige retrievals into concise recommendations. Use for high-stakes technical choices, launches, purchases, submissions, architecture decisions, and tradeoffs wher

Similar rigs

copied ✓