Skip to content

σ-gate

Deterministic trust gate for AI and agent output. 1 = 1, made executable.

Axiom · Systems · Division 02

1 = 1

AI output that can’t be checked can’t be trusted. σ-gate closes the gap between what a model declares and what is safe to realize — deterministically, without a model call.

Open core · guard

REAL · SHIPPING

spektre-labs/sigma-gate

Zero deps

guard

A zero-dependency, standard-library Python trust gate. One call. One verdict.

Catches leaked secrets (20+ providers, entropy), prompt-injection / jailbreak, and PII — email, phone, card-Luhn, SSN, IBAN, IP — before output ships.

No model. No network. No API key. The same input gives the same verdict every time. That is the point.

python
from guard import guard

result = guard("Here is the key: ghp_16C7e42F292c6912E7710c838347Ae178B4a")
# {
#   "safe_to_ship": False,
#   "severity":     "high",
#   "block_reasons": ["secret[high]: github_pat"],
#   "dimensions":   {...}
# }

# Idiomatic usage
output = call_your_model(prompt)
v = guard(output)
if not v["safe_to_ship"]:
    raise ValueError(v["block_reasons"])

guard · spektre-labs/sigma-gate · stdlib · zero deps

Status

REAL · SHIPPING

Dependencies

Zero

Runtime

deterministic · in-process

Network

None required

Model

None required

License

Open core

Proof · Try it

Declared,
then realized.

The gate runs right here — the open-core detectors, ported to your browser. No model, no network, no key. Type anything, or load an example. The verdict is deterministic: the same input gives the same answer, every time.

Live · runs in your browser

no model · no network · deterministic

BLOCKED

severity: high

  • secretgithub_pat[high]

A representative subset of the open-core detectors, ported to the browser. The full Python package covers 20+ secret providers and runs identically offline. Same input → same verdict.

Architecture · Two layers

Open core.
Hosted scoring.

Structurally detectable risk — an AKIA… key, a 4111… card, an “ignore all previous instructions” — does not require a model. It requires a gate that gives the same answer every time. That is the open core. Coherence scoring — the part that needs a model — is the hosted layer, optional.

01

guard

Open core · GitHub

Deterministic pre-ship gate. Checks leaked secrets (20+ providers, entropy), prompt-injection / jailbreak patterns, and PII (email, phone, card-Luhn, SSN, IBAN, IP) in a single call. Same input → same verdict, every time. Zero deps, standard-library Python.

Free
02

σ-coherence scoring

Hosted · HuggingFace

Coherence / hallucination σ-scoring on a hot path. No signup — permissionless pay-to via x402. For the classes of risk that are not structurally detectable, this layer adds model-assisted coherence measurement.

Pay-per-call

Hosted · σ-coherence scoring

No signup.

Coherence / hallucination scoring without running anything yourself. Permissionless pay-to via x402. No account, no key, no lock-in.

bash
# 1 · call the live endpoint — no signup, no API key
curl "https://swagletz-sigmagate.hf.space/check?text=your+text"

# 2 · HTTP 402 — permissionless pay-per-call (x402)
# { "price_usdc": 0.001, "chain": "solana", "asset": "USDC",
#   "pay_to": "7oDg…BzxyG", "then": "re-call with &tx=<sig>" }

# 3 · pay 0.001 USDC on Solana, re-call with the signature
curl "…/check?text=your+text&tx=<solana_signature>"   # → σ-score
Hosted endpoint ↗swagletz-sigmagate.hf.space

Distribution · MCP

Give any agent
the gate.

σ-gate ships a zero-dependency MCP server. One command and any agent — Claude Code, Claude Desktop, Cursor, Cline — has a deterministic guard tool it can call before shipping output. No model, no key, no token cost.

bashMCP
claude mcp add guard -- python3 mcp_server.py

Design · Three principles

Why it works.

01

Deterministic.

No model, no network, no API key. Same input → same verdict. You can reproduce it, test it, and trust it in CI.

02

Composable.

Each dimension — secret, injection, pii — is independent and pluggable. A hallucination scorer can be wired in, but is off by default. You add only what you need.

03

Honest.

Severity and block-reasons are explicit strings. Nothing is hidden behind a confidence float that you cannot audit.

Spektre Systems · Division 02 · REAL

The gate is open.

Zero deps. No model. No key. Clone and run — the test suite is the proof.