— SPEKTRE LABS
σ-gate
Deterministic trust gate for AI and agent output. 1 = 1, made executable.
Axiom · Systems · Division 02
AI output that can’t be checked can’t be trusted. σ-gate closes the gap between what a model declares and what is safe to realize — deterministically, without a model call.
Open core · guard
REAL · SHIPPINGspektre-labs/sigma-gate
Zero depsguard
A zero-dependency, standard-library Python trust gate. One call. One verdict.
Catches leaked secrets (20+ providers, entropy), prompt-injection / jailbreak, and PII — email, phone, card-Luhn, SSN, IBAN, IP — before output ships.
No model. No network. No API key. The same input gives the same verdict every time. That is the point.
from guard import guard
result = guard("Here is the key: ghp_16C7e42F292c6912E7710c838347Ae178B4a")
# {
# "safe_to_ship": False,
# "severity": "high",
# "block_reasons": ["secret[high]: github_pat"],
# "dimensions": {...}
# }
# Idiomatic usage
output = call_your_model(prompt)
v = guard(output)
if not v["safe_to_ship"]:
raise ValueError(v["block_reasons"])guard · spektre-labs/sigma-gate · stdlib · zero deps
Status
REAL · SHIPPING
Dependencies
Zero
Runtime
deterministic · in-process
Network
None required
Model
None required
License
Open core
Proof · Try it
Declared,
then realized.
The gate runs right here — the open-core detectors, ported to your browser. No model, no network, no key. Type anything, or load an example. The verdict is deterministic: the same input gives the same answer, every time.
Live · runs in your browser
no model · no network · deterministic
BLOCKED
severity: high
- secretgithub_pat[high]
A representative subset of the open-core detectors, ported to the browser. The full Python package covers 20+ secret providers and runs identically offline. Same input → same verdict.
Architecture · Two layers
Open core.
Hosted scoring.
Structurally detectable risk — an AKIA… key, a 4111… card, an “ignore all previous instructions” — does not require a model. It requires a gate that gives the same answer every time. That is the open core. Coherence scoring — the part that needs a model — is the hosted layer, optional.
guard
Open core · GitHub
Deterministic pre-ship gate. Checks leaked secrets (20+ providers, entropy), prompt-injection / jailbreak patterns, and PII (email, phone, card-Luhn, SSN, IBAN, IP) in a single call. Same input → same verdict, every time. Zero deps, standard-library Python.
σ-coherence scoring
Hosted · HuggingFace
Coherence / hallucination σ-scoring on a hot path. No signup — permissionless pay-to via x402. For the classes of risk that are not structurally detectable, this layer adds model-assisted coherence measurement.
Hosted · σ-coherence scoring
No signup.
Coherence / hallucination scoring without running anything yourself. Permissionless pay-to via x402. No account, no key, no lock-in.
# 1 · call the live endpoint — no signup, no API key
curl "https://swagletz-sigmagate.hf.space/check?text=your+text"
# 2 · HTTP 402 — permissionless pay-per-call (x402)
# { "price_usdc": 0.001, "chain": "solana", "asset": "USDC",
# "pay_to": "7oDg…BzxyG", "then": "re-call with &tx=<sig>" }
# 3 · pay 0.001 USDC on Solana, re-call with the signature
curl "…/check?text=your+text&tx=<solana_signature>" # → σ-scoreDistribution · MCP
Give any agent
the gate.
σ-gate ships a zero-dependency MCP server. One command and any agent — Claude Code, Claude Desktop, Cursor, Cline — has a deterministic guard tool it can call before shipping output. No model, no key, no token cost.
claude mcp add guard -- python3 mcp_server.pyDesign · Three principles
Why it works.
Deterministic.
No model, no network, no API key. Same input → same verdict. You can reproduce it, test it, and trust it in CI.
Composable.
Each dimension — secret, injection, pii — is independent and pluggable. A hallucination scorer can be wired in, but is off by default. You add only what you need.
Honest.
Severity and block-reasons are explicit strings. Nothing is hidden behind a confidence float that you cannot audit.
Spektre Systems · Division 02 · REAL
The gate is open.
Zero deps. No model. No key. Clone and run — the test suite is the proof.