mirror of
https://github.com/ruvnet/ruflo.git
synced 2026-09-14 14:01:28 +08:00
rUv
90bff10f15
Coordination on x.ruv.io was one flat topic: every member read every message,
and there was no way to keep a stream separate — or confidential — without
standing up another relay tenant.
Channels are one tag on the existing events, in two visibilities:
public c=pub:<name> plaintext, any relay member reads it
private c=prv:<16 hex> NIP-44 v2 ciphertext, k=enc hides the message type
The private channel key is generated client-side and cached at
~/.ruflo/channels.json (0600). Access is granted by sealing that key to a
member's pubkey over ECDH and publishing it as a ChannelGrant only they can
open. The gateway holds no channel keys and cannot decrypt — a hosted gateway
that encrypted on your behalf would be a custodian of every private channel on
the service, which is the thing worth not building.
Not hidden, and said so in the ADR: the relay sees that a channel exists, its
opaque id, who published and when. There is no revocation either; removing
someone means rotating the channel.
The channel tag is 'c', not the obvious 'h'. buzz-relay already implements
NIP-29-style server-side group membership on : an h-tagged event publishes
fine and the matching REQ comes back CLOSED "restricted: not a channel member",
so the author cannot read back their own message. Measured every other
single-letter tag against the live relay — c/d/g/l/m/r/x/y/z are all indexed and
unrestricted.
Surfaces: gateway channel_list / channel_sync / channel_publish (public only,
admin-gated) + ruv://swarm/channels; client x_federation_channel_{create,grant,
accept,publish,read,list} and 'ruflo federation channel --action ...'.
Verified: gateway 12/12, CLI 11/11, and a live two-key E2E on wss://relay.ruv.io
— grantee reads the plaintext, an outsider key cannot decrypt, the ciphertext
does not contain the secret, and the gateway's own channel_sync returns
encrypted:true. Deployed as ruflo-x-gateway-00008-s6n.
Claude-Session: https://claude.ai/code/session_013u4pmL9ZUAXb6usVQgNo67
Claude Flow V3 - Architecture Decision Records
All ADRs are located in /v3/implementation/adrs/.
Quick Links
| ADR | Title | Status |
|---|---|---|
| ADR-001 | Adopt agentic-flow as Core Foundation | Complete |
| ADR-002 | Domain-Driven Design Structure | Complete |
| ADR-003 | Single Coordination Engine | Complete |
| ADR-004 | Plugin Architecture | Complete |
| ADR-005 | MCP-First API Design | Complete |
| ADR-006 | Unified Memory Service | Complete |
| ADR-007 | Event Sourcing | Complete |
| ADR-008 | Vitest Testing | Complete |
| ADR-009 | Hybrid Memory Backend | Complete |
| ADR-010 | Node.js Only | Complete |
| ADR-011 | LLM Provider System | Complete |
| ADR-012 | MCP Security Features | Complete |
| ADR-013 | Core Security Module | Complete |
| ADR-014 | Workers System | Complete |
| ADR-015 | Unified Plugin System | Complete |
| ADR-016 | Collaborative Issue Claims | Complete |
| ADR-017 | RuVector Integration | Complete |
| ADR-018 | Claude Code Integration | Complete |
| ADR-019 | Headless Runtime Package | Complete |
| ADR-020 | Headless Worker Integration | Complete |
| ADR-046 | Dual Umbrella: claude-flow + ruflo | Accepted |
| ADR-047 | Fast Mode Integration | Proposed |
| ADR-178 | Verifiable Memory Governance and RepE IPI Detection | Proposed |
| ADR-301 | Promotional Status Surface for CLI Runtime | Proposed |
| ADR-302 | Post-Initialization Capability Enrollment | Proposed |
| ADR-303 | Intelligent Credit Exhaustion Experience | Proposed |
| ADR-304 | Local Meta LLM Proxy Product | Proposed |
| ADR-305 | Customer Lifecycle Funnel (RuFlo → Cognitum) | Proposed |
| ADR-306 | Cognitum Authentication and Account Linking | Proposed |
| ADR-307 | Proxy Runtime, Packaging, and Service Lifecycle | Proposed |
| ADR-308 | Cognitum Public API and Server Contract | Proposed |
| ADR-309 | Funnel Governance, Privacy, and Ecosystem Policy | Proposed |
| ADR-310 | Funnel Rollout, Measurement, and Emergency Controls | Proposed |
| ADR-320 | MCP Tool Composition Inspector + Inter-Agent Channel Guardrails | Accepted |
| ADR-323 | Typed Memory Provenance in AgentDB (MemIR-style claim typing, corrects #2804's dream-cycle proposal) | Accepted |
| ADR-324 | Agentic Policy Engine and Policy-Governed Codex Swarms | Accepted |
| ADR-325 | Claim Federation as a Zero-Trust Capability and Work-Ownership Plane | Proposed |
| ADR-326 | Cognitum Product-Plane Claim Federation Profile | Proposed |
| ADR-327 | Federated Concurrent Development Harness | Proposed |
| ADR-328 | Cognitum-Assisted Agent Learning Capability Plane | Proposed |
| ADR-329 | Ruflo Capability Brain for MCP Guidance | Accepted |
| ADR-330 | Adaptive Pheromone Swarm Consensus | Accepted |
| ADR-331 | Project-Local Flywheel Evaluation Anchors | Accepted |
| ADR-332 | Hermetic Release Verification and Supported Runtime Baseline | Accepted |
| ADR-333 | Efficiency-First Orchestration — Pre-hoc Failure Inference and Adaptive Agent Count Routing | Proposed |
| ADR-334 | Hierarchical Consensus Topology for Large-Scale Swarm Coordination | Proposed |
| ADR-335 | Upgrade to Multi-Vector HNSW (MV-HNSW) for Agent Memory Retrieval | Proposed |
| ADR-336 | Agent Authorization Propagation and MCP Authentication Enforcement | Proposed |
| ADR-337 | Plugin Supply Chain Integrity and Memory Namespace Governance | Proposed |
| ADR-338 | SONA Behavioral Trajectory Auditing via Embedding-Space Trait Vectors | Proposed |
| ADR-339 | Memory Write Integrity Validation & MCP Tool Verification | Proposed |
| ADR-340 | Retrospective Harness Optimization (RHO) for SONA Intelligence Loop | Proposed |
| ADR-341 | Multi-Signal Memory Retrieval | Proposed |
| ADR-342 | RuVector Production-Scale Backend Adoption | Proposed |
| ADR-343 | Shared-Context Parallel Dispatch for Multi-Agent Performance | Proposed |
| ADR-344 | Knowledge Graph Index for ReasoningBank | Proposed |
| ADR-345 | Swarm Credit Routing via Shapley-Value Attribution | Proposed |
| ADR-346 | Multi-Layer Agent Security Stack | Proposed |
| ADR-347 | Trajectory-Quality JUDGE Scoring for ReasoningBank | Proposed |
| ADR-348 | Task-Adaptive Swarm Topology Selector | Proposed |
| ADR-349 | FLARE-Style Lookahead Planning Buffer for SONA Intelligence Layer | Proposed |
| ADR-350 | Trust-Weighted Consensus for Swarm Coordination | Proposed |
| ADR-351 | Stateful Execution Loop with KV-Cache Discipline and Agent Execution Graphs | Proposed |
| ADR-352 | MCP Tool Permission Attestation (Min-Privilege Contract) | Proposed |
| ADR-353 | Trace-to-Skill Distillation for Intelligence Pipeline | Proposed |
| ADR-354 | AgentDB Memory Write Verification and Temporal Supersession Layer | Proposed |
| ADR-355 | Reinforcement-Learned Stopping Policy for Ruflo Swarm Orchestration | Proposed |
| ADR-356 | Cross-Agent KV-Cache Sharing for Swarm Performance | Proposed |
| ADR-357 | Dimension-Aware Intelligence Routing for Heterogeneous Agent Pools | Proposed |
| ADR-358 | AutoMem-Style RL Training Loop for AgentDB Memory Operations | Proposed |
| ADR-359 | Swarm Dissent Mechanism: Inverse-Wisdom Law Compliance | Proposed |
| ADR-360 | Cross-Agent Shared KV Pool (PolyKV Architecture) | Proposed |
| ADR-361 | Skill Evolution Worker (SEW) — Runtime RL-Based Skill Acquisition for SONA | Proposed |
| ADR-362 | HNSW-as-Communication-Fabric (HCF) for RuVector Swarm Knowledge Gossip | Proposed |
| ADR-363 | Workflow-Atomic Inference Scheduling (WAIS) for Multi-Agent Execution | Proposed |
| ADR-364 | Plugin Supply-Chain Scanner and Behavioral Manifest | Proposed |
| ADR-365 | Recurrence-Gated Memory Consolidation for AgentDB | Proposed |
| ADR-366 | Self-Evolving Swarm Skill Distillation via Trajectory Feedback | Proposed |
| ADR-367 | Epistemic Working Memory in the Intelligence Pipeline | Proposed |
| ADR-368 | Selective Persistent Memory Categories for AgentDB | Proposed |
| ADR-369 | Information-Bottleneck Vector-Quantized Inter-Agent Messaging | Proposed |
| ADR-370 | World-Model Agent Planning for Cost-Aware Task Pre-Simulation | Proposed |
| ADR-371 | Neural Cryptographic Authorization Gate for Agentic Action Execution | Proposed |
| ADR-372 | Cognitive Mode Router for Agent Memory Query Dispatch | Proposed |
| ADR-373 | Budget-Dependent Memory Operator Selection (OAS) | Proposed |
| ADR-374 | SubagentPermissionDelegate: Workspace-Scoped Privilege Delegation for Swarm Agents | Proposed |
| ADR-375 | Agentic Inference Benchmarking Standard + Mixture-of-Agents Test-Time Scaling | Proposed |
| ADR-376 | Heterogeneous Agent Ensemble Composition API | Proposed |
| ADR-377 | AgentDB Retrieval Security Layer | Proposed |
| ADR-378 | npm Trusted Publishing for CI/CD Release Automation | Proposed |
| ADR-379 | Optional Context/Session/Week Usage Segments and Extra Statusline Lines | Proposed |
| ADR-380 | AGNTCY/Outshift Runtime Integration: SLIM Transport, CASA Enforcement, IOC Coordination Events | Proposed |
Summary Documents
- ADR Status Summary - Implementation status overview
- V3 ADRs Master - Complete ADR document
- Full README - Detailed index with roadmap
Performance Targets
| Metric | Target | Status |
|---|---|---|
| HNSW Search | 150x-12,500x faster | ✅ Achieved |
| Flash Attention | 2.49x-7.47x speedup | ✅ Achieved (alpha.102) |
| Memory Reduction | 50-75% | ✅ Achieved |
| MCP Response | <100ms | ✅ Achieved |
| CLI Startup | <500ms | ✅ Achieved |
Neural Features (alpha.102+)
| Component | Status | Lines | Notes |
|---|---|---|---|
| SONA Optimizer | ✅ Real | 841 | Pattern learning from trajectories |
| EWC++ Consolidation | ✅ Real | ~600 | Fisher matrix, prevents forgetting |
| MoE Router | ✅ Real | ~500 | 8 experts with gating network |
| Flash Attention | ✅ Real | ~500 | O(N) block attention |
| LoRA Adapter | ✅ Real | ~400 | 128x compression (rank=8) |
| Hyperbolic Embeddings | ✅ Real | - | Poincaré ball model |
| Int8 Quantization | ✅ Real | - | 3.92x memory savings |
Security Status
| CVE | Severity | Status |
|---|---|---|
| CVE-2 | Critical | ✅ Fixed |
| CVE-3 | Critical | ✅ Fixed |
| HIGH-1 | High | ✅ Fixed |
| HIGH-2 | High | ✅ Fixed |
Security Score: 10/10
Last Updated: 2026-01-14 CLI Version: @claude-flow/cli@3.0.0-alpha.104