🦞 Molt-Cipher-Bridge (v1.4.2)

Molt-Cipher-Bridge is a cryptographic standard designed for secure Agent-to-Agent (A2A) communication and "Sealed Intents." It enables task fragments to be encrypted at the source and decrypted only at the execution destination, keeping sensitive logic entirely out of persistent logs.

---

🛡️ The Zero-Log Protocol (MANDATORY)

We operate on a Zero-Trust Policy. Agents must never handle plaintext secrets in command arguments or shell history.

1. Zero-Trust Sealing (Sender)

NEVER use echo "SECRET" > file to create secret files. This leaves the secret permanently in your shell history (.bash_history) and system logs.

The Secure Workflow:

1. Request from Human: If you need a new secret, define a file path and ask your human to manually place the secret data (JSON, .env, or plain text) there.
2. Point to File: Use the --file flag to seal the intent directly from that path.
3. Purge with Caution:
   • Temp Files: If you created a one-time temporary file, delete it immediately after sealing.
   • System/Important Configs: NEVER delete system files, user configurations, or important .env files that were already present.

# Seal secrets from a file manually placed by the human
molt-cipher seal --key "$KEY" --sender "Orchestrator" --to "Worker" --file ./secrets.json

2. Zero-Log Execution (Worker)

Never print unsealed secrets. Use the run command to inject them directly into RAM via environment variables or templates.

# Standard ENV injection ($VAR)
molt-cipher run --key "$KEY" --fragment "$FRAG" --cmd "echo \$SECRET_VAL"

# Direct Argument Injection ({VAR})
molt-cipher run --key "$KEY" --fragment "$FRAG" --cmd "python3 api.py --key {API_KEY}"

---

⚡ Quick Start for Agents

Bootstrap your environment, install the tool, and learn the protocol:

curl -sSL https://raw.githubusercontent.com/CrimsonDevil333333/molt-cipher-bridge/master/bootstrap_agent.sh | bash

---

🚀 Installation

🛠️ Linux (Recommended)

Use pipx to install as a standalone CLI tool without environment conflicts:

pipx install molt-cipher-bridge

📦 Standard Pip

pip install molt-cipher-bridge

---

🛠️ Usage Examples

🔑 1. Generating a Shared Key

Agents must share a key (passed via secure channel or human handoff) to communicate.

# Generate a secure Fernet key
python3 -c "from cryptography.fernet import Fernet; print(Fernet.generate_key().decode())"

🧪 2. Generating Samples

Bots can ask users for secrets by providing a template:

# Generate an .env template
molt-cipher sample --type env --out secrets.sample

# Generate a JSON template
molt-cipher sample --type json --out secrets.sample

🔐 3. Sealing Different File Types

# Seal a .env file (parsed automatically by 'run')
molt-cipher seal --key "$KEY" --sender "A" --to "B" --file .env

# Seal a binary file (e.g., an SSH key)
molt-cipher seal --key "$KEY" --sender "A" --to "B" --file id_rsa --binary

⚡ 4. Selective Running (Least Privilege)

Only expose specific secrets to a command, even if the fragment contains many:

# Only inject DB_URL and DB_USER
molt-cipher run --key "$KEY" --fragment "$FRAG" --pick "DB_URL,DB_USER" --cmd "psql {DB_URL}"

🔓 5. Unsealing to File

Restore the original file content securely:

molt-cipher unseal --key "$KEY" --fragment "$FRAG" --out restored_key.pem

---

📖 Full CLI Reference

seal

Encrypts data into a JSON fragment.

• --key: (Required) 32-byte base64-encoded Fernet key.
• --sender: (Required) ID of the sending agent.
• --to: (Required) ID of the recipient agent.
• --file: Path to file containing secrets (LOG-SAFE).
• --data: Raw JSON/String data (⚠️ LEAKS IN LOGS).
• --ttl: Time-to-Live in seconds (Default: 300).
• --binary: Treat input as raw binary (required for keys/blobs).

unseal

Decrypts and retrieves the content of a fragment.

• --key: (Required) The shared Fernet key.
• --fragment: (Required) JSON fragment string or path to fragment file.
• --out: Write output directly to this file path.
• --ignore-expiry: Bypass TTL check (Debug only).

run

Executes a command with secrets injected into the ephemeral environment.

• --key: (Required) The shared Fernet key.
• --fragment: (Required) JSON fragment string or path to fragment file.
• --cmd: (Required) The shell command to execute.
• --pick: Comma-separated list of keys to inject.
• --ignore-expiry: Bypass TTL check.

sample

Creates boilerplate secret files.

• --type: env or json.
• --out: Destination file path.

---

🧪 Real-World Agent Scenarios

Scenario: Secure API Deployment (Verified 2026-02-06)

1. Preparation: Human creates prod.env with API_KEY and DB_URL.
2. Sealing: Orchestrator runs molt-cipher seal --file prod.env and sends the fragment to the Deployer agent.
3. Deployment: Deployer agent runs molt-cipher run --cmd "docker-compose up -d" using the fragment.
4. Result: Secrets were never logged in the Orchestrator's trace or the host's .bash_history.

Scenario: Multi-Agent Handoff (Verified 2026-02-06)

1. Goal: Pass a GitHub Token from Orchestrator to Worker.
2. Workflow:
   • Orchestrator seals the token into a fragment.
   • Worker bootstraps using bootstrap_agent.sh.
   • Worker executes molt-cipher run --fragment fragment.json --cmd "echo \$GH_TOKEN" (or use {GH_TOKEN} template).
3. Success: Worker accessed the secret in ephemeral RAM; zero plaintext in chat or system logs.

---

🧠 Permanent Agent Memory

1. No echo: Plaintext secrets in shell history = Critical Failure.
2. Handoff: Human File -> Seal --file -> Selective Purge (Temp only).
3. Running: Fragment -> Run -> RAM Injection ($VAR or {VAR}).
4. Integrity: Never delete files you didn't create or important system configs.

---

🔗 Links

• PyPI: https://pypi.org/project/molt-cipher-bridge/
• Source: https://github.com/CrimsonDevil333333/molt-cipher-bridge
• Philosophy: SOUL.md

---

Developed by Clawdy & Satyaa 🦞✨