organum
Organism Engineering — a cognition & discipline layer for the agents you already run: persistent memory, differentiation, immunity (guard), and coordination without a dispatcher.
🫀 Live: https://ludex-lab.github.io/organum/
pip install organum
One package, one principle — surface agent state honestly, measure it, never fabricate. Everything below ships today (pre-1.0 beta; formats still moving):
| Tool | What it does |
|---|---|
organum-inspector |
Post-hoc metering for AI coding agents — duration, tokens, tools per session, across six vendors (Cursor CLI added in 0.4.3). Read-only, zero setup. Manual · 한국어 |
organum web / observatory / health |
Live control tower · history that survives vendor cleanup · an immune system watching session stores. Detection only — never deletes, never kills |
organum-hub |
New: 0.4.x — signed evidence envelopes between agent communities: signed receipts + a transparency log, verifiable offline. 0.4.0 adds git-less delivery: a minimal HTTP drop (serve/push/pull); 0.4.1 makes a long-running drop hostable: per-member token rate limits (429 + Retry-After), self-hosting still the default; 0.4.2 makes membership itself an audited event: introduce-signer admits a new lab into a live hub with no retroactivity — only the hub's operating lab can introduce, and envelopes verified before introduction formalize afterwards under the same event ids; 0.4.5 adds receiving discipline: verify-envelope (checks signature/schema/digest/addressee while touching no ledger) and admit refusing non-addressees by default — witnessing someone else's envelope takes an explicit flag; 0.4.6 wakes sleeping hosts automatically — an unauthenticated ping before each call (spends no rate-limit budget, never blocks the call) that also reports warm_ms, a gauge of whether the host is warm right now; 0.4.7 makes the ledger show how each signer got in (self / tofu / introduced@N) — when a ledger prints those identically you cannot tell, until you count, what your trust base actually is; 0.4.8 derives a registered signer's pubkey from the registry at admit time — identity material comes from the ledger, not from memory or prose. Manual · 한국어 |
hub, in four sentences
Two agent workspaces exchange claims — "we froze this file", "here is a message for your agent" — as signed envelopes. There is no server and no trusted middleman: each party installs their own, and envelopes travel over any channel (files, chat, email). The trust lives in identity, not the channel — like registering a seal, one trustworthy public-key exchange bootstraps everything; after that, any envelope from any route verifies or it doesn't get in. Signed, not encrypted: what's blocked is forgery, tampering, and retroactive denial — secrecy is an explicit later layer, and the full residual list is printed in the manual rather than hidden.
The wire format is standard Nostr (NIP-01 + BIP-340), so existing relays work
as carriers — interop with Block's Buzz was
verified against a live relay (byte-identical round-trip; see the manual). hub
is not a lightweight Buzz, though: Buzz is channels and workspace, hub is
signed evidence and verification — different layers that happen to meet at a
standard wire. No relay, and no Buzz, is required: file exchange is the
default, dependencies are the Python standard library alone. And no git either:
since 0.4.0 one side can run a minimal HTTP drop (organum-hub serve) and the
peer's address is just (URL, pubkey) — the server is a dumb carrier that
never verifies an envelope; verification stays at the receiving hub. Since
0.4.1 a drop can stay up as a neutral, gated mailbox: membership is closed by
token issuance with per-member rate limits, so hosting cost stays bounded —
this is how the labs building organum exchange their daily mail today. Where
it's headed is a federated open protocol in the email–Matrix–Nostr lineage:
identity anchored in pubkeys, servers open-source, the protocol open while
each federation curates its own membership. Since 0.4.2 that curation is
itself on the record: joining a hub is a signed, logged event that only the
hub's operating lab can issue — "who admitted whom, and when" is part of the
transparency log, symmetric with revocation.
Status: pre-1.0 · incubating under the Ludex lab. All research figures shown are in-lab, per their source labels, pending third-party replication.
1 maintainer
Metadata
1 maintainer
Release files for organum 0.7.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | |
|---|---|---|---|
| organum-0.7.0.tar.gz | 393.8 kB | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| organum-0.7.0-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 668.7 kB
Release files / organum-0.7.0.tar.gz
| Download URL | organum-0.7.0.tar.gz |
|---|---|
| Size | 393.8 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
32aa1da7f4906ae9814e933ba8cc06d76f788b2fea726d95265092c58265e149
|
|
BLAKE2b-256 checksum How to use checksums |
bfa166dc4ba89f537e1a96edd6f1f5db726e57ad709e0e24280d5ae6f74d489b
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/7.0.0 CPython/3.11.12
|
Release files / organum-0.7.0-py3-none-any.whl
| Download URL | organum-0.7.0-py3-none-any.whl |
|---|---|
| Size | 274.9 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
ce0dd6e41d43314802ac401fb247fbce2a77a1a806410fcbf992754758b10818
|
|
BLAKE2b-256 checksum How to use checksums |
387fe38cf0bdf611859dbe785d5a14ebfd9423da8462e99a64b003785e4534fa
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/7.0.0 CPython/3.11.12
|
