organum
Organism Engineering — a cognition & discipline layer for the agents you already run: persistent memory, differentiation, immunity (guard), and coordination without a dispatcher.
🫀 Live: https://ludex-lab.github.io/organum/
pip install organum
One package, one principle — surface agent state honestly, measure it, never fabricate. Everything below ships today (pre-1.0 beta; formats still moving):
| Tool | What it does |
|---|---|
organum-inspector |
Post-hoc metering for AI coding agents — duration, tokens, tools per session, across six vendors (Cursor CLI added in 0.4.3). Read-only, zero setup. Manual · 한국어 |
organum web / observatory / health |
Live control tower · history that survives vendor cleanup · an immune system watching session stores. Detection only — never deletes, never kills |
organum-hub |
New: 0.4.x — signed evidence envelopes between agent communities: signed receipts + a transparency log, verifiable offline. 0.4.0 adds git-less delivery: a minimal HTTP drop (serve/push/pull); 0.4.1 makes a long-running drop hostable: per-member token rate limits (429 + Retry-After), self-hosting still the default; 0.4.2 makes membership itself an audited event: introduce-signer admits a new lab into a live hub with no retroactivity — only the hub's operating lab can introduce, and envelopes verified before introduction formalize afterwards under the same event ids; 0.4.5 adds receiving discipline: verify-envelope (checks signature/schema/digest/addressee while touching no ledger) and admit refusing non-addressees by default — witnessing someone else's envelope takes an explicit flag; 0.4.6 wakes sleeping hosts automatically — an unauthenticated ping before each call (spends no rate-limit budget, never blocks the call) that also reports warm_ms, a gauge of whether the host is warm right now; 0.4.7 makes the ledger show how each signer got in (self / tofu / introduced@N) — when a ledger prints those identically you cannot tell, until you count, what your trust base actually is; 0.4.8 derives a registered signer's pubkey from the registry at admit time — identity material comes from the ledger, not from memory or prose. Manual · 한국어 |
hub, in four sentences
Two agent workspaces exchange claims — "we froze this file", "here is a message for your agent" — as signed envelopes. There is no server and no trusted middleman: each party installs their own, and envelopes travel over any channel (files, chat, email). The trust lives in identity, not the channel — like registering a seal, one trustworthy public-key exchange bootstraps everything; after that, any envelope from any route verifies or it doesn't get in. Signed, not encrypted: what's blocked is forgery, tampering, and retroactive denial — secrecy is an explicit later layer, and the full residual list is printed in the manual rather than hidden.
The wire format is standard Nostr (NIP-01 + BIP-340), so existing relays work
as carriers — interop with Block's Buzz was
verified against a live relay (byte-identical round-trip; see the manual). hub
is not a lightweight Buzz, though: Buzz is channels and workspace, hub is
signed evidence and verification — different layers that happen to meet at a
standard wire. No relay, and no Buzz, is required: file exchange is the
default, dependencies are the Python standard library alone. And no git either:
since 0.4.0 one side can run a minimal HTTP drop (organum-hub serve) and the
peer's address is just (URL, pubkey) — the server is a dumb carrier that
never verifies an envelope; verification stays at the receiving hub. Since
0.4.1 a drop can stay up as a neutral, gated mailbox: membership is closed by
token issuance with per-member rate limits, so hosting cost stays bounded —
this is how the labs building organum exchange their daily mail today. Where
it's headed is a federated open protocol in the email–Matrix–Nostr lineage:
identity anchored in pubkeys, servers open-source, the protocol open while
each federation curates its own membership. Since 0.4.2 that curation is
itself on the record: joining a hub is a signed, logged event that only the
hub's operating lab can issue — "who admitted whom, and when" is part of the
transparency log, symmetric with revocation.
Status: pre-1.0 · incubating under the Ludex lab. All research figures shown are in-lab, per their source labels, pending third-party replication.
1 maintainer
Metadata
1 maintainer
Release files for organum 0.8.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | |
|---|---|---|---|
| organum-0.8.0.tar.gz | 435.4 kB | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| organum-0.8.0-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 735.4 kB
Release files / organum-0.8.0.tar.gz
| Download URL | organum-0.8.0.tar.gz |
|---|---|
| Size | 435.4 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
e5e6df28e9a9c2c2d81f1a3cf1da240d8190234f68b3f90558a7ddf909a50931
|
|
BLAKE2b-256 checksum How to use checksums |
0e29784aa9369a72d9dc899dc08ec9e398616ac945f4836d8bd1d012452a0629
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/7.0.0 CPython/3.11.12
|
Release files / organum-0.8.0-py3-none-any.whl
| Download URL | organum-0.8.0-py3-none-any.whl |
|---|---|
| Size | 300.0 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
155a19d54cb362a7c44a4c936e9f08aae34b407bb76f96d9ea16108ab36309d4
|
|
BLAKE2b-256 checksum How to use checksums |
5270c867aa1346e704bef17224e074ba78a9c29e445a9a2675acf004f6e78129
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/7.0.0 CPython/3.11.12
|
