Stokes

Autonomous Cross-Boundary Systems Invariant Verification Engine
Built on IBM Bob 2.0 | GitHub: yvliet

Overview

Stokes is a static analysis and runtime verification engine for detecting cross-boundary invariant violations in polyglot systems. It integrates with IBM Bob 2.0's multi-agent orchestrator to enforce architectural contracts across Rust, Python, SQL, and Protobuf codebases.

Installation

pip install stokes

Requires Python ≥ 3.11.

Quick Start

# Scan a workspace for boundary violations
stokes scan /path/to/workspace

# Run a full audit with remediation synthesis
stokes audit /path/to/workspace

# Verify invariants (CI/CD gate — non-zero exit on failure)
stokes verify --strict

# Emit the stokes.lock cryptographic boundary lockfile
stokes cert --output stokes.lock

Core Invariants Enforced

Cardinality Risk Ratio

Risk = C_upstream / B_downstream

Risk <= 1.0  →  INVARIANT SATISFIED
Risk > 1.0   →  FATAL CONTRACT DRIFT

Key Contracts

• Wire Protocol: 4-byte big-endian length-prefixed frames, 16 MB max budget
• Float Sanitization: Reject NaN / ±Infinity / subnormals; clamp to [0.0, 100.0]
• Dual-Zone Memory: MAX_ACTIVE_FEATURES = 200 (Zone 0: slots 0–127 CORE RESERVED, Zone 1: slots 128–199 DYNAMIC ADAPTIVE)
• Event Bus: asyncio.Queue(maxsize=1024), 16.6 ms render tick

License

MIT — Copyright © yvliet