OSIRIS × CyberContext: Governed Dual-Substrate Execution, Deterministic AST Provenance Firewalls, and Tamper-Evident Benchmarking for Autonomous Multi-Agent Systems

Abstract

This technical report introduces OSIRIS × CyberContext, a zero-dependency, local-first companion runtime for autonomous coding agents, dense retrieval benchmarking, and low-latency physical device abstraction. Key Architecture & Guarantees: Olmo 3 MTEB / BEIR Retrieval Reproducibility: Canonical RFC 8785 JSON hash-chain telemetry recording NDCG@10, MRR@10, and Corpus Task Complexity (CTC) into an append-only SQLite ledger to eliminate split leakage and non-deterministic drift. CyberContext AST Provenance Firewall: L0/L1 deterministic static AST parser inspecting incoming session turns prior to SQLite memory compaction, neutralizing prompt injection and blocking dynamic execution primitives (exec, eval, os.system). Tandemonium Hardware Mesh: Dual-substrate capability contracts (mobile edge vs compute workstation) enforcing strict execution horizons (300.0s / 1800.0s) and range-validated telemetry dispatching for physical device drivers (SDL3 / WebHID). Cryptographic Quarantine & Tamper Detection: Mathematical verification over append-only SHA-256 blocks, producing instant alert verification failure upon single-byte database mutation. All code runs out-of-the-box on standard library Python 3.10+ with zero external package dependencies. Source Code Repository: https://github.com/osiris-dnalang/osiris-cybercontext