README.md

metadata

license: apache-2.0
library_name: custom
tags:
  - abteex-ai-labs
  - lumynax
  - sovereigncode
  - data-capsule
  - coding-agent
  - governance
  - new-zealand
  - aotearoa
  - sovereign-ai
  - local-first
language:
  - en
  - mi

AbteeX SovereignCode

Sovereign intelligence, held in the light.

Ko te mārama te tūāpapa — the light is the foundation.

A local-first coding agent with Data Capsule sovereignty controls.
AbteeX AI Labs — Aotearoa New Zealand.

What it is · Quickstart · Data Capsule · Policy decision point · Audit ledger · Roadmap · Companions

What It Is

AbteeX SovereignCode is the AbteeX AI Labs coding-agent product built on the LumynaX release family. It is conceptually close to an OpenCode-style terminal coding assistant, but the centre of gravity is AI sovereignty: every model call, tool call, file edit, and outbound action is evaluated against a Data Capsule policy before execution.

It is for organisations that want local-first coding assistance without losing control over source code, regulated records, Iwi or community-held data, health data, procurement records, or other sensitive operational context.

Five Commitments

Commitment	Product Meaning
Data capsules	Every workspace, dataset, or customer context can carry machine-readable purpose, residency, retention, export, and training controls.
Policy before tools	Shell commands, file writes, network calls, commits, and model calls are checked before execution.
Local-first inference	High-impact or restricted data routes to local or LumynaX-governed models by default.
Human review	External effects require explicit approval, visible diffs, and audit records.
Provenance	Model identity, source files, policy decisions, prompts, outputs, and release metadata remain traceable.

Why This Is Different

Most coding agents optimise for speed. SovereignCode optimises for controlled autonomy: it can still plan, edit, test, and explain code, but it treats data rights, residency, consent, provenance, and human approval as runtime primitives — not policy text on a wiki.

Quickstart

Clone and install:

hf download AbteeXAILab/sovereigncode --local-dir sovereigncode --repo-type model
cd sovereigncode
pip install -r requirements.txt

Evaluate an allowed local-edit request against the example capsule:

python -m sovereigncode.cli evaluate \
  --capsule examples/capsule.restricted-nz-code.json \
  --request examples/request.allowed-local-edit.json

Expected: allowed: true with obligations including write_immutable_audit_record, preserve_capsule_id_in_agent_trace, and show_diff_before_write_or_commit.

Evaluate a denied training request:

python -m sovereigncode.cli evaluate \
  --capsule examples/capsule.restricted-nz-code.json \
  --request examples/request.denied-training.json \
  --allow-denied-exit-zero

Expected: allowed: false with reason capsule.training_allowed = false.

Data Capsule

A Data Capsule is the policy envelope attached to a workspace, dataset, tenant, case, source-file set, or prompt context.

{
  "capsule_id": "cap-nz-code-001",
  "subject_id": "abx-workspace",
  "jurisdiction": "NZ",
  "sensitivity": "restricted",
  "allowed_purposes": ["coding_assistance", "inference", "test_generation"],
  "denied_purposes": ["ad_training", "third_party_resale"],
  "resident_regions": ["NZ"],
  "data_classes": ["source_code", "policy", "runtime_logs"],
  "retention_days": 14,
  "export_allowed": false,
  "training_allowed": false
}

Capsules carry:

• allowed_purposes / denied_purposes
• resident_regions
• retention_days
• training_allowed / export_allowed
• data_classes
• schema_context
• consent_record

Policy Decision Point

The PDP answers one question before every sensitive action:

Can this actor, for this purpose, in this region, using this model/tool, touch this capsule?

Decisions are one of: allow, deny, or allow_with_obligations. Every decision produces a structured record:

Field	Meaning
capsule_id	The capsule the action touches.
actor	Who initiated the action.
purpose	Declared purpose (e.g. coding_assistance).
action	The tool action requested.
model_id	Resolved model identity (often via MaramaRoute).
decision	allow / deny / allow_with_obligations.
reasons	Ordered list of policy reasons.
obligations	Required follow-up actions.
request_hash	Stable SHA-256 of the canonical request.
timestamp	ISO 8601 UTC.

Tool Broker

The broker is the enforcement layer for shell commands, file writes, git commits, network calls, package installs, model calls, retrieval queries, and training jobs. Every tool call passes through the PDP first.

Audit Ledger

Every decision creates an immutable audit record. Records are append-only and hash-chained — usable as evidence for regulators, customers, and internal review.

Sovereignty & Run Contract

Field	Value
Publisher	AbteeX AI Labs
Family	LumynaX sovereign products
Sovereign intent	Local-first coding assistance with policy-before-tools enforcement.
Runtime residency	Operator's environment; restricted data routes to local or LumynaX-governed models.
License	Apache-2.0
Stage	Product scaffold — PDP and audit engine executable; full terminal loop in P1.
Router integration	First-class with LumynaX MaramaRoute.

Roadmap

Milestone	Outcome
P0 scaffold (now)	Policy engine, audit records, CLI, examples, docs.
P1 terminal loop	Local terminal agent with plan / edit / test workflow.
P2 tool broker	Policy wrappers for shell, git, file writes, package installs, HTTP.
P3 MaramaRoute integration	Sovereign model routing for every model call.
P4 workspace UI	Browser console showing plan, policy, diffs, tests, approvals.
P5 enterprise controls	Tenant policies, SSO hooks, signed audit exports, policy packs.

Source Grounding

The sovereignty model is inspired by the Data Capsule pattern described in the ScienceDirect article identified by PII S2543925125000166 — especially its emphasis on semantic metadata, ontology-based federation, and dynamic usage-control policies. This repository uses that idea as product architecture inspiration; it does not copy the paper text or implementation.

Companion Products

Product	Purpose
LumynaX MaramaRoute	Sovereign model router across the LumynaX release family. SovereignCode delegates model selection to MaramaRoute.
LumynaX Live Demo	Public browser demo of a LumynaX-infused GGUF release.
SovereignCode Live	Interactive policy evaluator — paste a capsule and request, see the decision.
AbteeXAILab on Hugging Face	The full LumynaX release family.

Aotearoa Kaupapa

SovereignCode is built in and for Aotearoa New Zealand. Iwi data sovereignty, health-information governance, and procurement transparency are not retro-fits — they are the runtime contract. The product treats data rights, residency, consent, provenance, and human approval as primitives.

Limitations & Responsible Use

• The PDP enforces declared policy. It does not detect every possible deceptive prompt or covert exfiltration channel.
• The current release is a product scaffold. Full terminal loop, tool broker, and workspace UI ship in P1–P4.
• For high-impact decisions, use human review and domain-specific evaluation.
• Audit records help, but auditability is a process — not a guarantee.

---

Local roots, global work. · Sovereignty is a design property, not a deployment option.

_{AbteeX AI Labs · abteex.com · lumynax.com · huggingface.co/AbteeXAILab}