Definition. An engine is an independently named subsystem with a hard boundary (ingest, scrub, cluster, fetch, diagnose, verify). Engines fail closed on security paths (.lawdeignore Nuclear Abort) and never retain raw source durably.
LAWDE Shield · Documentation
5 Core Engines
LAWDE Shield is a pipeline of specialized engines: Sentinel ingest with built-in PII scrubbing in <50ms, Atlas semantic clustering (threshold ≥0.85), Beacon burn-after-read context, Athena diagnosis, and Aegis gating at Trust Score 0.70 — storing 0 bytes of source as a durable product copy.
What does each engine do?
| Engine | Job | Hard number |
|---|---|---|
| Sentinel | Ingest + ACK | Hot path; persist async |
| Built-in scrub | PII / secret strip | <50ms design target |
| Atlas | Semantic clustering | semantic clustering ≥ 0.85 |
| Beacon | Read-only GitHub window | 0 bytes durable source |
| Athena | AI diagnosis | Async after ACK |
| Aegis | Trust gate | ≥ 0.70 to show AI fix |
What is Sentinel ingest?
Sentinel accepts crash payloads via POST /api/v1/logs/ingest (or @lawdeshield/agent). built-in privacy scrubbing runs on the hot path in under 50ms so your application thread never waits on AI. <50ms is our design target for that scrub. Full persistence and AI clustering happen asynchronously to guarantee zero data loss.
How does scrubbing protect secrets?
Built-in ingest scrubbing removes tokens, emails, and card-like patterns before we keep the event. Domain PII uses client pre-scrub or Business custom scrubbers.
What is Beacon GitHub context?
Read-only GitHub access fetches a bounded source window for Athena, then discards it (burn-after-read). Result: 0 bytes of source stored as a product artifact.
How does Aegis stop hallucinations?
Athena proposals below Trust Score 0.70 are suppressed. Invented files and weak evidence lower the score so speculative patches never ship as “the fix.”
How does Atlas cluster crashes?
Identical storms collapse into one issue. When messages differ, semantic clustering joins look-alikes at similarity ≥ 0.85. See also tier limits, Explore, and .lawdeignore.
What is Nuclear Abort?
When stack paths match .lawdeignore, Beacon / Athena grounding abort for that event; only the scrubbed log remains.