Definition. An engine is an independently named subsystem with a hard boundary (ingest, scrub, cluster, fetch, diagnose, verify). Engines fail closed on security paths (.lawdeignore Nuclear Abort) and never retain raw source durably.
LAWDE Shield · Documentation
5 Core Engines
LAWDE Shield is a pipeline of specialized engines: Sentinel ingest with built-in PII scrubbing in <50ms, Atlas semantic clustering (threshold ≥0.85), Beacon burn-after-read context, Athena diagnosis, and Aegis evidence checks gating patches at diagnosis score 0.70 — storing 0 bytes of source as a durable product copy.
What does each engine do?
| Engine | Job | Hard number |
|---|---|---|
| Sentinel | Ingest + ACK | Hot path; persist async |
| Built-in scrub | PII / secret strip | <50ms design target |
| Atlas | Semantic clustering | semantic clustering ≥ 0.85 |
| Beacon | Read-only GitHub window | 0 bytes durable source |
| Athena | AI diagnosis | Async after ACK |
| Aegis | Diagnosis-score gate | ≥ 0.70 to show AI fix |
What is Sentinel ingest?
Sentinel accepts crash payloads via POST /api/v1/logs/ingest (or @lawdeshield/agent). built-in privacy scrubbing runs on the hot path in under 50ms so your application thread never waits on AI. <50ms is our design target for that scrub. Full persistence and AI clustering happen asynchronously.
How does scrubbing protect secrets?
Built-in ingest scrubbing removes tokens, emails, and card-like patterns before we keep the event. Domain PII uses client pre-scrub or Business custom scrubbers.
What is Beacon GitHub context?
Read-only GitHub access fetches a bounded source window for Athena, then discards it (burn-after-read). Result: 0 bytes of source stored as a product artifact.
How does Aegis stop hallucinations?
Aegis scores each diagnosis on evidence it checks itself — your code in the crash frame, source read at the crashing release, the error on the crash line, real files and identifiers — and caps it at Athena’s own confidence. Checks it cannot run count as unknown, never as a pass. A patch is shown only if it applies to your source and changes the crash line, at a diagnosis score of 0.70 or more. Invented files and patches that do not apply are refused outright.
How does Atlas cluster crashes?
Identical storms collapse into one issue. When messages differ, semantic clustering joins look-alikes at similarity ≥ 0.85. See also tier limits, Explore, and .lawdeignore.
What is Nuclear Abort?
When stack paths match .lawdeignore, Beacon / Athena grounding abort for that event; only the scrubbed log remains.