Primitives index
Every fastpace primitive — what it does, what version shipped it. Tier headings match the master roadmap.
Tier 0 — Discovery + identity
| ID | Name | Shipped | Summary |
|---|---|---|---|
F0.1 | Cryptographic identity | 0.3.0 | Ed25519 keypair per install. Private key stored at 0o600, never transmitted. Sign / verify / rotate / revoke. |
F0.2 | Hash-chained signed audit log | 0.5.0 | NDJSON append-only. Every entry binds to its predecessor via prev_hash; entry_hash = sha256(canonical_json(body)); signature = Ed25519 over entry_hash. |
F0.3 | Discovery manifest | 0.4.0 | Two well-known paths: ~/.fastpace/manifest.json (host-level) and <repo>/fastpace/manifest.json (per-repo). CrowdStrike / Wiz / Beyond Identity scans walk these paths. |
F0.4 | Agent identity manifest | 0.6.0 | Per-agent frontmatter declares allowed_tools, allowed_paths, allowed_command_patterns, max_files, max_tokens. Agent-scope-guard hook enforces at runtime. |
F0.5 | Prompt redactor | 0.6.0 | UserPromptSubmit hook strips secrets (regex patterns) + PII (email, phone, SSN, etc.) before the prompt reaches the runtime. Custom patterns in 0.22.0+. |
F0.6 | fastpace inventory | 0.4.0 | Aggregates discovery manifests across every repo on the host. Pipe to JSON for SIEM / discovery scans. |
Tier 1 — Agent governance
| ID | Name | Shipped | Summary |
|---|---|---|---|
F1.1 | Run-manifest signing | 0.7.0 | PostToolUse hook writes a signed receipt for every tool call: model + endpoint + runtime + opt-out flag + prompt/response hashes. 0.22.0 added Codex / Gemini CLI / Bedrock metadata unions + tokens. |
F1.2 | Blast-radius limits | 0.8.0 | Per-session counters: max_files, max_commands, max_tokens, max_duration_seconds. Exceeding any cap pauses the agent. |
F1.3 | Circuit breaker | 0.8.0 | Per-agent baseline computed from prior 14 days of audit-chain entries; pauses when current session diverges by 2.5×. Refuses to fire below 3 sample sessions. Fleet-wide baseline added 0.17.0. |
F1.4 | fastpace agents log | 0.8.0 | Filter the audit chain by agent_id; report per-agent activity. |
F1.5 | NHI registry export | 0.13.0 | Detect non-human identities (agents, hooks, MCP servers) and export to CSV / JSON for governance platforms (Astrix, Oasis, Entro). |
F1.6 | Least-privilege bootstrap | 0.6.0 | fastpace grant adds scope to an agent with a logged justification + reviewer + TTL. Every grant + revoke signs into the audit chain. |
F1.7 | MCP scope mediation | 0.13.0 | Allowed_servers + per-server allowed_actions. A compromised agent cannot call mcp__github__merge_pull_request if the policy is [read, comment]. |
F1.8 | Exception workflow | 0.8.0 | Time-boxed override of guardrails. Risk tiers: low (auto-pass), medium (self-approve), critical / irreversible / exfil_eligible (require named reviewer). Every grant + revoke signed. |
F1.9 | Coach agent | 0.8.0 | Every block emits a structured coaching message with the exact fastpace exception request command pre-filled. 0.18.0 added one-click in the UI. |
F1.10 | Sensitivity-tagged context | 0.5.0 | Frontmatter on context files declares sensitivity (public / internal / confidential / restricted). Hooks refuse to ship restricted content to non-approved runtimes. |
F1.11 | Approved-runtime registry | 0.4.0 | Allow-list of model aliases. Calls to non-approved runtimes are blocked at the runtime-guard hook. |
F1.12 | Sanctioned-install attestation | 0.13.0 | Co-signed by F0.1 + an org private key. Discovery scans distinguish sanctioned (org-licensed) installs from a developer's personal npm i -g. 0.17.0 added Sigstore-bundle envelope. |
F1.13 | Self-hosted org dashboard | 0.14.0 / 0.21.0 (standalone) | Aggregator for signed audit summaries from every repo. 0.21.0 split into @fastpace-ai/org-dashboard for independent deploy. |
F1.14 | RBAC + SCIM + SAML | 0.14.0 / 0.17.0 (envelope verifier) | Four roles (dev / team_lead / security / admin). SCIM-shaped user provisioning. SAML envelope verifier (real signature + window + audience). |
F1.15 | Validated framework mapping | 0.7.0 | Single source of truth tying every primitive to controls in NIST AI RMF, ISO/IEC 42001, EU AI Act, SOC 2, ISO 27001, GDPR. |
Tier 2 — Reliability + provenance + governance
| ID | Name | Shipped | Summary |
|---|---|---|---|
F2.1 | AI reliability score | 0.9.0 / 0.19.0 (blame upgrade) | Every human edit to AI-authored code is recorded as a correction event, classified by severity (cosmetic / functional / security), signed into the audit chain. Score = 100 × (1 − corrected / AI-authored). 0.19.0 graduated mtime → git-blame; 0.22.0 added LCS diff. |
F2.2 | Explainability bundles | 0.12.0 | Sixth proof layer: explanation digest links a commit back to retrieval context + approval chain. |
F2.3 | Provenance-signed commits | 0.10.0 | Every AI-authored commit carries Fp-* trailers (manifest id, agent, prompt hash). verify-provenance does five-layer verify: commit → trailers → manifest → signature → audit-link. |
F2.4 | AI-BOM | 0.11.0 | CycloneDX-AI flavored AI Bill of Materials. Per release tag. Signed by F0.1. |
F2.5 | Continuous control monitoring | 0.16.0 | Inverse of F2.8: pull control state from Drata / Vanta / Secureframe and reconcile against fastpace ground truth. Detects drift in either direction. |
F2.6 | Trusted data taps | 0.16.0 | Signed allow-list of prompt-context sources (url / glob / mcp). Companion to F1.10 sensitivity tagging. |
F2.7 | Red-team scenario harness | 0.15.0 / 0.20.0 (per-org) | Curated prompt-injection / jailbreak / data-exfil scenarios run against the actual defense modules. Per-org override at <repo>/fastpace/redteam/scenarios.json. |
F2.8 | Drata / Vanta / Secureframe push | 0.15.0 | Build a per-provider evidence map from the framework mapping + audit chain + AI-BOM + reliability + redaction; upload (live API stub awaiting org keys). |
F2.9 | Pre-merge audit gate | 0.16.0 | Single CLI/CI entry point; runs required checks (provenance, audit_chain, aibom, exceptions, taps); exits 1 on failure. --format github emits ::error:: annotations. |
F2.10 | AI risk register | 0.15.0 | Auto-generated from corrections.log (security severity), exceptions.log (high-tier), redaction.log (restricted-file references). Status overrides persist across regenerations. |
F2.11 | Org-wide policy bundle | 0.16.0 | Signed policy bundle published by org admin, pulled by every repo, applied into fastpace.config.yaml with a one-command revert backup. |
F2.12 | Open audit schema | 0.12.0 | Public spec at assets/docs/audit-schema.md plus a JSON-Schema export. Auditors can re-implement the verifier in any language. |
F2.13 | SAST / lint required hook | 0.19.0 | PreToolUse hook on git push. Bundled Semgrep + ESLint adapters; custom adapters via registerAdapter. block_on threshold + require_all_tools config. |
F2.14 | Coach feedback loop | 0.19.0 | Per-block rating tokens; developers POST helpful / not_helpful / wrong / missing_context. Per-policy effectiveness rollup. |
Tier 3 — Org-scale + extensions
| ID | Name | Shipped | Summary |
|---|---|---|---|
F3.1 | Hash-chain export bundle | 0.23.0 | Pack audit.log + identity public keys + a single-file Node verifier + signed manifest into a directory the auditor verifies offline. |
F3.2 | Air-gapped install bundle | 0.24.0 | Tarball that installs without npm: install-offline.sh + install-offline.ps1 + the @fastpace-ai/fp package + offline docs + signed manifest. |
F3.4 | Onboarder agent | 0.22.0 | First-time-user five-step walk: init → identity → scaffold sample → verify → open UI. Hard rules + frontmatter scopes keep it on the rails. |
F3.5 | fastpace me | 0.22.0 | Per-developer slice: reliability score, top corrections, exceptions, activity, coach feedback, redactions. Filtered by THIS install identity. |
F3.6 | Mobile-friendly local UI | 0.24.0 | Off-canvas drawer pattern under 760px. Tap targets ≥36px. Touch-friendly tap targets, viewport-fit layouts. |
F3.8 | Self-healing context refresh | 0.23.0 | Detects stale ADRs (refs to deleted files), stale architecture mentions, orphan ADR-#### ids in decisions.md, active ADRs that reference superseded ones. |
F3.9 | Per-team budget caps | 0.23.0 | Monthly token + USD caps per team with warn / block thresholds. Pricing org-configured per runtime. |
F3.10 | Webhook event bus | 0.20.0 / 0.22.0 (producers wired) | Outbound events to Slack / PagerDuty / SIEM. Seven-event taxonomy (audit.broken, exception.granted, redteam.failed, gate.failed, sast.blocked, reliability.dropped, correction.security). |
F3.11 | Audit log replication | 0.20.0 | Replicator contract + bundled file + http replicators. S3 / GCS / Azure Blob adapters documented; org wires their own SDK. |
Tier 5 — Vendor-neutral control plane
| ID | Name | Shipped | Summary |
|---|---|---|---|
F5.3 | Governance posture | 0.48.0 | fastpace posture — provenance coverage, audit-chain integrity, reliability, risk, red-team, exception debt, NHI, supply-chain, cross-vendor assistant mix, shadow-AI + governance-coverage-by-tool, per-vendor policy conformance. --json feeds local UI / org dashboard / trust portal. |
plugin | One-codebase → three-vendor plugins | 0.48.0 | fastpace plugin build generates the Claude Code plugin, Codex plugin, and Gemini CLI extension from the 15 shared hook scripts (canonical→native event map; 15/15 native each). coverage = hook matrix; policy = compile fastpace.policy.yaml to each vendor's native enforcement with a native-vs-advisory coverage matrix; context = project fastpace/context/ into CLAUDE.md / AGENTS.md / GEMINI.md; ingest = normalize raw vendor telemetry (Codex Compliance API / OTel) into fastpace/signals.jsonl. |