Crate map
Ten crates in the workspace. Eight are on crates.io at 0.3.0.
botzr-aegis-wrap and botzr-aegis-confine are in-tree and first appear
on the registry with the next cut.
| Crate | Responsibility | 0.3.0 |
|---|---|---|
botzr-aegis-core | Pure types and traits; zero I/O | published |
botzr-aegis-policy | YAML → Arc<PolicySet>; sync eval | published |
botzr-aegis-capability | Default-deny resolver and grant minting | published |
botzr-aegis-sandbox | wasmtime host; cap-std preopens; resource limits | published |
botzr-aegis-audit | Schema-versioned records, always emitted | published |
botzr-aegis-runtime | Orchestrator — Runtime::execute_tool_call | published |
botzr-aegis-mcp | MCP stdio gateway for Aegis’s own catalog | published |
botzr-aegis-cli | Binary aegis | published |
botzr-aegis-wrap | Stdio MCP interposer — always records; confines only with --confine (Linux), evaluates policy only with --policy. Default wrap relays every call and blocks nothing | in-tree only |
botzr-aegis-confine | Linux Landlock + seccomp from a grant (AILAB-628) | in-tree only |
governance/ is a separate Python (Layer 2) service — not a workspace
member, never writes into the Rust runtime.
botzr-aegis-sidecar is yanked. The Phase 2 gateway is
botzr-aegis-mcp. Do not confuse that gateway with aegis wrap.
Crate READMEs on crates.io are the API notes. This book is the stranger-facing hub.