Protocol · Nexus · Permissions

Every agent asks. Not every agent gets in.

Nexus governs what memory is shared between people, organizations and agents. Deny by default, a declared purpose on every read, and a trail you can audit.

Statusv0.1 in the runtime · open spec in development

CodeReference implementation · Apache 2.0

Tests18 / 18 adversarial tests pass

The rules

Seven rules no agent can skip.

Deny by default — no grant, no read.
Every read declares who is asking, for what scope and for which purpose.
Scope can’t be escalated.
Identity can’t be borrowed.
Revocation reaches context, exports, tools and outputs.
What an agent writes always goes to review — memory can’t be poisoned in one turn.
Every decision lands in an append-only, hash-chained audit.

Nexus v0.1 ships in the AIX Protocol v0.2.0 reference implementation on GitHub. The open protocol specification is in development.

Shape
the protocol.

Nexus will be an open protocol. If you work on agent permissions, identity or audit, we would like your review.

Book a call →hello@thegeometrical.com

Every agent asks. Not every agent gets in.

Seven rules no agent can skip.

Shapethe protocol.

Shape
the protocol.