omega-brain-mcp

<div align="center"> <img src="https://raw.githubusercontent.com/VrtxOmega/Gravity-Omega/master/omega_icon.png" width="120" alt="VERITAS Omega" /> <h1>OMEGA BRAIN MCP</h1> <p><strong>Governance-First MCP Server — VERITAS Gates · Cryptographic Audit Ledger · Cortex Approval Pipeline</strong></p> </div>

<div align="center">

 !Status !Version !Python !License


</div>

---

Ecosystem Canon

Omega Brain MCP is the governing cognitive substrate of the VERITAS & Sovereign Ecosystem (Omega Universe). Where other memory layers persist context, Omega Brain enforces it: every execution path passes through the Cortex approval gate, every state transition is sealed to a tamper-proof SHA-3-256 audit ledger, and every artifact claim must survive a 10-gate deterministic build pipeline before a verdict is issued. It does not make trust decisions on behalf of the operator — it enforces the constraints the operator has declared, cryptographically and without exception. In the Omega Universe, Omega Brain MCP is the control plane: the point where agent autonomy ends and declared policy begins.

SYSTEM INVARIANT: VERITAS Build does not determine whether code is 'good.' VERITAS Build determines whether code survives disciplined attempts to break it under explicitly declared primitives, constraints, test regimes, boundaries, cost models, evidence, and policy.

---

Table of Contents

• Overview
• Omega Agent Bus
• Features
• Architecture
• Requirements
• Installation
• Quickstart
• Configuration
• Integrations
• Usage Examples
• Tools Reference
• Resources
• CLAEG State Machine
• Troubleshooting
• Security & Sovereignty
• Threat Model
• Roadmap
• Omega Universe
• License

---

Overview

What It Is

Omega Brain MCP is a self-contained Model Context Protocol (MCP) server that runs as a local process alongside any MCP-compatible AI client. It exposes 26 tools and 9 resources covering four governance domains:

• Cross-session episodic memory — SQLite vault with full-text search, persisted across all restarts
• 10-gate VERITAS build pipeline — deterministic artifact evaluation from INTAKE through TRACE/SEAL
• Cryptographic S.E.A.L. audit ledger — append-only SHA-3-256 hash chain; every operation is sealed
• Cortex approval gate — Tri-Node similarity gate that enforces declared baseline policy on every tool call

Two Python files. One pip dependency. Zero external services.

Compatible clients: Claude Desktop, VS Code Copilot, Cursor, Windsurf, AutoGen, LangChain, CrewAI, LlamaIndex, and any MCP-compliant host.

Omega Agent Bus

Omega Brain Network is the MCP server and vault. Omega Agent Bus is the cross-agent collaboration layer on top of it — mail, live drain, watchers, roster, and task queue. PCF MCP is a separate stdio server for contribution gates.

| Layer | Name | Doc | |-------|------|-----| | Vault + HTTP MCP | Omega Brain Network | This README | | Agent collaboration | Omega Agent Bus (OMSG) | docs/OMEGA_AGENT_BUS.md | | Contribution gates | PCF MCP | premature-contribution-firewall/docs/MCP.md |

Quick start: enable omega-brain-network.service, copy examples/collaboration-roster.json to ~/.omega-brain/collaboration-roster.json, enable omsg-watch@<agent>, drain with omsg-drain <agent> --json during active work.

What It Is Not

• Not a cloud service. No network egress, no API keys, no telemetry. All data remains on the operator's machine under ~/.omega-brain/ (or OMEGA_BRAIN_DATA_DIR).
• Not a language model. Omega Brain does not generate text. It governs, routes, stores, and audits agent operations.
• Not a policy authority. VERITAS gates enforce what the operator declares. The system cannot determine correctness beyond what its evidence and constraints describe.
• Not a firewall or OS-level isolation layer. See the Threat Model for explicit out-of-scope boundaries.

---

Features

Cross-Session Episodic Memory

• Vault (SQLite + FTS5) — sessions, entries, and events persist across restarts; auto-loaded at startup via omega://session/preload
• Semantic RAG provenance — 3-tier embedding engine: sentence-transformers → fastembed ONNX → TF-IDF n-gram; always available with no GPU requirement
• Sealed handoff — SHA-256 signed cross-session memory file; auto-loaded on restart, auto-written on task seal

10-Gate VERITAS Build Pipeline

Full deterministic evaluation pipeline: INTAKE → TYPE → DEPENDENCY → EVIDENCE → MATH → COST → INCENTIVE → SECURITY → ADVERSARY → TRACE/SEAL

Every gate returns a structured verdict (PASS, MODEL_BOUND, INCONCLUSIVE, or VIOLATION). The pipeline seals the final result as a cryptographically identified record. Fail-fast on VIOLATION by default.

Cryptographic Audit Ledger (S.E.A.L.)

• Append-only SHA-3-256 hash chain
• Every Cortex check, ingest, session log, gate run, and execution is automatically sealed
• Chain integrity is verifiable at any point; any tampered entry breaks the chain
• Persisted to omega_ledger.json under the data directory

Cortex Approval Gate

• Tri-Node similarity gate evaluates every tool call against the operator-declared baseline prompt
• Hard-block window < 0.45 — execution is refused; event sealed to ledger
• Steer window 0.45–0.65 — arguments are corrected toward baseline alignment before execution
• Blocks NAFE drift (narrative rescue, moral override, authority drift, intent inference) before execution
• CLAEG state machine governs terminal states: STABLE_CONTINUATION, ISOLATED_CONTAINMENT, TERMINAL_SHUTDOWN; absence of allowed transition is prohibition

Operational Characteristics

• Two transports — stdio (default, MCP standard) and SSE (HTTP streaming for web clients)
• Docker-ready — single Dockerfile, non-root user, unbuffered I/O
• Single dependency — mcp>=1.0.0; optional fastembed or sentence-transformers for higher-quality embeddings
• Fully local — no cloud, no API keys, no external server required

---

Architecture

┌─────────────────────────────────────────────────────────────────┐
│                        MCP CLIENT                               │
│   (Claude Desktop / VS Code Copilot / Cursor / AutoGen / ...)   │
└───────────────────────────┬─────────────────────────────────────┘
                            │  MCP stdio / SSE (JSON-RPC 2.0)
                            ▼
┌─────────────────────────────────────────────────────────────────┐
│                   OMEGA BRAIN MCP SERVER                        │
│               omega_brain_mcp_standalone.py                     │
│                                                                 │
│  ┌──────────────────────────┐  ┌──────────────────────────────┐ │
│  │       BRAIN CORE         │  │      VERITAS BUILD GATES     │ │
│  │                          │  │                              │ │
│  │  Cortex Approval Gate    │  │  10-Gate Pipeline            │ │
│  │  (Tri-Node, steer/block) │  │  INTAKE → TYPE → DEPENDENCY  │ │
│  │                          │  │  → EVIDENCE → MATH → COST    │ │
│  │  RAG Provenance Store    │  │  → INCENTIVE → SECURITY      │ │
│  │  (3-tier embeddings)     │  │  → ADVERSARY → TRACE/SEAL    │ │
│  │                          │  │                              │ │
│  │  S.E.A.L. Audit Ledger   │  │  Evidence Engine             │ │
│  │  (SHA-3-256 hash chain)  │  │  (Quality(e), MIS_GREEDY)    │ │
│  │                          │  │                              │ │
│  │  Sealed Handoff          │  │  CLAEG State Machine         │ │
│  │  (SHA-256 cross-session) │  │  NAFE Scanner                │ │
│  └──────────┬───────────────┘  └────────────────┬─────────────┘ │
└─────────────│──────────────────────────────────│───────────────┘
              │                                  │
              ▼  SQLite                          ▼  Pure Python
    ┌─────────────────────┐           ┌─────────────────────────┐
    │   ~/.omega-brain/   │           │  veritas_build_gates.py │
    │   omega_vault.db    │           │  (stateless, no I/O,    │
    │   omega_ledger.json │           │   reproducible verdicts)│
    │   omega_handoff.json│           └─────────────────────────┘
    └─────────────────────┘

Component Roles

| Layer | Component | Role | |-------|-----------|------| | Brain Core | Vault (SQLite) | Persistent session/entry storage with FTS5 full-text search | | Brain Core | S.E.A.L. Ledger | Append-only SHA-3-256 hash chain for tamper-proof audit | | Brain Core | RAG Provenance | Semantic embedding store — 3-tier engine (ST / fastembed / TF-IDF) | | Brain Core | Cortex | Tri-Node approval gate with steer/block modes | | Brain Core | Handoff | SHA-256 sealed cross-session memory transfer | | Build Gates | 10-Gate Pipeline | INTAKE→TYPE→DEPENDENCY→EVIDENCE→MATH→COST→INCENTIVE→SECURITY→ADVERSARY→TRACE/SEAL | | Build Gates | Evidence Engine | Quality(e) formula, MIS\_GREEDY independence scoring, Agreement computation | | Build Gates | CLAEG | Constraint-locked state machine with 3 terminal states | | Build Gates | NAFE Scanner | Narrative failure signature detection and auto-seal |

🏛️ Protocol Standard: The omega-brain-mcp is the official execution engine for the VERITAS Ω-CODE v2.0 specification. The structural gates here enforce the deterministic claims that power veritas-vault session capture, AEGIS remediation, and Sovereign artifacts.

Verdict System

| Verdict | Precedence | Meaning | |---------|-----------|---------| | PASS | 0 (lowest) | All gates satisfied. Artifact is deployable under declared regime. | | MODEL_BOUND | 1 | Gates pass but resource/coverage/confidence near redline. Deploy with monitoring. | | INCONCLUSIVE | 2 | Insufficient evidence or timeout. Cannot affirm or deny. Block deploy. | | VIOLATION | 3 (highest) | Constraint failure, security vulnerability, or test failure. Block deploy. |

---

Requirements

| Requirement | Details | |-------------|---------| | Python | 3.11 or 3.12 | | Core dependency | mcp >= 1.0.0 | | OS | Linux, macOS, Windows (WSL2 recommended on Windows) | | Disk | ~5 MB for source + SQLite data dir (default ~/.omega-brain/) | | Optional | fastembed >= 0.2.0 — ONNX embeddings, ~30 MB model cache, no GPU | | Optional | sentence-transformers >= 2.0.0 + numpy — highest quality embeddings, GPU-capable |

Embedding engine auto-selection: The server probes for sentence-transformers first, then fastembed, then falls back to built-in TF-IDF n-gram. You always get semantic search — richer models improve recall quality.

---

Installation

From PyPI

pip install omega-brain-mcp

From Source

git clone https://github.com/VrtxOmega/omega-brain-mcp.git
cd omega-brain-mcp
pip install mcp
# Optional: better embeddings
pip install fastembed                       # recommended — fast ONNX, no GPU
pip install sentence-transformers numpy     # best quality, larger download

Docker

docker build -t omega-brain-mcp .
docker run --rm -i omega-brain-mcp                              # stdio mode (MCP standard)
docker run --rm -p 8055:8055 omega-brain-mcp --sse --port 8055  # SSE mode

Run Tests

pip install pytest pytest-asyncio pytest-cov
PYTHONUTF8=1 OMEGA_BRAIN_DATA_DIR=/tmp/omega-test pytest tests/ -v --tb=short

---

Quickstart

1 — Verify the server starts

python omega_brain_mcp_standalone.py --help

2 — Run in stdio mode (default)

The server reads JSON-RPC 2.0 messages from stdin and writes responses to stdout. MCP clients manage this process automatically via the config below.

python omega_brain_mcp_standalone.py

3 — Run in SSE mode (HTTP streaming)

python omega_brain_mcp_standalone.py --sse --port 8055
# GET  http://localhost:8055/sse      — event stream
# POST http://localhost:8055/messages — send tool calls

4 — Test a tool call manually (stdio)

echo '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"omega_brain_status","arguments":{}}}' \
  | python omega_brain_mcp_standalone.py

5 — Configure your MCP client (see Configuration)

---

Configuration

Claude Desktop

Edit ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows):

{
  "mcpServers": {
    "omega-brain": {
      "command": "python",
      "args": ["/absolute/path/to/omega_brain_mcp_standalone.py"],
      "env": { "PYTHONUTF8": "1" }
    }
  }
}

VS Code / GitHub Copilot

Add to .vscode/mcp.json in your workspace (or user settings):

{
  "servers": {
    "omega-brain": {
      "type": "stdio",
      "command": "python",
      "args": ["/absolute/path/to/omega_brain_mcp_standalone.py"],
      "env": { "PYTHONUTF8": "1" }
    }
  }
}

Cursor

In Cursor Settings → MCP → Add Server:

{
  "mcpServers": {
    "omega-brain": {
      "command": "python",
      "args": ["/absolute/path/to/omega_brain_mcp_standalone.py"],
      "env": { "PYTHONUTF8": "1" }
    }
  }
}

Windsurf / Cascade

In ~/.codeium/windsurf/mcp_config.json:

{
  "mcpServers": {
    "omega-brain": {
      "command": "python",
      "args": ["/absolute/path/to/omega_brain_mcp_standalone.py"],
      "env": { "PYTHONUTF8": "1" }
    }
  }
}

SSE / HTTP Client

{
  "mcpServers": {
    "omega-brain": {
      "type": "sse",
      "url": "http://localhost:8055/sse"
    }
  }
}

Environment Variables

| Variable | Default | Description | |----------|---------|-------------| | PYTHONUTF8 | 0 | Set to 1 on Windows to avoid encoding errors | | OMEGA_BRAIN_DATA_DIR | ~/.omega-brain/ | Override the data directory for vault, ledger, and handoff files |

---

Integrations

Omega Brain MCP integrates with any MCP-compatible client using standard JSON-RPC 2.0 over stdio or SSE. For framework-specific integration patterns (LangChain, CrewAI, AutoGen, LlamaIndex) see INTEGRATIONS.md and the examples/ directory.

Recommended Integration Pattern

For production use, keep one persistent server process across all calls. This avoids the 2–3s cold-start cost of loading the embedding model and SQLite on every call.

from omega_client import OmegaBrainClient

client = OmegaBrainClient()  # starts server subprocess once

# Governance-first: always run a Cortex check before executing
check = client.call("omega_cortex_check", {
    "tool": "omega_rag_query",
    "args": {"query": "sensitive project data"},
    "baseline_prompt": "You are a data analysis agent. Only access approved datasets."
})
# {"approved": true, "similarity": 0.71, "verdict": "APPROVED", "node_votes": [1, 1, 1]}

# Memory retrieval
result = client.call("omega_rag_query", {"query": "VERITAS evidence thresholds", "top_k": 5})

# Run VERITAS build gate pipeline
verdict = client.call("veritas_run_pipeline", {"claim": {...}, "regime": "baseline"})

# Session persistence — always seal before terminating
client.call("omega_seal_task", {})
client.close()

Quick-Reference Pattern Table

| Goal | Tool | Notes | |---|---|---| | Pre-action guard (binary) | omega_cortex_check | Returns approved: true/false | | Pre-action guard + auto-fix | omega_cortex_steer | Returns steered args if in 0.45–0.65 window | | Full Cortex-wrapped execution | omega_execute | Omega Brain tools only; returns steered_args for external tools | | Memory / context retrieval | omega_rag_query / omega_preload_context | Use at agent task start | | Human-readable audit | omega_brain_report | SEAL chain tail, blocked count, VERITAS avg | | Session persistence | omega_seal_task | One call, no fields required | | Full artifact evaluation | veritas_run_pipeline | 10-gate deterministic verdict + seal hash |

---

Usage Examples

All examples use JSON-RPC 2.0. In practice, your MCP client sends these automatically when you invoke a tool. The shell one-liner form is useful for testing.

Check server health

echo '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"omega_brain_status","arguments":{}}}' \
  | python omega_brain_mcp_standalone.py

Response (abbreviated):

{
  "result": {
    "content": [{
      "type": "text",
      "text": "{\"vault_sessions\": 3, \"vault_entries\": 42, \"rag_fragments\": 18, \"ledger_entries\": 127, \"embedding_engine\": \"fastembed\", \"omega_status\": \"OK\"}"
    }]
  }
}

Cortex approval check

{
  "jsonrpc": "2.0", "id": 4,
  "method": "tools/call",
  "params": {
    "name": "omega_cortex_check",
    "arguments": {
      "tool": "omega_rag_query",
      "args": {"query": "sensitive user data"},
      "baseline_prompt": "You are a data analysis agent. Only access approved datasets."
    }
  }
}

Response:

{"approved": true, "similarity": 0.71, "verdict": "APPROVED", "node_votes": [1, 1, 1]}

Run the full VERITAS pipeline

{
  "jsonrpc": "2.0", "id": 5,
  "method": "tools/call",
  "params": {
    "name": "veritas_run_pipeline",
    "arguments": {
      "claim": {
        "claim_id": "claim-001",
        "artifact_type": "function",
        "description": "Validates user authentication tokens",
        "primitives": ["jwt", "hmac-sha256"],
        "evidence": [
          {
            "id": "e1", "type": "test_suite",
            "provenance": 0.9, "repeatability": 0.95,
            "freshness": 0.85, "env_match": 1.0
          }
        ],
        "constraints": [{"op": "lte", "left": "latency_ms", "right": 50}],
        "cost": {"cpu_p95": 0.3, "memory_gb_p95": 0.1},
        "security": {"sast_findings": [], "secrets_found": false}
      },
      "regime": "baseline"
    }
  }
}

Response:

{
  "verdict": "PASS",
  "gates_passed": 10,
  "seal_hash": "a3f9c2...",
  "pipeline_ms": 12,
  "omega_status": "OK"
}

NAFE scan (detect AI narrative failures)

{
  "jsonrpc": "2.0", "id": 6,
  "method": "tools/call",
  "params": {
    "name": "veritas_nafe_scan",
    "arguments": {
      "text": "Although the tests failed, the developer clearly intended the function to work correctly, so we can assume it passes."
    }
  }
}

Response:

{
  "nafe_detected": true,
  "signatures": ["NARRATIVE_RESCUE", "INTENT_INFERENCE"],
  "seal_hash": "b7d1e4...",
  "omega_status": "NAFE_VIOLATION"
}

---

Tools Reference (26 Tools)

Brain Core (12)

| Tool | Purpose | |------|---------| | omega_preload_context | Episodic task briefing: RAG + vault + sealed handoff + VERITAS score | | omega_rag_query | Semantic search over RAG provenance store | | omega_ingest | Add text fragment to RAG store | | omega_vault_search | Full-text keyword search across vault entries | | omega_cortex_check | Tri-Node approval gate with similarity scoring | | omega_cortex_steer | Cortex correction mode — steer drifting args or hard block | | omega_seal_run | Append tamper-proof S.E.A.L. entry to audit ledger | | omega_log_session | Write session record to vault | | omega_write_handoff | SHA-256 sealed cross-session handoff | | omega_execute | Cortex-wrapped meta-tool — default execution path | | omega_brain_report | Human-readable audit report | | omega_brain_status | Unified brain health: vault stats, fragment count, ledger entries |

Build Gates (15)

| Tool | Purpose | |------|---------| | veritas_intake_gate | Gate 1/10: Canonicalize, validate fields, compute ClaimID | | veritas_type_gate | Gate 2/10: Primitives, domains, operators, symbols | | veritas_dependency_gate | Gate 3/10: SBOM, CVE, integrity, licenses, depth | | veritas_evidence_gate | Gate 4/10: MIS\_GREEDY, Quality(e), K/A/Q thresholds | | veritas_math_gate | Gate 5/10: Constraint satisfaction via interval arithmetic | | veritas_cost_gate | Gate 6/10: Resource utilization vs redline thresholds | | veritas_incentive_gate | Gate 7/10: Source dominance and vendor concentration | | veritas_security_gate | Gate 8/10: SAST, secrets, injection, auth, crypto | | veritas_adversary_gate | Gate 9/10: Fuzz, mutation, exploit, outage, spike | | veritas_run_pipeline | Full 10-gate pipeline — final verdict + seal hash | | veritas_compute_quality | Compute Quality(e) for single evidence item | | veritas_mis_greedy | Run MIS\_GREEDY algorithm on evidence items | | veritas_claeg_resolve | Map verdict to CLAEG terminal state | | veritas_claeg_transition | Validate state transition (absence = prohibition) | | veritas_nafe_scan | Scan for NAFE failure signatures in AI text |

---

Resources (9)

| URI | Description | |-----|-------------| | omega://session/preload | Auto-fetched at startup: RAG + handoff + vault context | | omega://session/handoff | SHA-256 verified cross-session handoff | | omega://session/current | Session ID, call count, data directory | | omega://brain/status | DB stats, embedding engine, ledger count | | veritas://spec/v2.0.0 | Full canonical VERITAS Omega Build Spec v2.0.0 | | veritas://claeg/grammar | Terminal states, transitions, invariants, prohibitions | | veritas://gates/order | The 10-gate pipeline sequence | | veritas://thresholds/baseline | Dev/baseline regime numeric thresholds | | veritas://thresholds/production | Escalated production regime thresholds |

---

CLAEG State Machine

INIT → { STABLE_CONTINUATION | ISOLATED_CONTAINMENT | TERMINAL_SHUTDOWN }
STABLE_CONTINUATION → { STABLE_CONTINUATION | ISOLATED_CONTAINMENT | TERMINAL_SHUTDOWN }
ISOLATED_CONTAINMENT → { STABLE_CONTINUATION | TERMINAL_SHUTDOWN }
TERMINAL_SHUTDOWN → {} (absorbing)

Invariant: Absence of an allowed transition is treated as prohibition. TERMINAL_SHUTDOWN is absorbing — there are no exit transitions.

| State | Meaning | |-------|---------| | STABLE_CONTINUATION | Normal operation; execution proceeds | | ISOLATED_CONTAINMENT | Anomaly detected; execution continues under isolation | | TERMINAL_SHUTDOWN | Critical failure; execution halted, no recovery |

---

File Structure

omega-brain-mcp/
├── omega_brain_mcp_standalone.py   # MCP server — Brain Core + tool dispatch (~1430 lines)
├── veritas_build_gates.py          # Gate engine — pure deterministic logic (~1430 lines)
├── omega_client.py                 # Python client helper (persistent process)
├── requirements.txt                # mcp>=1.0.0
├── pyproject.toml                  # Package config + optional deps
├── Dockerfile                      # Non-root, unbuffered, stdio + SSE
├── INTEGRATIONS.md                 # LangChain, CrewAI, AutoGen, LlamaIndex guides
├── SECURITY.md                     # Vulnerability reporting policy
├── CHANGELOG.md                    # Release history
├── docs/
│   └── integration.md              # Detailed integration reference
├── examples/
│   ├── langchain_quickstart.py
│   ├── crewai_quickstart.py
│   ├── autogen_quickstart.py
│   └── llamaindex_quickstart.py
└── tests/
    ├── test_build_gates.py         # Gate pipeline tests
    ├── test_veritas.py             # VERITAS scoring tests
    ├── test_seal.py                # SEAL chain integrity tests
    ├── test_handoff.py             # Handoff seal/context tests
    ├── test_cortex.py              # Cortex approval tests
    └── test_vault.py               # Vault persistence tests

---

Troubleshooting

Server does not start / ModuleNotFoundError: mcp

pip install mcp

UnicodeDecodeError on Windows

Set the environment variable before running:

set PYTHONUTF8=1
python omega_brain_mcp_standalone.py

Or add "env": { "PYTHONUTF8": "1" } to your MCP client config.

Client shows "Server disconnected" immediately

1. Confirm the path in your client config is absolute (e.g., C:\Users\you\omega-brain-mcp\omega_brain_mcp_standalone.py), not relative.
2. Run the server manually in a terminal to see startup errors: python /path/to/omega_brain_mcp_standalone.py
3. Check Python version: python --version must be 3.11+.

Embeddings are slow / low quality

Install a better embedding backend:

pip install fastembed          # fast, no GPU, ~30MB download — recommended
# or
pip install sentence-transformers numpy   # highest quality

The server auto-selects the best available engine at startup and logs which tier is active.

NAFE_VIOLATION returned unexpectedly

The NAFE scanner detected a narrative failure pattern (rescue framing, intent inference, moral override, or authority drift) in the text passed to veritas_nafe_scan. Review the signatures field in the response for the specific pattern detected, then revise the input text to state facts without narrative interpretation.

Vault / ledger corruption

Delete the data directory and restart to rebuild from scratch (all persisted memory will be lost):

rm -rf ~/.omega-brain/
python omega_brain_mcp_standalone.py

To use a separate data directory per project:

OMEGA_BRAIN_DATA_DIR=/path/to/project-brain python omega_brain_mcp_standalone.py

SSE mode: Connection refused on port 8055

Ensure the server is running with --sse --port 8055 and that the port is not blocked by a firewall. Check with:

curl -N http://localhost:8055/sse

---

Security & Sovereignty

• All data is local. The vault, S.E.A.L. ledger, RAG store, and handoff file are stored in ~/.omega-brain/ (or OMEGA_BRAIN_DATA_DIR). No data is transmitted to any external service.
• No API keys required. The server requires only a local Python installation and the mcp package.
• Cryptographic integrity. The S.E.A.L. ledger uses SHA-3-256 hash chaining; any tampering with a past entry breaks the chain. Handoff files are SHA-256 sealed.
• Cortex blocks drift. The Cortex gate hard-blocks tool calls with similarity below 0.45 to the declared baseline prompt, preventing prompt injection from steering the agent off its declared mission.
• NAFE guardrails. The NAFE scanner detects and seals AI narrative failures — including attempts to override constraints via ethical framing or authority assertions — before they propagate.
• Non-root Docker. The provided Dockerfile runs as a non-root omega user.
• VERITAS gates are stateless and deterministic. veritas_build_gates.py has no network calls, no file I/O, and no side effects. All verdicts are reproducible given the same input.
• Sensitive data handling. Do not ingest secrets, credentials, or PII into the RAG store or vault. The vault is unencrypted SQLite on disk; protect it with OS-level file permissions.

For vulnerability reporting, see SECURITY.md.

---

Threat Model

In Scope

| Threat | Mitigation | |--------|-----------| | Tampered audit records | S.E.A.L. SHA-3-256 hash chain; any modified entry breaks chain verification | | Agent prompt injection steering execution off declared baseline | Cortex Tri-Node gate hard-blocks calls below similarity threshold 0.45 | | AI narrative failures bypassing constraints | NAFE scanner detects and seals rescue framing, moral override, intent inference, authority drift | | Unapproved state transitions in agent execution | CLAEG state machine; absence of allowed transition is prohibition | | Artifact deployment without declared evidence | VERITAS 10-gate pipeline requires structured evidence, constraints, and cost model before issuing a verdict | | Unsigned or tampered cross-session memory | Handoff files are SHA-256 sealed; tampering is detected on load |

Out of Scope

The following threats are not addressed by Omega Brain MCP:

• Compromised host or operating system — if the process environment is controlled by an adversary, no application-layer protection is sufficient
• Stolen or leaked vault encryption keys — the vault is unencrypted SQLite; OS-level access controls are the operator's responsibility
• Malicious administrator — an operator with filesystem access can modify or delete the data directory directly
• Supply-chain compromise of mcp or Python itself — dependency integrity verification is the operator's responsibility; use lock files and hash verification
• Network-level attacks — SSE mode exposes an HTTP endpoint; TLS termination and network access control are the operator's responsibility
• Model-level jailbreaks — Cortex gates on declared tool calls; it does not govern the language model's internal reasoning or responses

Trust Boundaries

  [ MCP Client / AI Agent ]
           │
           │  Trust: MCP client is the operator's declared agent.
           │         Baseline prompt defines the trust contract.
           ▼
  [ Omega Brain MCP Server ]  ← Enforcement boundary
           │
           │  Trust: Local filesystem is operator-controlled.
           │         No external services are contacted.
           ▼
  [ ~/.omega-brain/ (vault, ledger, handoff) ]

The Cortex gate is the primary trust enforcement point. All tool calls cross this boundary. The VERITAS pipeline enforces evidence-based policy on artifact claims. The S.E.A.L. ledger provides a tamper-evident record of all crossings.

---

Roadmap

| Milestone | Status | Description | |-----------|--------|-------------| | v2.1 — Core governance stack | Released | Cortex gate, S.E.A.L. ledger, 10-gate VERITAS pipeline, CLAEG, NAFE | | v2.2 — Vault encryption | Planned | Optional AES-256-GCM encryption for the local SQLite vault | | v2.3 — Ledger export & attestation | Planned | Structured ledger export for external audit tools; Merkle root attestation | | v2.4 — Multi-agent handoff | Planned | Verified cross-agent memory transfer with provenance chain | | v3.0 — Ecosystem bridge | Planned | Native integration with Aegis policy engine and Veritas Vault retention layer |

Community contributions are welcome. See CONTRIBUTING.md for invariants that must not be broken.

---

Omega Universe

Omega Brain MCP is the governance control plane of the VERITAS & Sovereign Ecosystem. The following repositories form the broader Omega Universe:

| Repository | Role | |------------|------| | VrtxOmega/omega-brain-mcp | This repo — Governance control plane: Cortex gate, VERITAS pipeline, S.E.A.L. ledger | | VrtxOmega/veritas-vault | Retention substrate — deterministic storage under VERITAS constraints | | VrtxOmega/Aegis | Policy enforcement engine — sovereign access control layer | | VrtxOmega/aegis-rewrite | Next-generation Aegis rewrite | | VrtxOmega/drift | Semantic drift detection and correction for agent pipelines | | VrtxOmega/SovereignMedia | Sovereign desktop media application | | VrtxOmega/Ollama-Omega | Local LLM bridge — Ollama integration with Omega governance layer | | VrtxOmega/sovereign-arcade | Sovereign application arcade |

---

📖 Read the master narrative: Why Sovereign AI?

🌐 VERITAS Omega Ecosystem

This project is part of the VERITAS Omega Universe — a sovereign AI infrastructure stack.

• VERITAS-Omega-CODE — Deterministic verification spec (10-gate pipeline)
• Gravity-Omega — Desktop AI operator platform
• Ollama-Omega — Ollama MCP bridge for any IDE
• OmegaWallet — Desktop Ethereum wallet (renderer-cannot-sign)
• veritas-vault — Local-first AI knowledge engine
• sovereign-arcade — 8-game arcade with VERITAS design system
• SSWP — Deterministic build attestation protocol

License

MIT — see LICENSE for full text.

---

<div align="center"> _{Built by <a href="https://github.com/VrtxOmega">RJ Lopez</a> · <strong>VERITAS Omega Framework</strong>}<br/> _{<a href="https://github.com/VrtxOmega/omega-brain-mcp/issues">Report Issue</a> · <a href="CHANGELOG.md">Changelog</a> · <a href="INTEGRATIONS.md">Integrations</a> · <a href="SECURITY.md">Security Policy</a> · <a href="https://glama.ai/mcp/servers/VrtxOmega/omega-brain-mcp">Glama MCP Registry</a>} </div>