When your AI agents go rogue, M99 revokes their credentials, severs their connections, and freezes their tools. Three levels. Reversible. EU AI Act Article 14 compliant.
$ git clone https://github.com/RichardBarron27/m99-community.git $ cd m99-community $ pip install -e .
Community Edition covers Levels 1–3 — all reversible. Each level increases the severity of intervention. Two-phase ARM/EXECUTE authorisation ensures no kill without intent.
Operator side and agent side. Three lines of Python. Background heartbeats included.
$ m99 serve # Starts on http://localhost:8099 # REST API + dashboard available immediately
from doomsday.sdk import M99Client, M99KillSwitchTriggered client = M99Client("http://localhost:8099") client.register("my-agent", "autonomous") try: while True: client.check_status() # Raises if kill switch fired do_work() except M99KillSwitchTriggered as e: shutdown_gracefully()
$ m99 status # See your agent registered $ m99 arm --by admin@example.com --reason "Rogue behaviour" $ m99 execute --auth <id_from_arm> --force # Agent stops immediately
No feature flags. No time limits. Everything below ships with the Community Edition under Apache 2.0 licence.
Three lines to register and heartbeat any agent. Context manager support. Background heartbeat thread. M99KillSwitchTriggered exception raised on ARM, EXECUTE, or Dead Man's Switch.
Full FastAPI REST API on port 8099. Register agents, arm/execute/disarm the kill switch, manage credentials, retrieve audit entries and evidence. Works from any language.
m99 serve, m99 arm, m99 execute, m99 status, m99 disarm. All operations available from the command line without writing Python.
Ed25519-signed heartbeats every 30 seconds. Three consecutive missed heartbeats (90 seconds) triggers automatic kill. Configurable thresholds. Evidence captured before trigger fires.
SHA-256 hash chain. Every event linked to its predecessor. Genesis block anchored. Tamper-evident. GET /api/audit/verify checks full chain integrity independently.
Signed state snapshots before every kill. Sealed Case Packs with public key and signature included. Any Case Pack can be independently verified without contacting Red Specter.
ARM creates a time-limited authorisation. EXECUTE consumes it within a 5-minute window. No single-action kill. Prevents accidental fleet termination from automation errors.
SQLite storage. Ed25519 via Python's cryptography library. No Redis, no Postgres, no cloud account required. Runs on a laptop or a production server identically.
Designed for Article 14 human interruptibility requirements. Audit trails, evidence capture, and two-phase authorisation satisfy oversight and accountability obligations for high-risk systems.
Community Edition covers reversible interventions. The Pro Edition handles irreversible termination — targeted kill, fleet shutdown, anti-replication, and anti-resurrection.
Contact richard@red-specter.co.uk for Pro Edition access.