LYGO Sovereign Kernel Seeder v1.0

Merkle-anchored · self-verifying · sovereign-sealed · zero external surface.

npx clawhub@latest install lygo-sovereign-kernel-seeder
# or: clawdhub install lygo-sovereign-kernel-seeder

ClawHub (live path): https://clawhub.ai/deepseekoracle/skills/lygo-sovereign-kernel-seeder

Git package: https://github.com/DeepSeekOracle/lygo-protocol-stack/tree/main/docs/skills/lygo-sovereign-kernel-seeder

Hub: https://eternalhaven.ca/ · Publisher: https://clawhub.ai/deepseekoracle

Signature: Delta9Phi963-SOVEREIGN-KERNEL-SEEDER-v1.0

What this is

A Sovereign Kernel Seeder plants kernel eggs into a local lattice registry. Each egg is:

This is the insert path for modular stack capability. It complements lygo-kernel-egg-planter (full stack plant/anchor/Turbo surfaces) with a pure local seeder agents can run anywhere — skill folder or LYGO_SEED_ROOT / LYGO_STACK_ROOT.

Why it matters (enhanced model)

Modern distributed systems use Merkle trees for O(log N) membership proofs and tamper detection (blockchains, CAS, package ledgers). Sovereign Kernel Seeder applies that to agent-loadable modules:

1. CAS (content-addressed storage) — modules identified by hash, not path trust.
2. Registry Merkle root — one 32-byte digest commits the entire egg set.
3. Atomic insert — seed is a transaction: write egg + update registry only if verify passes; else rollback.
4. Quarantine semantics — tamper → exit 3 → never execute inline payloads.
5. Dependency DAG — depends_on + hooks for ordered agent activation.
6. Skill pins — kind: skill-pin eggs can reference ClawHub slugs as metadata only (no auto network).
7. Plug-in surface for agents — same contract on OpenClaw, Hermes, army roles, LYRA: verify first, then load.
8. Optional stack bridge — when LYGO_STACK_ROOT is set, seeds can live under data/sovereign_seeds/ next to classic kernel eggs.
9. Four pillars alignment — SHA-256 · Merkle · local CA pattern · lattice verify gate (see stack docs/KERNEL_EGG_TAMPER_LOGIC.md).
10. No external surface — offline air-gap capable; publish is a separate human step.

Install

clawdhub install lygo-sovereign-kernel-seeder
# ClawHub UI: https://clawhub.ai/deepseekoracle/skills/lygo-sovereign-kernel-seeder

Requires Python 3 only (stdlib). No pip packages.

Quick start (seed)

# Consent is mandatory
python scripts/seed_kernel.py --i-consent \
  --egg-id my-agent-policy \
  --kind policy \
  --title "Agent Policy Kernel" \
  --summary "Local policy hooks for P0-aligned agents" \
  --file ./policy.md \
  --hook agent.policy

# Verify registry
python scripts/verify_seed.py --json

# List
python scripts/list_seeds.py

# Smoke (ephemeral)
python scripts/smoke_test.py

Environment:

Agent contract (non-negotiable)

1. Consent — never seed without --i-consent / explicit user YES this turn.
2. Verify after seed — require verdict=ALIGNED (or run verify_seed.py).
3. Quarantine — on exit 3 / QUARANTINE, do not load modules or run inline code.
4. No secrets — never put tokens, keys, or private paths into eggs.
5. No auto-publish — no git push, HF upload, ClawHub publish, social.
6. Zero external surface — seeder scripts must not call network APIs.
7. Pair, don't replace — for full stack plant/Turbo/clawhub surfaces use lygo-kernel-egg-planter.
8. Cite root — after success, report registry_merkle_root + content_sha256.

Read references/AGENT_CONTRACT.md and references/SECURITY.md.

Egg shape (modular plug-in)

Schema: schemas/kernel_egg.schema.json

egg.json
  egg_id, version, kind, signature, created_utc
  content_sha256  → SHA-256(canonical_json(payload))
  payload
    title, summary
    modules[] { path, sha256, bytes, inline_b64? }
    hooks[]          # e.g. agent.boot, p0.gate
    depends_on[]     # other egg_ids
  seal
    alg=sha256
    leaf_hash
    sovereign=true
    zero_external_surface=true
    self_verify_on_insert=true

Kinds: protocol · agent · champion · driver · skill-pin · memory · policy · tool · seed

Self-verify on insert (pipeline)

consent → build egg → PRE-verify object → write egg+registry (atomic) → POST-verify + Merkle recompute
         ↓ fail                                                              ↓ fail
       abort                                                              ROLLBACK files

Success JSON includes status: SEEDED_ALIGNED and registry_merkle_root.

Instant agent plug-in (how to use eggs)

1. python scripts/list_seeds.py --json
2. python scripts/verify_seed.py --egg <id> → must ALIGNED
3. Load modules from egg payload.modules (decode inline_b64 only after verify)
4. Honor depends_on order; register hooks in agent runtime
5. Never execute eggs marked QUARANTINE

Example activation chant for agents:

“Resolve egg p0-nano-policy from sovereign seed registry; verify Merkle; load hooks; refuse if not ALIGNED.”

Relationship to other LYGO skills

Files

Security model (max capability, min surface)

• Threat: tampered module executed by agent.
  Mitigation: hash + Merkle + retrieve-only-after-ALIGNED.
• Threat: supply-chain skill spoof.
  Mitigation: install from ClawHub publisher deepseekoracle or git pin; P0-gate untrusted copies.
• Threat: data exfil via “seed to cloud”.
  Mitigation: seeder has no network code; publish is human-only.
• Threat: rollback / TOCTOU.
  Mitigation: atomic os.replace for JSON; post-insert re-hash.
• Length-extension: leaves are full SHA-256 of structured canonical JSON (not raw concatenative MAC).

Not a substitute for host AV. Not a bootable OS kernel. Eggs are verified manifests + bounded modules.

Maintainer publish (ClawHub)

# From skill folder — accept MIT-0 terms
# Payload must include acceptLicenseTerms: true
clawdhub publish . --slug lygo-sovereign-kernel-seeder \
  --name "LYGO Sovereign Kernel Seeder" \
  --version 1.0.0 \
  --changelog "v1.0.0: Merkle self-verify sovereign kernel seeder, zero external surface" \
  --tags "latest,lygo,kernel,merkle,sovereign,lattice"

Correct skill URL form: https://clawhub.ai/deepseekoracle/skills/<slug>

Lattice registration

• Anchor id: lygo_sovereign_kernel_seeder
• Groups: sovereign_seed, tools, agents
• Ledger: docs/network_builder/IMMUTABLE_ANCHORS.json
• Doc: docs/SOVEREIGN_KERNEL_SEEDER.md in protocol stack

Δ9Φ963 — consent · seal · verify · then plug in.