How NovaFabric works

An offline, animated walkthrough of NovaFabric as built in src/novafabric/: the whole system first, then one run step by step, then detailed flows.

The whole system, end to end

From the workload to server mode in one map. Each step lights the parts involved and sends its data along the arrows; every step names the code it was checked against and carries a maturity label.

    System map 

    
      
    Link to this step
    
    
    
  
    
  
    Keys (focus anywhere outside the sections below): Space play/pause · ← → step · Home End first/last · 1–9, 0 jump to a stage · - + speed. Link to a step with #story-N or a stage with #stage-<name>.
    
  
  
    
    All steps as text
    
      
  
      

      


      

      One run, end to end
      

      The same pipeline on one example run: capture → seal → replay → verify, with the capsule's files appearing as they are written.
      


        


        
  
  
  
  
  
  
  

        

        While focus is in this section: Space play/pause · ← → step · Home End first/last · 1–4 jump to a phase. Link to a step with #step-N.
        


        
  
        
    
        
    
        
    
        
  
        

        


        
  
        
    
        Workload subprocess
        
    
        python agent.py
        started by the runner (runners/)
        
    
        sitecustomize hooks
        OpenAI · Anthropic · httpx · requests · MCP
        
    
        LLM call
        response recorded to model-calls.jsonl
        
    
        Tool call
        recorded to tool-calls.jsonl
        
    
        SecretScannerV0 + maskers
        redacts in place, writes the proof
        
    
  
        

  
        
    
        Run Capsule ~/.novafabric/capsules/01J9…/
        
    
          
  
          

  
          
    
          Trust NovaSeal · nova verify
          
    
          DSSE envelope
          ECDSA P-256 over canonical manifest JSON
          
    
          RFC 3161 token
          from the configured TSA (best effort)
          
    
          Merkle log
          leaf = H(0x00‖entry) · proof carried in log-entry.json
          
    
            
  
            

  
            

            

            


            
  
            Detailed flows
            
  
            Zoom into one path at a time, each checked against src/novafabric/: two pipeline flows (mocked replay and the diff gate) and four server-side request paths. Pick a flow, then step through it. While focus is in this section: ← → step · Space play/pause · ↑ ↓ on a tab switches flow. Link to a step with #flow-<id>-N.
            
  
            
  
            
    
            
      
            
      
            
      
            
      Flow diagram