One run, end to end

An offline walkthrough of capture → seal → replay → verify, as implemented in src/novafabric/.

    Keys: Space play/pause · ← → step · Home End first/last · 1–4 jump to a phase · link to a step with #step-N.

    Workload subprocess

    python agent.py
    started by the runner (runners/)
    sitecustomize hooks
    OpenAI · Anthropic · httpx · requests · MCP
    LLM call
    response recorded to model-calls.jsonl
    Tool call
    recorded to tool-calls.jsonl
    SecretScannerV0 + maskers
    redacts in place, writes the proof

    Run Capsule ~/.novafabric/capsules/01J9…/

      Trust NovaSeal · nova verify

      DSSE envelope
      ECDSA P-256 over canonical manifest JSON
      RFC 3161 token
      from the configured TSA (best effort)
      Merkle log
      leaf = H(0x00‖entry) · proof carried in log-entry.json
        

        


        
  
        Server-side flows
        
  
        Four request paths outside the capture pipeline above, each checked against src/novafabric/. Pick a flow, then step through it. While focus is in this section: ← → step · Space play/pause · ↑ ↓ on a tab switches flow. Link to a step with #flow-<id>-N.
        
  
        
  
        
    
        
      
        
      
        
      
        
      Flow diagram