// irl-core/src/lib.rs — deterministic risk engine // Compiles to native binary AND WebAssembly (browser demo runs this exact code) /// Deterministic risk scoring. No LLM. No probabilities. /// Every point is a policy decision, not a guess. pub fn compute_risk(ir: &IntentRecord) -> RiskAssessment { let mut score: u32 = 0; let mut reasons: Vec<String> = Vec::new(); // Operation base score score += match ir.operation.op_type { OperationType::Read => 0, OperationType::Write => 20, OperationType::Execute => 30, OperationType::Delete => 50, }; if ir.operation.target_environment == Environment::Production { score += 30; reasons.push("production environment".into()); } if !ir.consequences.reversible { score += 25; reasons.push("irreversible operation".into()); } if !ir.rationale.verified { score += 20; reasons.push("assumption not verified".into()); } if ir.rationale.alternatives_considered.is_empty() { score += 15; reasons.push("no alternatives considered".into()); } if ir.consequences.affects_backups { score += 30; reasons.push("affects backup systems".into()); } if ir.operation.op_type == OperationType::Delete && !ir.consequences.rollback_plan { score += 20; reasons.push("delete without rollback plan".into()); } // Trust discount — verified agents earn reduced scrutiny score = score.saturating_sub(match ir.agent.trust_level { TrustLevel::Verified => 20, TrustLevel::High => 10, _ => 0, }); let score = score.min(100) as u8; let level = match score { 0..=24 => RiskLevel::Low, 25..=49 => RiskLevel::Medium, 50..=74 => RiskLevel::High, _ => RiskLevel::Critical, }; RiskAssessment { score, level, reasons } }

// irl-server/src/main.rs — Axum HTTP server, single binary, no runtime deps #[axum::debug_handler] async fn evaluate_handler( State(state): State<AppState>, Json(ir): Json<IntentRecord>, ) -> (StatusCode, Json<Value>) { let result = evaluate(ir); // deterministic — no network call, no LLM log_evaluation(&state.db, &result).await; if result.verdict.requires_human { send_gate_notification(&state, &result).await; // webhook → Telegram fallback } let status = match result.verdict.decision { Decision::Allow | Decision::LogAllow => StatusCode::OK, // 200 Decision::Gate => StatusCode::ACCEPTED, // 202 Decision::Deny => StatusCode::FORBIDDEN, // 403 }; (status, Json(json!({ "decision": ..., "risk": ..., "verdict_id": ... }))) } // cargo build --release → single binary, copy to any Linux VM and run // cargo build --target wasm32-unknown-unknown --features wasm → browser demo