Deterministic reasoning runtime for AI agents. YAML rules, microsecond evaluation, zero hallucinations. Built on CLIPS.
Drift inferred · capture-to-capture
- HIGH code analysis flagged dynamic code execution in KrakenNet/fathom
transport stdio · http counts 4 tools · 0 res
· 0 prompts
permission surface via code analysis
tools
-
fathom.assert_fact
-
fathom.evaluate
-
fathom.query
-
fathom.retract
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit 75f44a6 · analyzer v28 · 1h ago
danger signals1
- dynamic code execution eval()/exec() KrakenNet-fathom-75f44a6/examples/05-langchain-guardrails/agent_demo.py :106
return str(eval(expression, {"__builtins__": {}}, {})) # noqa: S307
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 188
filesystem 17
- fs KrakenNet-fathom-75f44a6/src/fathom/audit.py :6
from pathlib import Path - fs KrakenNet-fathom-75f44a6/src/fathom/chained_log.py :52
from pathlib import Path - fs KrakenNet-fathom-75f44a6/src/fathom/cli.py :16
from pathlib import Path # noqa: TC003 - used at runtime by Typer - fs KrakenNet-fathom-75f44a6/src/fathom/compiler.py :12
from pathlib import Path - fs KrakenNet-fathom-75f44a6/src/fathom/engine.py :13
from pathlib import Path - fs KrakenNet-fathom-75f44a6/src/fathom/integrations/grpc_server.py :441
with open(resolved, "rb") as f: - fs KrakenNet-fathom-75f44a6/src/fathom/integrations/paths.py :10
from pathlib import Path - fs KrakenNet-fathom-75f44a6/src/fathom/integrations/rest.py :541
with open(resolved, "rb") as f: - fs KrakenNet-fathom-75f44a6/src/fathom/packs.py :6
from pathlib import Path - fs KrakenNet-fathom-75f44a6/src/fathom/release_sig.py :24
from pathlib import Path - fs KrakenNet-fathom-75f44a6/src/fathom/rule_packs/_helpers.py :8
from pathlib import Path - fs KrakenNet-fathom-75f44a6/src/fathom/rule_packs/cmmc/__init__.py :20
from pathlib import Path - fs KrakenNet-fathom-75f44a6/src/fathom/rule_packs/hipaa/__init__.py :15
from pathlib import Path - fs KrakenNet-fathom-75f44a6/src/fathom/rule_packs/nist_800_53/__init__.py :16
from pathlib import Path - fs KrakenNet-fathom-75f44a6/src/fathom/rule_packs/ssvc/__init__.py :30
from pathlib import Path - fs KrakenNet-fathom-75f44a6/src/fathom/studio/panels.py :30
from pathlib import Path - fs KrakenNet-fathom-75f44a6/src/fathom/yaml_utils.py :12
from pathlib import Path
network 4
- net KrakenNet-fathom-75f44a6/src/fathom/cli.py :19
import httpx - net KrakenNet-fathom-75f44a6/src/fathom/studio/panels.py :33
import httpx - net KrakenNet-fathom-75f44a6/src/fathom/studio/scenarios.py :12
:class:`httpx.ASGITransport` (the same mechanism the Playground ``/eval`` - net KrakenNet-fathom-75f44a6/src/fathom/studio/sessions.py :25
import httpx
secrets 3
- secrets KrakenNet-fathom-75f44a6/src/fathom/integrations/auth.py :23
token = os.environ.get("FATHOM_API_TOKEN", "") - secrets KrakenNet-fathom-75f44a6/src/fathom/integrations/grpc_server.py :579
key_path = os.environ.get("FATHOM_GRPC_TLS_KEY", "") - secrets KrakenNet-fathom-75f44a6/src/fathom/studio/panels.py :296
token = os.environ.get("FATHOM_API_TOKEN")
database 2
- db KrakenNet-fathom-75f44a6/src/fathom/fleet_pg.py :24
import asyncpg # type: ignore[import-untyped] - db KrakenNet-fathom-75f44a6/src/fathom/fleet_redis.py :12
import redis.asyncio as aioredis
tool registrations 4
- fathom.evaluate KrakenNet-fathom-75f44a6/src/fathom/integrations/mcp_server.py :81
- fathom.assert_fact KrakenNet-fathom-75f44a6/src/fathom/integrations/mcp_server.py :85
- fathom.query KrakenNet-fathom-75f44a6/src/fathom/integrations/mcp_server.py :89
- fathom.retract KrakenNet-fathom-75f44a6/src/fathom/integrations/mcp_server.py :95
declared dependencies 23
- mcp@>=1.0
- clipspy@>=1.0.6,<1.1
- pyyaml@>=6.0
- pydantic@>=2.0
- fastapi@>=0.100
- uvicorn@>=0.20
- langchain-core@>=0.2
- crewai@>=0.80
- openai-agents@>=0.1
- google-adk@>=1.0
- prometheus_client@*
- prometheus-fastapi-instrumentator@*
- grpcio@>=1.60
- grpcio-tools@*
- asyncpg@*
- mkdocs-material@>=9.5
- google.golang.org/grpc@v1.82.0
- google.golang.org/grpc/cmd/protoc-gen-go-grpc@v1.6.2
- google.golang.org/protobuf@v1.36.11
- golang.org/x/net@v0.55.0
- golang.org/x/sys@v0.45.0
- golang.org/x/text@v0.37.0
- google.golang.org/genproto/googleapis/rpc@v0.0.0-20260414002931-afd174a4e478