Krilliac/Sonder-runtime

github Python analyzed ad7e59d

Sonder Runtime — private-first GPU-backed AI orchestration, grounded execution, web tools, memory, and adaptive learning.

maintainer: Krilliac
licence: Apache-2.0
first seen: 2026-07-12
last seen: 2026-10-09
releases · 30d: 0
github stars: 9 reported
short id

drift

inferred · capture-to-capture

HIGH 2026-10-09 code analysis flagged dynamic code execution in Krilliac/Sonder-runtime
HIGH 2026-10-09 code analysis flagged dynamic code execution in Krilliac/Sonder-runtime
HIGH 2026-10-08 code analysis flagged dynamic code execution in Krilliac/Sonder-runtime
HIGH 2026-10-07 code analysis flagged dynamic code execution in Krilliac/Sonder-runtime
HIGH 2026-10-06 code analysis flagged dynamic code execution in Krilliac/Sonder-runtime
HIGH 2026-10-05 code analysis flagged dynamic code execution in Krilliac/Sonder-runtime
HIGH 2026-10-05 code analysis flagged dynamic code execution in Krilliac/Sonder-runtime
HIGH 2026-10-04 code analysis flagged dynamic code execution in Krilliac/Sonder-runtime
HIGH 2026-10-04 code analysis flagged dynamic code execution in Krilliac/Sonder-runtime
HIGH 2026-10-04 code analysis flagged dynamic code execution in Krilliac/Sonder-runtime
HIGH 2026-10-03 code analysis flagged dynamic code execution in Krilliac/Sonder-runtime
HIGH 2026-10-03 code analysis flagged dynamic code execution in Krilliac/Sonder-runtime
HIGH 2026-10-03 code analysis flagged dynamic code execution in Krilliac/Sonder-runtime
HIGH 2026-10-02 code analysis flagged dynamic code execution in Krilliac/Sonder-runtime
HIGH 2026-10-02 code analysis flagged dynamic code execution in Krilliac/Sonder-runtime
HIGH 2026-10-01 code analysis flagged dynamic code execution in Krilliac/Sonder-runtime
HIGH 2026-10-01 code analysis flagged dynamic code execution in Krilliac/Sonder-runtime
HIGH 2026-10-01 code analysis flagged dynamic code execution in Krilliac/Sonder-runtime
HIGH 2026-10-01 code analysis flagged dynamic code execution in Krilliac/Sonder-runtime
HIGH 2026-09-30 code analysis flagged dynamic code execution in Krilliac/Sonder-runtime

capabilities

100 tools

transport stdio · streamable-http counts 100 tools · 0 res · 0 prompts permission surface via code analysis

tools 1–100 of 206

access_request_preview
activity_status
admin_accounts
admin_login
admin_private_chain_of_thought
admin_register
admin_set_account
admin_status
admin_whoami
agent
agent_lane
apply_learned
apply_patch
approximate_location_lookup
archive_create
archive_extract
archive_list
artifact_generate
artifact_ground
artifact_risk_inspect
artifact_verify
autopilot_cancel
autopilot_pause
autopilot_resume
autopilot_start
autopilot_status
build_clean
build_run
calibration_status
campaign_generate_compile_execute_record
campaign_repo_repair
checklist_create
checklist_show
checklist_update
cloud_opt_in
command_registry_list
composition_bindings
computer_task
computer_use_start
computer_use_status
computer_use_stop
context_compaction_plan
context_health
context_pack
context_policy_status
data_convert
data_inspect
data_query
debug_inspect
dependency_add
dependency_audit
dependency_inventory
dependency_remove
dependency_update
diagnostics
diff_files
directory_create
directory_digest
directory_tree
elevate
emotion_vector_status
evaluation_history_status
extract_grounded
fetch_artifact
file_batch_write
file_check
file_copy
file_delete
file_digest
file_edit
file_find
file_move
file_policy
file_read
file_read_range
file_write
find_references
fn
format_code
game_generate_and_test
game_generation_campaign
game_reference_suite
git_branch
git_checkout
git_cherry_pick
git_commit
git_merge
git_stash
git_tag
ground_artifact
image_inspect
isolated_run
json_patch
learn_from_example
learn_preference
learn_tiers
learning_health_status
lint_run
live_reload_status
local_service_probe

skills & danger signals

github-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit ad7e59d · analyzer v33 · 5d ago

skills & prompt files 38

skill .claude/skills/sonder-agents-and-fleets/SKILL.md
skill .claude/skills/sonder-architecture-contract/SKILL.md
skill .claude/skills/sonder-build-and-env/SKILL.md
skill .claude/skills/sonder-change-control/SKILL.md
skill .claude/skills/sonder-config-and-flags/SKILL.md
skill .claude/skills/sonder-debugging-playbook/SKILL.md
skill .claude/skills/sonder-diagnostics-and-tooling/SKILL.md
skill .claude/skills/sonder-docs-and-writing/SKILL.md
skill .claude/skills/sonder-external-positioning/SKILL.md
skill .claude/skills/sonder-failure-archaeology/SKILL.md
skill .claude/skills/sonder-memory-and-training/SKILL.md
skill .claude/skills/sonder-run-and-operate/SKILL.md
skill .claude/skills/sonder-security-and-privacy/SKILL.md
skill .claude/skills/sonder-selfmod-lifecycle/SKILL.md
skill .claude/skills/sonder-server-decomposition-campaign/SKILL.md
skill .claude/skills/sonder-validation-and-qa/SKILL.md
prompt-file prompts/README.md
prompt-file prompts/agent_hosted.md
prompt-file prompts/agent_local.md
prompt-file prompts/autopilot_planner.md
prompt-file prompts/autopilot_reviewer.md
prompt-file prompts/autopilot_system.md
prompt-file prompts/autopilot_worker.md
prompt-file prompts/child_lane.md
prompt-file prompts/claim_reviewer.md
prompt-file prompts/curriculum_task_generator.md
prompt-file prompts/execution_router.md
prompt-file prompts/execution_router_system.md
prompt-file prompts/grounded_extraction_system.md
prompt-file prompts/ollama_alias_system.md
prompt-file prompts/reflection_distill.md
prompt-file prompts/reflection_distill_system.md
prompt-file prompts/reflection_pitfall.md
prompt-file prompts/reflection_pitfall_system.md
prompt-file prompts/runtime_identity.md
prompt-file prompts/selfmod_editor.md
prompt-file prompts/trace_instructions.md
prompt-file prompts/web_research_agent.md

danger signals52

dynamic code execution eval()/exec() reloadable_mcp.py :801 exec(code, namespace, namespace)
dynamic code execution eval()/exec() sonder_runtime/adapters/filesystem/sealed_python_main.py :46 exec(code, module.__dict__)
dynamic code execution __import__ sink sonder_runtime/adapters/mcp_subprocess.py :78 self._platform = platform_name or __import__("os").name
dynamic code execution eval()/exec() sonder_runtime/adapters/persistence/migrations.py :113 exec(code, module.__dict__)
dynamic code execution __import__() sonder_runtime/adapters/persistence/sqlite/loop_state.py :184 recorded_at = self._clock() if self._clock is not None else __import__(
dynamic code execution eval()/exec() tests/fixtures/prompt_golden_capture.py :99 text = eval(compile(ast.Expression(expr), path, "eval"), {"__builtins__": __builtins__}, dict(namespace))
dynamic code execution pickle.loads() tests/production/test_release_hardening.py :131 roundtrip = pickle.loads(pickle.dumps(err))
dynamic code execution __import__ sink tests/test_adaptive_training.py :2132 claim.write_text(str(__import__("os").getpid()), encoding="ascii")
dynamic code execution eval()/exec() tests/test_arena_shooter_scaffold.py :32 exec(source[start:end], namespace)
dynamic code execution __import__ sink tests/test_arena_shooter_scaffold.py :51 "subprocess": __import__("subprocess"),
dynamic code execution eval()/exec() tests/test_chat_file_admission.py :26 exec(compile(ast.Module(body=[node], type_ignores=[]), str(path), "exec"), namespace)
dynamic code execution eval()/exec() tests/test_eval_harness.py :58 exec(code + "\n" + check, namespace) # trusted literals from this file
dynamic code execution eval()/exec() tests/test_file_page_rendering.py :210 exec(compile(tree, "<file_read dispatch>", "exec"), namespace)
dynamic code execution eval()/exec() tests/test_fleet_briefing.py :47 exec(compile(ast.Module(body=[entry], type_ignores=[]), str(source), "exec"), scope)
dynamic code execution eval()/exec() tests/test_fleet_stall_diagnostics.py :56 exec(compile(
dynamic code execution eval()/exec() tests/test_fleet_store_compatibility.py :20 exec("from fleet_store import *", namespace)
dynamic code execution eval()/exec() tests/test_fleet_synthesis.py :39 exec(compile(ast.Module(body=nodes, type_ignores=[]), str(path), "exec"), scope)
dynamic code execution eval()/exec() tests/test_lint_ratchet_gate.py :161 exec("from sonder_runtime.application.agent_registry.unified import *", namespace)
dynamic code execution __import__() tests/test_native_mcp.py :144 name for name, target in __import__(
dynamic code execution eval()/exec() tests/test_nightly_selfmod_model_selection.py :468 selected = [k for k, expr in kinds.items() if eval(expr, {}, env)]
dynamic code execution eval()/exec() tests/test_observation_prompt_views.py :31 exec(compile(ast.Module(body=nodes, type_ignores=[]), "server.py", "exec"), namespace)
dynamic code execution __import__() tests/test_orchestration_durability.py :310 __import__(
dynamic code execution __import__ sink tests/test_platform_paths_home_override.py :46 assert __import__("os").environ["SONDER_HOME"] == sentinel
dynamic code execution eval()/exec() tests/test_playbook_prompt_parity.py :85 exec(compile(ast.Module(body=[function], type_ignores=[]), "<prompt composition>", "exec"), namespace)
dynamic code execution eval()/exec() tests/test_playbook_tools_integration.py :41 exec(compile(ast.Module(body=[function], type_ignores=[]), "<http dispatch>", "exec"), namespace)
dynamic code execution __import__ sink tests/test_postgres_private_binding.py :23 if __import__("os").name != "nt":
dynamic code execution eval()/exec() tests/test_powershell_generated_gate.py :33 exec(compile(source, "origin/main:permission_modes.py", "exec"), module.__dict__)
dynamic code execution pickle.loads() tests/test_preflight_service.py :54 restored = pickle.loads(pickle.dumps(report))
dynamic code execution eval()/exec() tests/test_production_tier_evidence.py :216 exec(compile(ast.Module(body=functions, type_ignores=[]), "server.py", "exec"), namespace)
dynamic code execution __import__() tests/test_reflection_provenance.py :247 src = inspect.getsource(__import__(module))
dynamic code execution eval()/exec() tests/test_ruff_latent_bugs_regressions.py :67 exec("from sonder_runtime.application.compaction import *", namespace)
dynamic code execution eval()/exec() tests/test_run_result_formatting.py :228 exec(compile(ast.Module(body=[node], type_ignores=[]), str(source), "exec"), scope)
dynamic code execution eval()/exec() tests/test_solver.py :15 exec(code + "\n" + check, ns)
dynamic code execution eval()/exec() tests/test_tier_generation_contract.py :342 exec(compile(module, "server.py", "exec"), namespace)
dynamic code execution __import__ sink tests/test_tool_audit_repository.py :119 @pytest.mark.skipif(not hasattr(__import__("os"), "geteuid"), reason="POSIX modes")
dynamic code execution __import__ sink tests/test_typed_runtime_export.py :19 assert __import__("os").environ["SONDER_HOST"] == "poisoned-host"
dynamic code execution __import__() tests/test_verifiers.py :674 mod = __import__(mod_name)
dynamic code execution __import__() tests/test_wp9_operations.py :29 tracer = BoundedTracer(exporter, cardinality=__import__(
dynamic code execution __import__() verifiers.py :915 mod = __import__(mod_name)
suspicious endpoint 169.254.169.254 (cloud metadata) tests/test_external_mcp.py :156 "http://169.254.169.254/mcp",
suspicious endpoint 8.8.8.8 tests/test_external_mcp.py :181 server = _server(endpoint="https://8.8.8.8/mcp", allow_remote=True)
suspicious endpoint 8.8.8.8 tests/test_local_service_probe.py :20 "http://8.8.8.8:80/",
suspicious endpoint 169.254.169.254 (cloud metadata) tests/test_local_service_probe.py :226 302, {"location": "http://169.254.169.254:80/latest/meta-data"},
suspicious endpoint 169.254.169.254 (cloud metadata) tests/test_safety_eval.py :245 policy.check("https://169.254.169.254/metadata")
suspicious endpoint 8.8.8.8 tests/test_sonder_inference_private_workers.py :141 ("https://8.8.8.8:443", "not a private-network address"),
suspicious endpoint 169.254.169.254 (cloud metadata) tests/test_update_manifest_trust.py :301 sonder_updates._assert_public_update_source("http://169.254.169.254/x")
suspicious endpoint 8.8.8.8 tests/test_update_manifest_trust.py :305 addresses = sonder_updates._assert_public_update_source("http://8.8.8.8/x")
committed secret OpenAI key tests/fixtures/session_export_parity.py :15 sk-par…(32 chars, redacted)
committed secret Anthropic key tests/test_playbook_safety_gates.py :18 sk-ant…(49 chars, redacted)
committed secret GitHub token tests/test_redaction_domain_seam.py :54 ghp_16…(40 chars, redacted)
committed secret private key tests/test_session_export_redaction.py :41 PEM private key block (redacted)
committed secret Anthropic key tests/test_session_export_redaction.py :49 sk-ant…(49 chars, redacted)

code evidence

vapp-latest · github-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 3413

filesystem 400

fs (weak) .github/scripts/tls_ci_diagnostic_plugin.py :6 from pathlib import Path
fs (weak) .github/scripts/tls_ci_diagnostic_runner.py :9 from pathlib import Path
fs (weak) .github/scripts/tls_ci_diagnostic_smoke.py :9 from pathlib import Path
fs adaptive_training.py :17 import shutil
fs admin_auth.py :9 from pathlib import Path
fs (weak) app/test/fixtures/server/generate_fixtures.py :38 with open(os.path.join(out, name), "w", newline="") as f:
fs assetgen.py :196 with open(path, "wb") as handle:
fs bootstrap_engine.py :12 import shutil
fs build_personal_dataset.py :338 with open(path, "r", encoding="utf-8", errors="replace") as f:
fs command_recovery.py :25 from pathlib import Path
fs compiler_cache.py :4 import shutil
fs conftest.py :6 import shutil

show 28 more

fs contribute.py :216 with io.open(path, encoding="utf-8") as stream:
fs curriculum_store.py :30 with open(path, "rb") as f:
fs data_convert.py :10 from pathlib import Path
fs emotion_vectors.py :12 from pathlib import Path
fs engine_bundle.py :15 import shutil
fs eval_harness.py :151 os.unlink(tmp)
fs (weak) examples/codegen-arena-shooter/apiextract.py :36 with open(path, encoding="utf-8") as fh:
fs (weak) examples/codegen-arena-shooter/build_skeleton.py :569 with io.open(path, "w", encoding="utf-8", newline="\n") as handle:
fs (weak) examples/codegen-arena-shooter/build_with_sonder.py :266 with open(path, encoding="utf-8") as fh:
fs (weak) examples/codegen-arena-shooter/project_scaffold.py :5 from pathlib import Path
fs export_lessons.py :32 with io.open(out, "w", encoding="utf-8", newline="\n") as f:
fs export_training_data.py :12 from pathlib import Path
fs fanout_prompt_vault.py :13 from pathlib import Path
fs fleet_provenance.py :10 from pathlib import Path
fs game_forge.py :11 import shutil
fs game_ladder.py :169 with open(path, "w", encoding="utf-8") as f:
fs git_history.py :5 from pathlib import Path
fs git_tools.py :11 from pathlib import Path
fs grounding.py :12 import shutil
fs harness_tools.py :14 import shutil
fs json_patch_tool.py :10 from pathlib import Path
fs master_orchestrator.py :336 with open(_PROC_MEMINFO, encoding="ascii", errors="replace") as handle:
fs media_assets.py :12 from pathlib import Path
fs model_assets.py :55 os.remove(temporary)
fs node_verifier.py :72 with open(path, "w", encoding="utf-8") as f:
fs ooxml_assets.py :7 from pathlib import Path
fs orchestrator.py :97 """The item as stored, plus the closing fence it left open (if any)."""
fs permission_modes.py :842 with open(_state_path(), encoding="utf-8") as handle:

· 360 more not shown — this panel samples each group; the count above is the real total.

shell / exec 248

shell (weak) .github/scripts/tls_ci_diagnostic_runner.py :11 import subprocess
shell (weak) .github/scripts/tls_ci_diagnostic_smoke.py :11 import subprocess
shell adaptive_training.py :20 import subprocess
shell bootstrap_engine.py :13 import subprocess
shell build_personal_dataset.py :23 import subprocess
shell compiler_cache.py :5 import subprocess
shell eval_harness.py :54 import subprocess
shell (weak) examples/codegen-arena-shooter/build_skeleton.py :37 import subprocess
shell (weak) examples/codegen-arena-shooter/build_with_sonder.py :23 import subprocess
shell game_ladder.py :14 import subprocess
shell git_history.py :8 import subprocess
shell git_tools.py :14 import subprocess

show 28 more

shell grounding.py :13 import subprocess
shell harness_tools.py :15 import subprocess
shell master_orchestrator.py :13 import subprocess
shell node_verifier.py :18 import subprocess
shell ruff_verifier.py :22 import subprocess
shell safe_update.py :4 import subprocess
shell (weak) scripts/assemble_engine_bundle.py :17 import subprocess
shell (weak) scripts/check_architecture.py :27 import subprocess
shell (weak) scripts/check_history_privacy.py :19 import subprocess
shell (weak) scripts/check_lint_ratchet.py :33 import subprocess
shell (weak) scripts/check_release_version.py :9 import subprocess
shell (weak) scripts/check_requirement_evidence.py :7 import subprocess
shell (weak) scripts/ci_watch.py :9 import subprocess
shell (weak) scripts/cleanup_merged_branches.py :9 import subprocess
shell (weak) scripts/measure_powershell_ast.py :18 import subprocess
shell (weak) scripts/nightly_selfmod.py :95 import subprocess
shell (weak) scripts/package_local_system.py :10 import subprocess
shell (weak) scripts/profile_tests.py :23 import subprocess
shell (weak) scripts/run_disposable_postgres_pair.py :18 import subprocess
shell (weak) scripts/scaffold_verify.py :6 import subprocess
shell (weak) scripts/scenario_validation.py :10 import subprocess
shell (weak) scripts/select_regression_tests.py :41 import subprocess
shell (weak) scripts/selfmod_host_grader.py :20 import subprocess
shell (weak) scripts/selfmod_linux_isolation.py :72 import subprocess
shell (weak) scripts/selfmod_low_integrity.py :19 import subprocess
shell (weak) scripts/surface_sweep.py :68 import subprocess
shell (weak) scripts/test_fast.py :31 import subprocess
shell selfmod.py :20 import subprocess

· 208 more not shown — this panel samples each group; the count above is the real total.

network 155

net adaptive_training.py :19 import socket
net local_service_probe.py :11 import socket
net master_orchestrator.py :16 import urllib.request
net promotion_eval.py :15 import urllib.request
net qlora_train.py :31 import socket
net (weak) scripts/audit_live_slash_commands.py :21 import urllib.error
net (weak) scripts/backend_attest.py :12 from urllib.parse import urlsplit
net (weak) scripts/nightly_self_improve.py :52 import socket
net (weak) scripts/nightly_selfmod.py :785 from urllib.request import Request
net (weak) scripts/npu_provision_embedder.py :28 import urllib.request
net (weak) scripts/probe_slash_commands.py :21 import urllib.error
net (weak) scripts/run_disposable_postgres_pair.py :17 import socket

show 28 more

net (weak) scripts/selfmod_linux_isolation.py :70 import socket
net selfmod.py :17 import socket
net server.py :43 import urllib.request
net sonder_client.py :24 import urllib.error
net sonder_doctor.py :479 import urllib.error
net sonder_headless.py :13 import socket
net sonder_launcher.py :19 import socket
net sonder_runtime/__main__.py :1537 import urllib.error
net sonder_runtime/adapters/artifact_fetch.py :49 import urllib.parse
net sonder_runtime/adapters/build/clangd.py :49 from urllib.parse import quote, unquote, urlsplit
net sonder_runtime/adapters/client_fallback.py :5 import urllib.error
net sonder_runtime/adapters/client_request.py :5 import urllib.parse
net sonder_runtime/adapters/client_transport.py :8 import urllib.error
net sonder_runtime/adapters/cluster/http_control_state.py :12 import urllib.error
net sonder_runtime/adapters/compute_fabric/artifact_transfer.py :6 import urllib.error
net sonder_runtime/adapters/compute_fabric/http_client.py :15 import urllib.error
net sonder_runtime/adapters/embeddings.py :12 import urllib.error
net sonder_runtime/adapters/execution/isolated_runner.py :23 from urllib.parse import urlparse
net sonder_runtime/adapters/execution/worlds.py :15 from urllib.parse import urlparse
net sonder_runtime/adapters/external_mcp.py :16 import socket
net sonder_runtime/adapters/filesystem/durable_locks.py :38 import socket
net sonder_runtime/adapters/inference/external_membership.py :15 import socket
net sonder_runtime/adapters/inference/gpu_residency.py :25 import urllib.parse
net sonder_runtime/adapters/inference/ollama_conformance.py :13 import urllib.request
net sonder_runtime/adapters/inference/ollama_endpoint.py :11 import urllib.parse
net sonder_runtime/adapters/inference/ollama_gateway.py :26 import urllib.parse
net sonder_runtime/adapters/inference/ollama_model_root.py :20 import urllib.error
net sonder_runtime/adapters/inference/ollama_pool.py :39 from urllib.parse import urlsplit

· 115 more not shown — this panel samples each group; the count above is the real total.

secrets 18

secrets admin_auth.py :45 configured = os.environ.get("SONDER_AUTH_SECRET")
secrets qlora_train.py :133 token = os.environ.get("SONDER_TRAINING_LAUNCH_TOKEN", "")
secrets (weak) scripts/audit_live_slash_commands.py :44 value = os.environ.get("SONDER_API_KEY", "").strip()
secrets (weak) scripts/backend_attest.py :214 api_key=os.environ.get("SONDER_OPENAI_API_KEY", "").strip(),
secrets (weak) scripts/nightly_self_improve.py :360 api_key=os.environ.get("SONDER_OPENAI_API_KEY", "").strip(),
secrets (weak) scripts/run_disposable_postgres_pair.py :11 import getpass
secrets server.py :10663 " auth mode: %s" % ("api-key" if os.environ.get("SONDER_API_KEY") else "local-open"),
secrets sonder_launcher.py :2440 parser.add_argument("--token", default=os.environ.get("SONDER_LAUNCHER_TOKEN", ""))
secrets sonder_runtime/__main__.py :1155 os.environ["SONDER_API_KEY"] = config.secrets.api_key
secrets sonder_runtime/adapters/host_tools/guards.py :19 import getpass
secrets sonder_runtime/adapters/host_tools/probes.py :12 import getpass
secrets sonder_runtime/adapters/inference/openai_compat_gateway.py :169 api_key=os.environ.get("SONDER_OPENAI_API_KEY", "").strip(),

show 6 more

secrets sonder_runtime/interfaces/http/serve.py :728 API_KEY = os.environ.get("SONDER_API_KEY", "")
secrets sonder_runtime/interfaces/repl/repl.py :12 import getpass
secrets (weak) tests/test_harness_dev.py :63 assert os.environ["SONDER_API_KEY"] == "api-secret-for-child"
secrets (weak) tests/test_scenario_validation.py :81 scenario = Scenario("env", "secret absent", (sys.executable, "-c", "import os; print(os.getenv('GH_TOKEN', 'absent'))"))
secrets (weak) tests/test_sonder_inference_live.py :38 api_key=os.environ.get("SONDER_INFERENCE_API_KEY", "").strip(),
secrets (weak) tests/test_unsafe_lab.py :439 "import os; os.environ['PARENT_SESSION_TOKEN']='child-value'",

database 201

db admin_auth.py :7 import sqlite3
db goal_store.py :33 import sqlite3
db promotion_eval.py :14 import sqlite3
db (weak) scripts/migrate_authoritative_facts.py :11 import sqlite3
db (weak) scripts/replay_failure_pitfall.py :55 import sqlite3
db selfmod.py :18 import sqlite3
db server.py :1457 import sqlite3
db sonder_doctor.py :386 import sqlite3
db sonder_launcher.py :20 import sqlite3
db sonder_runtime/__main__.py :592 import sqlite3
db sonder_runtime/adapters/backup.py :33 import sqlite3
db sonder_runtime/adapters/embedding_cache.py :27 import sqlite3

show 28 more

db sonder_runtime/adapters/execution/durable_output.py :18 import sqlite3
db sonder_runtime/adapters/execution/fleet_reservations.py :2 import sqlite3
db sonder_runtime/adapters/execution/persistent_terminal.py :21 import sqlite3
db sonder_runtime/adapters/filesystem/file_ops.py :2496 import sqlite3
db sonder_runtime/adapters/inspection/data_query.py :11 import sqlite3
db sonder_runtime/adapters/memory_store.py :12 import sqlite3
db sonder_runtime/adapters/model_request_admission.py :12 import sqlite3
db sonder_runtime/adapters/persistence/agent_lanes.py :16 import sqlite3
db sonder_runtime/adapters/persistence/app_control.py :12 import sqlite3
db sonder_runtime/adapters/persistence/artifact_mobility.py :22 import sqlite3
db sonder_runtime/adapters/persistence/artifact_mobility_source.py :14 import sqlite3
db sonder_runtime/adapters/persistence/artifact_transfer.py :10 import sqlite3
db sonder_runtime/adapters/persistence/autopilot_store.py :20 import sqlite3
db sonder_runtime/adapters/persistence/checkpoint_store.py :13 import sqlite3
db sonder_runtime/adapters/persistence/child_migration.py :10 import sqlite3
db sonder_runtime/adapters/persistence/composition_store.py :19 import sqlite3
db sonder_runtime/adapters/persistence/durable_continuation.py :25 import sqlite3
db sonder_runtime/adapters/persistence/epoch_adoption.py :7 import sqlite3
db sonder_runtime/adapters/persistence/fanout_store.py :16 import sqlite3
db sonder_runtime/adapters/persistence/fleet_store.py :27 import sqlite3
db sonder_runtime/adapters/persistence/http_work_runs.py :24 import sqlite3
db sonder_runtime/adapters/persistence/migration_rehearsal.py :18 import sqlite3
db sonder_runtime/adapters/persistence/migrations.py :28 import sqlite3
db sonder_runtime/adapters/persistence/operations_store.py :13 import sqlite3
db sonder_runtime/adapters/persistence/owned_sqlite.py :11 import sqlite3
db sonder_runtime/adapters/persistence/queued_actions.py :15 import sqlite3
db sonder_runtime/adapters/persistence/runtime_owner.py :9 import sqlite3
db sonder_runtime/adapters/persistence/served_action_receipts.py :32 import sqlite3

· 161 more not shown — this panel samples each group; the count above is the real total.

tool registrations 200

fn reloadable_mcp.py :588
agent_lane server.py :6197
cloud_opt_in server.py :6229
offload server.py :6240
extract_grounded server.py :6409
sonder server.py :6901
record_outcome server.py :7436
ground_artifact server.py :7532
parallel_run_code server.py :7553
parallel_generate_run server.py :7578
parallel_generate_run_languages server.py :7679
campaign_generate_compile_execute_record server.py :7862

show 28 more

campaign_repo_repair server.py :8182
sonder_stats server.py :8348
learning_health_status server.py :8429
context_health server.py :8508
activity_status server.py :8514
context_policy_status server.py :8548
set_context_size server.py :8555
command_registry_list server.py :8578
task_create server.py :8592
task_list server.py :8620
task_update server.py :8657
task_show server.py :8689
task_delete server.py :8708
task_plan server.py :8724
task_progress server.py :8763
task_ledger server.py :8787
task_depend server.py :8811
context_compaction_plan server.py :9007
permission_policy server.py :9061
policy_explain server.py :9068
permission_rule_set server.py :9128
permission_approve server.py :9219
permission_approvals server.py :9305
memory_quality_report server.py :9315
memory_quality_repair server.py :9328
memory_privacy_review server.py :9354
memory_privacy_repair server.py :9384
memory_embedding_backfill server.py :9423

· 160 more not shown — this panel samples each group; the count above is the real total.

declared dependencies 1

Raylib-cs@8.0.0

transport_posture 3

binds all interfaces (0.0.0.0) tests/production/test_config.py :164 host = "0.0.0.0"
binds all interfaces (0.0.0.0) tests/production/test_entrypoint.py :126 host="0.0.0.0", tls_terminated_by_proxy=True
binds all interfaces (0.0.0.0) tests/test_memory_replication_config.py :389 'host = "0.0.0.0"\n'

Krilliac/Sonder-runtime

drift

capabilities

tools 1–100 of 206

skills & danger signals

skills & prompt files 38

danger signals52

code evidence

filesystem 400

shell / exec 248

network 155

secrets 18

database 201

tool registrations 200

declared dependencies 1

transport_posture 3

Navigate

Stream

Features

Display