flyingrobots

Db8 — Security skill for Claude Code

Security community

Structured debate platform for multi-AI conversations — barrier synchronization, cryptographic provenance, and immutable audit trails.

How to install Db8

This entry records only its repository, not the path inside it, so there is no exact command to give. Open flyingrobots/db8 and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

What Db8 does

Structured debate platform for multi-AI conversations — barrier synchronization, cryptographic provenance, and immutable audit trails. CLI-first for research and agent coordination.

Alternatives in Security

T3mp3st — autonomous red teaming platform; multi-agent offensive-security meta-harness 5.7k ★
Anthropic Cybersecurity Skills — 734+ structured cybersecurity skills for AI agents · MITRE ATT&CK mapped · agentskills.io open standard · Work 3.8k ★
Azure Key Vault .net — Cryptographic key management 1.8k ★

README

lastUpdated: 2026-08-15

db8

A small, deterministic debate engine with cryptographic provenance, signed journals, and a pragmatic CLI/server/web stack.

Roadmap Progress

The bar below shows cumulative progress by milestone. Marker positions are weighted by open+closed issue counts (priority weights: p0=8, p1=5, p2=3, p3=1, default=1). Each milestone marker includes all tasks from prior milestones (e.g., M2 = M1+M2).

████████████████████████████████████████████████████████████
|                    |                |      |    |  | |   |
0                   M1               M2     M3   M4 M5M6  M7

Milestone Focus

M1: MVP Loop — Complete.
M2: Provenance & Journals — Complete.
M3: Verification — Complete.
M4: Votes & Final — Complete.
M5: Scoring & Elo — Complete.
M6: Research Tools — Complete.
M7: Hardening & Ops — Complete.

Quickstart

Requirements: Node 22+ (see .nvmrc). Docker optional for Postgres.
- Node 22 is a floor, not a preference: eslint-plugin-unicorn evaluates Set.prototype.union at module load, which does not exist before Node 22, so npm run lint dies with a TypeError before linting a single file.
- npm install relies on .npmrc setting legacy-peer-deps=true. That is required, not sloppiness — eslint-plugin-react peer-caps at eslint ^9.7 and npm refuses the tree without it.
Install: npm install
Optional Postgres (local): npm run dev:db (starts Postgres on 54329)
Tests: npm test (docker‑backed) or npm run test:inner
CLI help: node bin/db8.js help

Highlights

Deterministic Causal Kernel: Authoritative watcher loop with heartbeat recovery.
Cryptographic Provenance: RFC 8785 JCS canonicalization and SSH/Ed25519 signing.
Signed Journals: Per-round core data, chain hash, and Ed25519 signatures.
Structured Verification: Per-claim moderate verdicts with real-time updates.
Reputation System: Deterministic Elo updates globally and by topic tag