π inneri-secure
Inner I is the minimal invariant observer for I or AI systems. A zero-trust gateway that verifies identity, enforces policy, issues just-in-time credentials, and signs every action.
| Component | Purpose |
|---|---|
| Gateway (FastAPI:8080) | Zero-trust entry point for agent calls |
| OPA (8181) | Policy engine – RBAC/ABAC + sandboxing |
| Vault (8200) | JIT dynamic credentials (dev mode) |
| Postgres (5432) | Tool registry + audit logs |
How It Works
- Every call is authenticated (JWT) + authorized (OPA policy)
- Tools are vetted + JSON schema validated
- Vault issues short-lived dynamic DB creds for tools that need secrets
- Signed receipts create a tamper-evident audit chain
To Run Locally
cd inneri-secure/InnerI-Secure-Repodocker compose up --build# In another terminal - set up SDK:cd sdk-pythonpython -m venv .venv && source .venv/bin/activatepip install -e .python examples/01_secure_call.py
The example calls a demo_echo tool through the gateway and returns the output + a signed audit receipt.
Inner I Secure Repo on Github – https://github.com/BeeChains/inneri-secure
—
Buy Inner I a coffee β https://buymeacoffee.com/inneri
Listen Inner I
Inner I on Spotify β (https://open.spotify.com/artist/2Lqxd6wgx5MevmKYiIhP95?si=MZSPLS3HTuKD_Ge_TcJr6w)
Inner I on YouTube Music β (https://music.youtube.com/channel/UCduKiRQ6tEE0_fIbOuJc7Og?si=YpRrvV5o_CsCfLtn)
YouTube β (https://youtube.com/@innerinetwork)
Apple iTunes Inner I β (https://music.apple.com/us/artist/inner-i/1830903111)
TikTok Inner I β (https://www.tiktok.com/@innerinetwork?_r=1&_t=ZT-9240gNi0lGI)
Join DistroKid and save β (https://distrokid.com/vip/seven/10063411)
