
Security News
Microsoft Releases Open Source Toolkit for AI Agent Runtime Security
Microsoft has released an open source toolkit for enforcing runtime security policies on AI agents as adoption accelerates faster than governance controls.
@ai-operations/spark-engine
Advanced tools
SPARK engine — Self-Perpetuating Adaptive Reasoning Kernel with predict/learn feedback loop, awareness, and conversational reasoning
Self-Perpetuating Adaptive Reasoning Kernel — A closed feedback loop that makes CORD safety scoring learn from outcomes.
Most AI safety systems use static rules. SPARK closes the loop: Predict → Act → Measure → Learn.
Step arrives → Predictor predicts outcome → CORD scores (with learned weights)
↓
Step executes
↓
LearningCore compares ← OutcomeTracker measures
↓
WeightManager updates (bounded by SENTINEL)
Before each step, predicts the CORD score, expected outcome, and confidence.
import { Predictor } from '@ai-operations/spark-engine';
const predictor = new Predictor(sparkStore);
const prediction = predictor.predict(stepId, runId, 'gmail', 'send');
// { predictedScore: 35, predictedOutcome: 'success', confidence: 0.72 }
After execution, measures what actually happened.
import { OutcomeTracker } from '@ai-operations/spark-engine';
const tracker = new OutcomeTracker(sparkStore);
const outcome = tracker.measure(step, runId, wasApproved);
// { actualOutcome: 'failure', signals: { succeeded: false, hasError: true } }
Compares prediction to reality and adjusts weights.
import { LearningCore } from '@ai-operations/spark-engine';
const core = new LearningCore(sparkStore);
const episode = core.learn(prediction, outcome);
// { adjustmentDirection: 'increase', reason: 'CORD scored 15 but action failed' }
Wraps CordSafetyGate with learned weight multipliers.
import { AdaptiveSafetyGate } from '@ai-operations/spark-engine';
const gate = new AdaptiveSafetyGate(cordGate, weightManager);
const result = gate.evaluateAction('gmail', 'send', input);
// score adjusted by learned weight, decision may change
MIT
FAQs
SPARK engine — Self-Perpetuating Adaptive Reasoning Kernel with predict/learn feedback loop, awareness, and conversational reasoning
We found that @ai-operations/spark-engine demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Microsoft has released an open source toolkit for enforcing runtime security policies on AI agents as adoption accelerates faster than governance controls.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.