
Product
Microsoft Teams Notifications Are Now Available in Socket
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.
@beyondnet/evolith-agent-runtime
Advanced tools
Evolith Agent Runtime — decoupled agentic layer that operates Evolith Core through Ports & Adapters (.harness, Core Evaluation, OPA, Tracker, Memory, Scheduler, Hermes). Hexagonal; no runtime/LLM technology is a domain dependency.
Bilingual Navigation: Versión en Español
Evolith Agent Runtime — a decoupled agentic layer that operates Evolith Core
through Ports & Adapters (Hexagonal Architecture). It orchestrates, remembers,
validates and executes Core capabilities through ports. It does not replace
.harness (the official governed executor) and does not depend on Hermes or
any LLM framework (those are optional, replaceable adapters).
Architecture docs: reference/core/architecture/foundations
· Decision: core/ADR-0102.
This package is part of the Evolith monorepo workspaces. Build it with the rest
of the graph (npm run build at the root) or standalone:
npm --workspace @beyondnet/evolith-agent-runtime run build
npm --workspace @beyondnet/evolith-agent-runtime test
import { createAgentRuntime, parseAgentRuntimeRequest } from '@beyondnet/evolith-agent-runtime';
const { runtime, deps } = createAgentRuntime(); // safe stub/in-memory adapters
const result = await runtime.handle(parseAgentRuntimeRequest({
intent: 'validate_discovery_gate', tool: 'validate-discovery-gate',
tenant: 'acme', initiative: 'init_001', phase: 'discovery', gate: 'prd_readiness',
parameters: { requiredArtifacts: ['prd'], presentArtifacts: ['prd'] },
}));
A runnable example: examples/validate-discovery-gate.mjs.
The package is hexagonal: domain (contracts, ports, tokens), application
(the orchestration service + pure mappers), adapters (concrete tech), and a
bootstrap factory. No framework or LLM is a domain dependency.
IAgentRuntime, IHarnessPort, ICoreEvaluationPort, IPolicyValidationPort,
ITrackerTracePort, IMemoryPort, ISkillRegistryPort, ISchedulerPort,
ICommunicationGatewayPort, IApprovalPort, IAgentEnginePort.
Defaults are in-memory/stub. Real adapters: HarnessProcessAdapter (reads
.harness/manifest.yaml), OpaCliPolicyValidationAdapter,
HttpTrackerTraceAdapter, InProcessCoreEvaluationAdapter /
HttpCoreEvaluationAdapter (run the real stateless Core, in-process or over the
Core API), FileSchedulerAdapter / FileMemoryAdapter (durable, file-backed),
and HermesAgentAdapter (optional engine).
This package follows SemVer. The public surface is the three subpath exports
declared in package.json — . (main), ./ports, and ./adapters. The
public-surface.spec.ts guard freezes the runtime value surface of . and
./adapters, so adding, removing or renaming a public export is a deliberate,
reviewed change.
./ports is a type-only surface (port interfaces + canonical contract
types). It is frozen at the type level — the consumer's tsc is the guard.schemaVersion on EvaluationResult (and any other versioned contract)
is independent of the package version: it is bumped only on an
incompatible change to that contract's shape, never for additive fields.@deprecated (naming its
replacement) for at least one minor before removal; a removal or rename ships
in a major, additive exports ship in a minor.npm run build # tsc -> dist/
npm test # jest
npm run example:discovery-gate # run the end-to-end example (after build)
FAQs
Evolith Agent Runtime — decoupled agentic layer that operates Evolith Core through Ports & Adapters (.harness, Core Evaluation, OPA, Tracker, Memory, Scheduler, Hermes). Hexagonal; no runtime/LLM technology is a domain dependency.
The npm package @beyondnet/evolith-agent-runtime receives a total of 32 weekly downloads. As such, @beyondnet/evolith-agent-runtime popularity was classified as not popular.
We found that @beyondnet/evolith-agent-runtime demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.

Security News
Socket CTO Ahmad Nassri joins AppSec leaders at Black Hat to discuss active malware, package manager risks, and software supply chain defense.