
Security News
GPT-6 Astra Attempts Supply Chain Attacks Against Open Source Maintainers in Testing
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.
@getbourdon/participants
Advanced tools
Bourdon participants — the external-agent → L5 reader layer (BUSL-1.1). Each participant normalizes a foreign agent's native memory store into a visibility-filtered, redacted L5 manifest: read-only SQLite readers (better-sqlite3 mode=ro: hermes), file/con
The external-agent → L5 reader layer of Bourdon (BUSL-1.1).
A participant normalizes a foreign agent's native memory store into a visibility-filtered, redacted L5 manifest. It is the bridge between an agent's private, vendor-specific state and the cross-machine federation library.
Python (pip install bourdon) is the oracle; this TS mirror asserts against the
@getbourdon/conformance native_stores fixtures (output shape only).
| Reader | Category | Native store |
|---|---|---|
HermesParticipant | SQLite (read-only) | ~/.hermes/ — state.db sessions + memories/*.md |
ClaudeCodeParticipant | file / convention | ~/agent-brain/ + ~/.claude/projects/*/memory/ + KG JSONL |
GitHubCopilotParticipant | network (TTL cache) | api.github.com PR activity → ~/.cache/bourdon/github-copilot/ |
The heavier SQLite readers (cursor, codex, copilot_cli) are deferred to
the follow-on slice; openclaw ships as the @getbourdon/openclaw plugin.
ClaudeCodeParticipant resolves its knowledge repo in this order: the
AGENT_BRAIN env var, then $HOME/agent-brain/, then ./agent-brain/. The
pre-rename env var (CLAUDE_BRAIN) and the pre-rename directory name are still
accepted as legacy aliases at each tier, so a checkout that predates the
rename keeps resolving with no operator action.
filterForFederation; private_tags always win. A PRIVATE entity never lands
in a manifest.exportL5 — same store → byte-identical
toDict (L6 hashes it for change detection).healthCheck NEVER throws — a diagnostic must never crash bourdon doctor.@getbourdon/redaction before it enters L5.import { discoverParticipants, toDict } from "@getbourdon/participants";
for (const p of discoverParticipants()) {
const health = p.healthCheck(); // never throws
if (health.status === "blocked") continue;
const manifest = p.exportL5(); // visibility-filtered, redacted, deterministic
console.log(p.agentId, toDict(manifest));
}
Discovery is a static registry (FIRST_PARTY), not a filesystem package
scan — it preserves the Python oracle's agentId-sorted output, first-wins
dedupe, and log-and-skip-on-construction-failure resilience. Third-party plugins
are gated behind BOURDON_PLUGINS=1 (a no-op stub today).
The SQLite readers use better-sqlite3,
a native addon. It is loaded lazily: if the addon fails to build on a given
toolchain, sqliteAvailable() returns false, the SQLite readers degrade
gracefully, and the rest of the package (file + network readers) keeps working.
The SQLite-reader parity tests are gated on sqliteAvailable().
BUSL-1.1 — see LICENSE and LICENSE_FAQ.md.
FAQs
Bourdon participants — the external-agent → L5 reader layer (BUSL-1.1). Each participant normalizes a foreign agent's native memory store into a visibility-filtered, redacted L5 manifest: read-only SQLite readers (better-sqlite3 mode=ro: hermes), file/con
The npm package @getbourdon/participants receives a total of 38 weekly downloads. As such, @getbourdon/participants popularity was classified as not popular.
We found that @getbourdon/participants demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.