
Security News
PHP Foundation Says Chainguard Broke Security Embargo Ahead of Emergency Patches
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.
iterate-kernel
Advanced tools
iterate ecosystem shared kernel: schemas, the evidence->decision transcription, the decision-log audit chain and public validators. Verification reasoning stays in the engine; this layer transcribes.
The iterate ecosystem's shared semantic kernel: schemas, the evidence → decision transcription, the decision-log audit chain, and public validators.
What it is not. It carries no verification reasoning. Judging whether a claim is true belongs to the engine that produced the evidence; this package transcribes what that engine already decided, so that every shell in the ecosystem speaks the same language instead of each inventing its own.
npm install iterate-kernel
import { decisionOutcomeFromEvidence } from "iterate-kernel/evidence-decision"
import { appendDecisionEntry } from "iterate-kernel/decision-log"
import { parseEvidencePack } from "iterate-kernel/parse"
Each module is its own subpath export. Importing the barrel (iterate-kernel) also pulls
in schemas, which reads the JSON Schema files next to the package at load time — fine in a
repository, but a runtime file read is a trap for anyone bundling to a single file. The
subpaths avoid it, and they keep a consumer's dependency on this package as narrow as the
APIs it actually uses.
| Module | What it is for |
|---|---|
evidence-pack / parse | the evidence pack shape, and parsing/validating one |
evidence-decision | the transcription: evidence (attribution level, circuit-breaker level, pass/fail/inconclusive) → a decision outcome and a human summary. It reads fields the engine already decided; it never infers. |
decision-log-entry / decision-log | the append-only decision-log entry and the opID ↔ entry hash chain that makes it auditable |
errors / schemas / canonical-json / recipe-config | KernelSchemaError, the JSON Schemas, canonical serialisation, recipe validation |
0.1.x is pre-stable. The schemas and the transcription rules are the contract every
consumer depends on, so a change to either is a minor-version change at minimum, and the
fixtures in fixtures/ are the executable statement of what the contract means.
Vendored or installed, a consumer's kernel is one of two things, and the difference is a distribution decision rather than a semantic one:
Either way, run the fixtures: they are how you find out that the kernel you have is not the kernel you think you have.
FAQs
iterate ecosystem shared kernel: schemas, the evidence->decision transcription, the decision-log audit chain and public validators. Verification reasoning stays in the engine; this layer transcribes.
The npm package iterate-kernel receives a total of 209 weekly downloads. As such, iterate-kernel popularity was classified as not popular.
We found that iterate-kernel demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.

Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.

Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.