AP-SOUTHEAST-1 · SINGAPORE RUNTIME

Deterministic runtime infrastructure for autonomous agents.

Cryptographic session guardrails, append-only execution ledgers, and zero-trust DAG orchestration across local developer workstations and cloud clusters.

Contact engineering

● SEALED

Regionap-southeast-1

TransportTLS 1.3 / AEAD

AdmissionFail-Closed

Ledgersha256:8f3c..91a2

p99 Latency14.8 ms

Adapters: Claude-Code · Codex · HAPI · OpenClaw

Built on strict operational invariants

Autonomous coding and operations agents fail when state drifts silently. DT-Linker enforces deterministic verification before a single packet or process leaves the host.

Append-only execution ledger

Every round, tool call, and verification gate is committed as an immutable snapshot. Completed nodes and frozen topological edges cannot be retroactively rewritten, eliminating split-brain state across long-horizon agent workflows.

ledger.commit({ round: 14, node: "verifier_gate", carryover: "summary_only", state: "SEALED" })

Fail-closed pre-flight admission

Seccomp sandbox availability, token consistency, and egress route integrity are verified before process spawn. Any mismatch aborts execution immediately rather than degrading silently.

exit_code: 78 (ADMISSION_REFUSED)

Role-scoped memory isolation

Builder nodes retain structured conclusion carryover for session continuity, while independent judge and verification nodes run in stateless clean rooms to prevent confirmation bias.

judge_node: { carryover: false }

Decoupled async lease multiplexing

Unbounded model execution never runs inside lock-holding transactions. DT-Linker dispatches heterogeneous CLI and WebSocket workers with independent heartbeats and automatic token-drift recycling.

dt-linker start --adapter claude,codex,openclaw --verify-egress strict

Runtime specifications

Designed for engineering organizations running high-autonomy agent fleets across local macOS/Linux workstations and isolated cloud sandboxes.

01 / Admission & Identity

Token-pinned adapter lifecycle

Runtime adapters compare active profile tokens prior to short-circuiting and recycle stale daemons automatically.

Hardware enclave virtualization

Per-workspace hardware UUID isolation prevents cross-tenant telemetry correlation.

02 / DAG Orchestration

Deterministic self-repair loops

Hard validation failures serialize into structured facts for bounded self-correction with zero-progress detection.

Explicit truncation contracts

Oversized context blocks are marked with explicit raw references rather than silently truncated.

03 / Transport & Security

Dual-layer TLS 1.3 egress

All outbound agent traffic traverses pinned HTTP CONNECT over TLS tunnels with zero non-proxied UDP leakage.

Seccomp script sandboxing

Untrusted automation nodes execute inside dedicated worker queues with kernel-level syscall filtering.