A deterministic runtime for secure multi-agent language model systems.
Harmukh is a Rust runtime that enforces capability-based authorization for multi-agent LLM applications. Instead of relying on language models to follow safety instructions, Harmukh performs authorization in a deterministic, memory-safe runtime.
The accompanying paper describes the architecture, security model, and evaluation:
Amir Hameed Mir. Harmukh: A Deterministic Runtime for Secure Multi-Agent Language Model Systems. arXiv, 2026.
- Deterministic multi-agent runtime
- Capability-based authorization
- Event-sourced execution with tamper-evident audit logs
- Role-based agent isolation
- Constitutional policy enforcement
- Deterministic replay from recorded execution traces
Human
│
Director
│
Plan Critic
│
Research Workers
│
Capability Engine
│
Auditor
│
Content Worker
│
External Manager
All agent communication occurs through an event bus. Every state transition is recorded in an append-only, hash-linked event log.
- Rust 1.75+
- OpenRouter API key
git clone https://github.com/sirraya-labs/harmukh.git
cd harmukh
cargo build --releaseSet your API key:
export OPENROUTER_API_KEY=YOUR_API_KEYRun with the default model selection:
cargo run --releaseOr specify a model:
cargo run --release -- --model openai/gpt-oss-20bRun the test suite:
cargo testTests cover runtime components including:
- Capability enforcement
- Event bus
- Effect closure computation
- Constitution validation
- Response caching
- Constraint enforcement
src/
├── lib.rs
├── main.rs
└── models.rs
The experiments reported in the paper were performed using Harmukh v0.3.0.
To reproduce them:
git checkout v0.3.0
cargo build --release
export OPENROUTER_API_KEY=YOUR_API_KEY
cargo run --release@article{mir2026harmukh,
title={Harmukh: A Deterministic Runtime for Secure Multi-Agent Language Model Systems},
author={Mir, Amir Hameed},
year={2026}
}Source-available. See the LICENSE file for details.
Amir Hameed Mir
Sirraya Labs
amir@sirraya.org