"The agents propose. The environment provides evidence. The policy engine decides."
Hackathon Track: Fortified Enterprise Fleet (All Things Agentic Hackathon)
Most AI agents today operate on a primitive User Request -> LLM -> Output loop. They act as chatbots that blindly agree with the user. In an enterprise environment, an agent that hallucinates false confidence is dangerous.
Winjay transforms "Agent Intelligence" into a production-inspired reliability architecture. We replace the chatbot model with a strict Epistemic Architecture:
- Falsification Contracts: Instead of just guessing, the Researcher Agent must define exactly what would disprove its hypothesis.
- Real Deterministic Evidence: We don't trust LLM hallucinations for evidence. Falsifiers propose an investigation, but actual Python Adapters (e.g., Code Inspector) run the checks and output deterministic scores (-3 to +3).
- Deterministic Belief Engine: We stripped the LLM of its authority to make final decisions. A deterministic policy engine calculates the final epistemic confidence based on the true evidence ledger.
- Tamper-Evident Epistemic Ledger: Uses Google Firestore with Cryptographic Hash Chaining (
previous_hash+ payload =new_hash). It creates an unalterable, tamper-evident audit trail of the system's shifting beliefs. - Atomic Idempotency & Authenticated Webhooks: Firestore Transactions prevent race-conditions, and HMAC-SHA256 signatures prevent prompt injection via webhooks.
flowchart TD
%% Styling
classDef gcp fill:#4285F4,stroke:#fff,stroke-width:2px,color:#fff;
classDef gemini fill:#8E24AA,stroke:#fff,stroke-width:2px,color:#fff;
classDef db fill:#F4B400,stroke:#fff,stroke-width:2px,color:#fff;
classDef alert fill:#DB4437,stroke:#fff,stroke-width:2px,color:#fff;
classDef engine fill:#0F9D58,stroke:#fff,stroke-width:2px,color:#fff;
%% Nodes
Trigger["⚙️ Environment Delta (e.g., Code Commit)"]
API["🌐 HMAC Authenticated Gateway<br/>+ Atomic Idempotency"]:::gcp
subgraph Agentic Reasoning
R["🕵️ Researcher Agent<br/>(Outputs Falsification Contract)"]:::gemini
F["🛡️ Falsifier Agent<br/>(Proposes Investigation)"]:::gemini
end
subgraph Deterministic Environment
ADA["🔌 Code Inspector Adapter<br/>(Extracts Real Evidence)"]:::engine
BE["⚙️ Deterministic Belief Engine<br/>(Calculates Final State)"]:::engine
end
subgraph Core Infrastructure
DB[("🗄️ Tamper-Evident Epistemic Ledger<br/>(Firestore Hash Chain)")]:::db
end
subgraph Human-on-the-loop
Eval{"Confidence Score<br/>(0.0 - 1.0)"}
ActionAuto["✅ Auto-Action<br/>(High Confidence)"]
ActionEscalate["⚠️ Escalation Required<br/>(Uncertain / Ambiguous)"]:::alert
Human(("👨💻 Human Review"))
end
%% Flow
Trigger -->|X-Hub-Signature-256| API
API -->|1. Atomic Check| DB
API -->|2. Generate Hypothesis| R
R -->|Log Hypothesis & Contract| DB
R -->|Passes Contract| F
F -->|3. Proposes Attack| ADA
ADA -->|4. Generates Real Scored Evidence| BE
BE -->|5. Calculates Deterministic Score| DB
BE --> Eval
Eval -->|> 0.8 or < 0.2| ActionAuto
Eval -->|Between 0.2 - 0.8| ActionEscalate
ActionEscalate --> Human
- AI Model: Gemini 3.5 Flash (via Google AI Studio)
- Framework: FastAPI (Python)
- Database (Memory Bank): Google Cloud Firestore (Tamper-Evident Hash Chain)
- Governance: Deterministic Policy Adapters
- Python 3.10+
Clone the repository and install dependencies:
git clone https://github.com/wijaywi/WinjayAgent.git
cd WinjayAgent/backend
pip install -r requirements.txtSet your Gemini API Key in your terminal: Windows (PowerShell):
$env:GEMINI_API_KEY="YOUR_GEMINI_API_KEY"Start the Event-Driven infrastructure:
uvicorn main:app --host 127.0.0.1 --port 8080In a separate terminal, simulate a webhook trigger (e.g., a code commit removing a JWT check):
$body = @{
repository = "org/core-auth"
commit_id = "a1b2c3d4"
changes = "Removed JWT expiry check from middleware."
} | ConvertTo-Json
Invoke-RestMethod -Uri "http://127.0.0.1:8080/webhook/environment-delta" -Method Post -Body $body -ContentType "application/json"Observe the system reject LLM hallucination and deterministically calculate the epistemic score based on real evidence!
