How bommidenihasini/fuse works
Fuse is a synthetic MVP that guards autonomous-agent model and tool invocations with a policy gate, prevents disallowed calls from reaching execution, and preserves ordered audit evidence. The main workflow is dashboard request → HTTP API → scenario runner → enforcement and policy evaluation → persistence → run and event views. The dashboard also exposes policy and architecture information. README documents planned AWS components; source excerpts are partial, so those deployment links are shown separately and dashed.
Main entry points: fuse-stack.ts AWS stack definition · api.ts API client · app.ts API router · types.ts Repository interface
Components 22
Dashboard
- Dashboard
apps/dashboard/src/App.tsx - API client
apps/dashboard/src/lib/api.ts - Run and audit views
apps/dashboard/src/pages/RunPage.tsx - Policy and architecture views
apps/dashboard/src/pages/PoliciesPage.tsx
API control
- HTTP server
packages/api/src/server.ts - API router
packages/api/src/app.ts - Demo policies
packages/api/src/policies.ts
Run enforcement
- Scenario runner
packages/runner/src/runner.ts - Synthetic actions
packages/runner/src/synthetic.ts - Pre-call enforcement
packages/enforcement/src/fuse.ts - Policy evaluation
packages/policy-engine/src/evaluate.ts - Domain contracts
packages/contracts/src/types.ts
Persistence
- Repository interface
packages/persistence/src/types.ts - In-memory store
packages/persistence/src/in-memory.ts - DynamoDB adapter
packages/persistence/src/dynamodb.ts
Planned AWS
- AWS stack definition
infra/lib/fuse-stack.ts - API Gateway
- Lambda
- DynamoDB
- EventBridge
- CloudWatch
Other components
- Operator
Connections 22
- Operator → Dashboard: starts run
- Dashboard → API client: requests data
- API client → HTTP server: sends HTTP
- HTTP server → API router: dispatches request
- API router → Demo policies: looks up policy
- API router → Scenario runner: starts scenario
- Scenario runner → Pre-call enforcement: checks invocation
- Pre-call enforcement → Policy evaluation: evaluates policy
- Pre-call enforcement → Repository interface: reads and records
- Scenario runner → Synthetic actions: executes allowed action
- Repository interface → In-memory store: stores run and events
- Repository interface → DynamoDB adapter: adapts persistence
- API router → Repository interface: reads run and events
- API client → Run and audit views: provides run data
- API client → Policy and architecture views: provides policy data
- Run and audit views → Operator: shows audit timeline
- Policy and architecture views → Operator: shows controls
- AWS stack definition → API Gateway: configures routes
- AWS stack definition → Lambda: defines functions
- AWS stack definition → DynamoDB: defines tables
- AWS stack definition → EventBridge: defines event bus
- AWS stack definition → CloudWatch: defines logs