How mazinmarji/nornyx works
Nornyx is a vendor-neutral governance contract language and runtime for AI software delivery. The main workflow is to author or scaffold a .nyx contract, parse and check its governed inputs, generate control artifacts, and use revision-bound authorization and evidence validation where needed. Drift, workspace checks, context building, and package scanning provide additional assurance branches. Paths and links reflect the README, tree, and sampled source; several feature internals were not sampled, so their wiring is shown only where documented.
Main entry points: cli.py CLI · authz.py Authorization engine · versions.py Locks and revisions · parser.py Contract parser
Components 23
Contract processing
- Contract parser
nornyx/parser.py - Contract model
nornyx/schema_model.py - Contract checker
nornyx/checker.py - Profiles
nornyx/profiles.py
Control artifacts
- Artifact generator
nornyx/generator.py - Tool control files
- Context builder
nornyx/context_builder.py - Provenance context pack
Revision governance
- Governance runtime
nornyx/governance/runtime.py - Locks and revisions
nornyx/governance/versions.py
Authorization runtime
- Authorization engine
nornyx/agentic/authz.py - AuthZEN mapping
nornyx/agentic/authzen.py - Evidence validation
nornyx/governance/evidence_validation.py - Evidence recorder
nornyx/agentic/authz.py
Assurance tools
- Artifact drift checks
nornyx/generation_drift.py - Workspace checks
nornyx/workspace.py - Governed package scanner
nornyx/package_scanner.py - Package inventory
nornyx/governed_package.py
Other components
- Project engineer
- CLI
nornyx/cli.py - External policy engine
- External PEPs and runtimes
- Runtime-event evidence
Connections 23
- Project engineer → CLI: invokes
- CLI → Contract parser: loads contract
- Contract parser → Contract model: produces model
- CLI → Contract checker: checks contract
- Contract checker → Contract model: validates
- CLI → Profiles: scaffolds from
- CLI → Artifact generator: generates artifacts
- Artifact generator → Tool control files: writes
- CLI → Context builder: builds context
- Context builder → Provenance context pack: produces
- CLI → Governance runtime: resolves governance
- Governance runtime → Locks and revisions: binds revision
- Authorization engine → Locks and revisions: verifies lock
- AuthZEN mapping → Authorization engine: maps requests
- External policy engine → External PEPs and runtimes: returns decision
- Authorization engine → External PEPs and runtimes: supplies decision
- External PEPs and runtimes → Evidence validation: supplies evidence
- Evidence validation → Locks and revisions: checks revision
- Evidence recorder → Runtime-event evidence: records intents
- CLI → Artifact drift checks: checks generated drift
- CLI → Workspace checks: checks workspace
- CLI → Governed package scanner: scans package inputs
- Governed package scanner → Package inventory: builds inventory