◆ novafabric v0.108.0 · experimental

Replay and audit AI agent runs.

The time machine for AI systems.

Replay and evidence infrastructure for AI agents. Capture executions as portable Run Capsules you own — then replay, compare, trace, and verify them. Self-hosted and local-first. Evidence you can replay.

$ pip install novafabric
$ nova capture python my_agent.py
$ nova replay <capsule> --mode forensic
$ nova diff <capsule-a> <capsule-b>
$ nova verify <capsule> # once sealed

Python 3.12+ · Apache-2.0

nova — bash · illustrative output
$ nova capture python agent.py
‥
model-calls.jsonl ✓ 6 LLM calls
tool-calls.jsonl ✓ 3 tool calls
env.lock ✓ environment
run capsule 01HXAY7M5JZ8… written
$ nova replay 01HXAY7M5JZ8… --mode mocked
model replies served from the capsule · tools run live
$ nova diff <run-a> <run-b>
aligned 1 · changed 1 · added 0 · removed 0

01

Your agent ran for 3 hours.

It failed at step 47. You have no idea why.

02

nova capture wraps any command.

The environment, plus the model calls and tool exchanges capture can see — recorded.

$ nova capture python agent.py

03

The Run Capsule is the artifact you keep.

Portable. Replayable. Sealable with your own key.

  • trace.jsonl ✓ 1,203 spans
  • model-calls.jsonl ✓ 6 LLM calls
  • env.lock ✓ environment snapshot

04

Replay. Compare. Verify.

Reopen a past run. Compare it with another. Verify a sealed record. Evidence you can replay.

$ nova replay <run-id> --mode forensic

the artifact

A trace is a view of a run.
A Run Capsule is an artifact you keep.

A NovaFabric Run Capsule is a portable execution-evidence artifact you own. Capture a run once; replay it, compare it with another, and — if you seal it with your own key — verify later that it has not changed.

NovaFabric Run Capsule · illustrative
RUN
01HXAY7M5JZ8R7K4P9DPBYK2WX
TIME
2026-10-08T09:14:02Z
MODEL
gpt-4o-mini · 6 calls captured
TOOLS
3 tool calls captured
HASH
sha256:4f8a1c2e…9b07
STATUS
UNSEALED · SEALABLE
REPLAY · DIFF · VERIFY
Execution to Run Capsule, then two journeysAn execution becomes a Run Capsule. From the capsule, the developer journey runs Replay, Diff, Debug; the trust journey runs Seal, Verify, Audit.ExecutionRun Capsulethe artifact you keepReplayDiffDebugDEVELOPER · what happened, what changed?SealVerifyAuditTRUST · can I preserve and verify it later?

01 / THE SYSTEM

One fabric. Six domains of evidence.

NovaFabric is not a single tool — it's a coordinated system across six domains: capture, an evidence model, analysis, cryptographic trust, governance, and serving. Every piece composes.

5replay modes
280+decision records
1,000+test files
83subpackages
11framework adapters (experimental)
Apache-2.0open source
Capture

Wrap any command. No code changes.

  • Framework Adapters
  • Multi-Target Runners
  • Capture Orchestrator
  • Wire-Level Hooks
  • Secret Scanner
Evidence model

The portable, self-contained unit of record.

  • Run Capsule
  • Event Envelope v1
  • Evidence Fabric
  • Capsule Schemas
Analyze

Replay, diff, trace lineage, evaluate.

  • Replay Engine
  • Diff Engine
  • Lineage Graph
  • Eval Suites
  • Knowledge Graph
Trust

Seal with your key (opt-in), verify offline.

  • NovaSeal Signing
  • Evidence Bundle
  • Merkle Log
Govern

Policy gates, approvals, compliance.

  • Promotion (Maker-Checker)
  • Policy Engine (OPA)
  • Compliance & Export
  • Governance & Judge
  • Asset Registry
Serve

Multi-user API, dashboard, topology.

  • Storage Layer
  • Server (REST API)
  • Dashboard
  • Live Topology
11 framework adapters (experimental)LangGraphAutoGenCrewAIDSPyOpenAI AgentsGoogle ADKBedrock AgentCoreA2ALlamaIndexPydantic AIHaystack

paper/

NovaFabric: Tamper-Evident, Replayable Evidence for Autonomous AI Agent Runs

Mohsen Seyedkazemi Ardebili · arXiv:2609.12582, September 2026 · doi:10.48550/arXiv.2609.12582 · software archive: doi:10.5281/zenodo.22997388

Also: the technical overview, second edition, arXiv:2610.34594 (October 2026). See all publications.

research/
active areas

What NovaFabric
is building.

Six active research and engineering areas, each labeled with its current maturity. Labels come from the NovaFabric source-of-truth docs and are updated only when evidence changes.

no capability uses stable until v1.0 schema freeze

experimental

Evidence + replay layer

Local-first run capsules for capture, replay, diff, validation, and audit workflows. CLI capture, SDK decorator, API/MCP proxy, and OTel GenAI semconv all captured.

capturereplaydiffaudit
experimental

NovaSeal trust layer

Tamper-evident DSSE/RFC 3161 sealing in local profile. Cryptographic SoD enforced. Enterprise HSM/X.509 PKI not claimed.

signingDSSERFC 3161
experimentalprototype

Lineage and provenance

SQLite lineage is experimental (10M-edge KuzuDB benchmark done). KuzuDB backend is prototype. Lineage federation is experimental with legal review pending.

lineageKuzuDBprovenance
all research areas →
capsules/
examples

Example runs.
Example capsules.

These are example capsules, not third-party deployments. Each snippet is read from the capsule files at build time; capture your own with nova capture.

submit your capsule →
01

minimal agent run

A real capture committed to the NovaFabric repository: examples/minimal-agent-run/agent.py run under nova capture, with no code changes. It makes no model or tool calls, so it shows the files a capture writes for any command: the manifest, the trace, the environment lock, the replay policy and the secret-scan record.

repository examplepythonno code changes
view repo ↗
$ nova capture python examples/minimal-agent-run/agent.py
run_id 01KR2E9P1TRANFT6EP0JAMTTQM
capsule.yaml ✓ status success, written by novafabric 0.2.0
trace.jsonl ✓ 1 span
model-calls.jsonl ✓ 0 model calls
tool-calls.jsonl ✓ 0 tool calls
env.lock ✓ host, interpreter, packages
replay.yaml ✓ replay policy
redaction-proof.json ✓ secret-scan record
02

code-review agent · demo fixture

The capsule the in-browser demos on this site read: a code-review agent with 2 model calls and 2 tool calls, its trace, and the input diff and output review its manifest references. It is a showcase fixture in the Run Capsule format, not a recording of a real run.

demo fixturemodel callstool calls
view repo ↗
command python review.py --diff examples/sample.diff
run_id 01KR5SQZPDGTKE3MDP3ZRX8WP1
capsule.yaml ✓ status success, written by novafabric 0.6.12
trace.jsonl ✓ 5 spans
model-calls.jsonl ✓ 2 model calls
tool-calls.jsonl ✓ 2 tool calls
Using novafabric on your project?

Open a PR on GitHub — add your capsule snippet to the showcase.

packages/
standalone tools

Standalone tools
in the ecosystem.

⬟
nova-worm-conformance
Python · 0.1.0
○ experimental

Behavioral test suite verifying object storage backends meet WORM requirements. 11 mandatory test cases covering immutability, retention locks, legal holds, lifecycle exemptions and checksum integrity. Tests object-store behavior against the requirements these rules describe; not a compliance certification.

SEC 17a-4MiFID IICFTC 1.31FINRA 4370
$pip install "git+https://github.com/MSKazemi/novafabric#subdirectory=packages/nova_worm_conformance"
⬡
nova-collector
Go · experimental
○ experimental

Cluster-scale OpenTelemetry collector for capsule events, spans, and metrics. Deployable to Kubernetes via DaemonSet or SLURM via prolog/epilog. Requires Go 1.26.5+.

OpenTelemetryKubernetesSLURMHPC
$git clone https://github.com/MSKazemi/novafabric && cd novafabric/collector && go build ./cmd/novafabric-collector
⊞
nova-dashboard
TypeScript · experimental
○ experimental

Web UI for capsule inspection, lineage visualization, and asset registry browsing. Ships embedded in nova serve. 30 tabs in 7 workflow groups (experimental).

React 19Astro 7Tailwind v4
$nova serve --experimental
about/
mission & principles

Keep the run.
Keep the evidence.

AI agents call models, tools, files, and APIs across environments that keep changing. When an important run fails or is questioned later, the output alone is not enough to explain what happened.

NovaFabric captures those executions as portable Run Capsules so teams can replay, compare, trace, and verify past behavior without making a hosted dashboard the only record of what happened.

Open source. Apache-2.0. Self-hosted. No account required. No telemetry.

◈

Portable by design

Run Capsules are portable directories designed to remain inspectable without a hosted service as the system of record.

◉

Non-invasive capture

Supported SDK and transport hooks can capture agent executions without requiring application code changes.

⬡

Evidence-grade integrity

Sealing is opt-in: with your own key, a capsule gets a cryptographic signature (and, if you configure one, an RFC 3161 timestamp) so integrity can be checked later. NovaFabric provides evidence, not compliance certification.

⟶

Scale from laptop to cluster

SQLite for local development. Postgres + RBAC for multi-user server mode. Go collector for SLURM/Kubernetes cluster deployments.

roadmap
v0.1·Asset Registry
v0.2·Run Capsule + Capture
v0.3·Replay + Diff
v0.4·Lineage Graph
v0.5·MCP Capture
v0.6·Wire-level + Multi-target
v0.7·Server Mode + RBAC
v0.8·Policy + Approval Gates
v0.9·Standard Eval Suites
v0.10·NovaSeal + KuzuDB v2
v0.11·Dashboard (13 tabs)
v0.12·Asset Intelligence
v0.13·Maker-Checker Dual Approval
v0.14·NovaSeal Chain Signing
v0.15·Distributed Capsule Runtime
v0.16·Governance + Audit Framework
v0.17·Evidence Fabric + 3D Topology
v0.18–0.19·Dashboard Parity
v0.20–0.21·ClickHouse Cost + Topology
v0.22–0.23·Ed25519 + OAS v1.0 Spec
v0.24·B-Tier Feature Completeness
v0.32·Compliance Exporters + AIBOM
v0.49·SOTA Gap-Closure Waves
v0.61·Cluster Event Bus (NATS)
v0.80·KG Ingestion + Lineage Backends
v0.96·TypeScript SDK + Taxonomy Reconciliation
v0.104·Secret-Scan Coverage + Cross-Capture Diff
v1.0·Schema freeze + Production→