Documentation

Install NovaFabric, capture a command into a Run Capsule without code changes, then validate, replay, diff and export it. Local-first, no account needed.

NovaFabric concepts: Run Capsules, zero-code capture, the five replay modes, structural diff, lineage, the Asset Registry and how signed evidence is made.

This guide is the working reference for the shipped nova command surface: what each command does, how to invoke it, and when to reach for it.

Every nova command in NovaFabric: capture an AI agent run as a Run Capsule, replay it, diff two runs, trace lineage and verify signed evidence offline.

• Accountability spine and energy commands
• nova capture, setup and adapter commands
• Collector binaries and HPC runners
• Compliance and audit export commands
• Dashboard commands
• Environment variables
• Evidence Fabric: schema, cost and storage commands
• Incident forensics, DSAR and event commands
• nova kg: the capsule knowledge graph
• Lineage and execution-graph commands
• MCP supply-chain risk scanner (nova mcp)
• Policy, approval and retention commands
• Offline query, search and drift commands
• Registry, prompt and promotion commands
• nova replay, diff and diagnose commands
• Server, storage and backup commands
• Trust, secret-scan and assurance commands

The README FAQ answers the ten questions people ask before trying NovaFabric: what it is, what a capsule is, whether it phones home, whether it is…

The nova serve dashboard server exposes 208 REST endpoints in the generated tables below, plus the 14 experimental routes in the next section that the…

This folder is the illustrated, as-built companion to the architecture overview.

An assurance case is a machine-checkable argument — in the GSN/SACM/CAE tradition — that a system meets a goal, where every claim ultimately rests on…

Every number here is reproducible with a command on this page. If you cannot re-run it, treat it as marketing, not measurement — including these.

An honest comparison of NovaFabric with Langfuse, LangSmith, MLflow, Weights & Biases and OpenTelemetry, including where NovaFabric is the wrong choice.

The dashboard is an opt-in local-only HTTP server (nova serve --experimental) that renders an interactive view over the same registry SQLite, lineage…

NovaFabric records every architectural decision as a numbered ADR (Architecture Decision Record).

Contributor guide to the NovaFabric codebase: local setup, quality gates, and how to add a CLI command, API endpoint, framework adapter or report format.

The load-bearing design decision, stated up front because it shapes every output: NovaFabric detects and evidences drift; it never rules on it.

The page for the person who has to say yes. You have been asked to evaluate NovaFabric for a team, and someone will ask you whether it is safe to depend…

Using NovaFabric to make a computational result reproducible, reviewable, and citable — and an honest account of what it does not solve.

Frontier-safety frameworks — Anthropic's Responsible Scaling Policy (ASL levels), OpenAI's Preparedness Framework, Google DeepMind's Frontier Safety…

When a human reviews, approves, or corrects what an AI agent does, an auditor later wants to know three things: what was the human shown when they…

Translations are real contributions and are credited exactly like code.

How to run NovaFabric alongside something else. Each guide is written against the integration's own source of truth and says plainly what it does not…

This document is the single source of truth for configuring NovaSeal: the novaseal.yaml config file, all environment variables, path resolution order…

This document covers the full key lifecycle for NovaSeal: generation, deployment, rotation, compromise recovery, and multi-region availability.

This document defines the NovaSeal API stability contract, breaking-change definition, and versioning policy.

This guide is for HPC system administrators and platform engineers who deploy NovaFabric on shared infrastructure — from a single workstation to a…

Everything you need to write about, present, or reference NovaFabric — without having to ask us first, and without having to guess at the facts.

NovaFabric is a CLI-first toolkit, but every capability the nova command exposes is also reachable as a typed Python API.

Every Alembic migration shipped in a release MUST be backward-compatible with the previous minor version's code (the N/N+1 window): additive changes…

This directory holds NovaFabric's public requests for comment — the deliberative record for non-trivial changes.

The SPKG turns the lineage a capsule already records into a security knowledge graph you can reason over: detect anomalous agent runs, answer "which runs…

Every published NovaFabric performance number lives here, and every number carries exactly one honesty status:

What NovaFabric implements, how to verify each claim yourself, and — kept deliberately prominent — what is not claimed.

This page is the single source of truth for which NovaFabric versions receive fixes, for how long, and what an upgrade promises.

Four read-only commands that turn a capsule's trust evidence into something a human can read at a glance: the Merkle proof tree, the trust-attestation…

Concepts — capsule structure, capture hook mechanism, replay modes, lineage edge types - CLI reference — every nova command with flags and examples…

This is a focused guide to one of NovaFabric's more intricate pieces. Read it if you run many captures on one node (a fleet, an HPC job array, a CI farm)…

nova capture writes capsules to local disk - nova serve reads them into Postgres on a single server - The lineage graph lives in that Postgres instance

By the end of this tour you will have exercised all five NovaFabric primitives — Asset Registry, Run Capsule, Replay, Lineage, and Evidence Bundle — and…

How nova capture records an agent's LLM calls at the HTTP layer without code changes, and what a captured call looks like in OpenTelemetry GenAI format.

How NovaFabric captures a multi-agent system depends entirely on whether the agents share one Python process or run as separate processes.

Where NovaFabric and Langfuse overlap and differ: monitoring how a system performs now versus Run Capsules you can replay, compare and verify later.

Seal a recorded AI agent run and export a signed Evidence Bundle that a third party can verify on their own machine, offline, months later.

A plain-English guide to why AI agent runs need replayable evidence, the five NovaFabric primitives, and five things you can do with the nova CLI.

NovaFabric ships a composite GitHub Action that captures a CI step as a Run Capsule and uploads it as a build artifact.

NovaFabric's capture surface ships with hooks for a small set of SDKs and protocols (OpenAI, Anthropic, MCP, plus the wire-level layer over httpx and…

Install and run NovaFabric with no internet access: offline installation, no telemetry or phone-home, and which opt-in features need a network endpoint.

How to back up and restore a NovaFabric deployment. The first half documents procedures that work today with standard tools; the second half covers the…

This guide walks through migrating a local-mode NovaFabric installation (SQLite + filesystem) to a cluster-scale deployment (Postgres + Object Capsule…

The dashboard's latency posture is enforced by a seeded benchmark, not by hope: tests/bench/test_dashboard_scale_gate.py seeds a deterministic 100…

A JurisdictionRoutingAdapter wraps your per-region WORM backends and routes each tenant's capsules to the backend registered for that tenant's…

This guide covers NovaFabric's optional application-layer envelope encryption for capsule payloads in the object capsule store (ADR-0185).

Symptom → diagnosis → action, for the operator on call for a NovaFabric deployment (nova server API, nova serve dashboard, or a local install).

This guide covers monitoring NovaFabric's own HTTP apps — the nova server REST API and the nova serve dashboard backend — with the self-observability…

This guide covers protecting a shared nova server deployment from noisy clients: in-process API rate limiting and warn-then-reject storage quotas…

This guide is for the administrator of a shared, multi-user NovaFabric deployment — the nova server REST API (/v0), not the single-operator nova serve…

This guide covers six deployment scenarios. Each scenario is labelled with its current implementation status per the docs honesty rule: works today…

How to size storage, memory, and CPU for a NovaFabric deployment — from a single laptop to a shared Postgres server.

How to upgrade a NovaFabric deployment from one version to the next — local SQLite installs and Postgres server mode — and what is honestly supported…

The migration kit (nova lineage-store migrate) rebuilds a lineage graph in a target SQLite lineage store. One source works from the CLI today:

A design partner is an organization that adopts NovaFabric in a real workflow before v1.0 and trades regular feedback for direct influence over the spec.

How merge rights are earned, what they commit you to, and how to step back.

NovaFabric uses a lightweight, Rust-style RFC process for non-trivial changes: GitHub-based, time-boxed comment windows, two approvers, and an…

This is not theoretical and not new. On a clean Postgres 16, with nothing but the shipped migration helper and the shipped store:

All three tiers read and write the same Run Capsule format. Moving up a tier is a deployment change, not a data migration.

The object capsule store can encrypt every capsule payload before it reaches the WORM backend. The whole feature is experimental and off by default.

Provenance: what did this run or artifact depend on? - Blast radius: what depends on this asset?

The split exists because a capsule is written once. Trace ingest can always create a fresh capsule.

NovaFabric is built from five primitives: Asset Registry, Run Capsule, Replay, Lineage and Evidence Bundle.

The five verbs are separate nova commands that all work on one capsule directory.

The five NovaFabric replay modes (forensic, mocked, semantic, exact and experimental intervention): what each reuses from the capsule and what runs live.

What a NovaFabric Run Capsule holds: the files written for one run, the schema they validate against, and how to copy, archive and verify the directory.

How a NovaFabric capsule becomes tamper-evident: the opt-in NovaSeal seal, signed Evidence Bundles, and the checks nova verify runs offline.

ADR-0228, authorization (experimental): every route has a required scope in one table, and a route missing from the table is denied to everyone.

This page covers three paths through the multi-user REST API (nova server, the /v0 routes).