IDE Command Center
MSGF Pulse Guard sidebar: connection health, prompt optimizer, Run Scripts, Safe Build (async preflight), and advanced heal ops in Cursor or VS Code.
Capabilities · shipped
Elite governance& zero re-prompt verify
Prefrontal cortex for AI with six pillars, IDE verify loops, Grok-aware model presets, Sentry→Vault quarantine, DocuSign / Dropbox Sign, and quantum-ready hybrid vault envelopes — configure integrations when you go live; panels degrade cleanly until then.
01
Connect
Map project_origin · msgf_ide_* token · Command Center health goes green.
02
Optimize
0-token prompt with @-attachments and mandatory verify rules — local SOLO_FAST only.
03
Verify
Run Scripts or Safe Build · pass → Vault · repeat fail → Hall · deploy-gate.
04
Govern
Small Brain dual presets · TRI Big Brain on high drift · Shadow→Active gateway · Sentry quarantine · signed HITL.
Vault · Hall verify loop
Allowlisted execFile runs sync pass to verify-result and fail to dev-event. Learning accrues without burning Big Brain on every build — then unlock deploy-gate.
Model presets + Grok
Pick your Small Brain pair: Claude+Gemini (default), Claude+Grok, or Gemini+Grok. Big Brain uses TRI majority (Claude + Gemini + Grok) when drift is high — humans notify only above the high-drift threshold.
Defensible token savings
Metered provider usage, proven avoidance (not estimates), weekly/monthly Reports + PDF, and Shadow Proxy projected $ kept separate from public eco.
Shadow Proxy → Active Governance
Point OpenAI or Anthropic SDKs at /api/v1. Shadow mode proves projected bill savings with zero added latency; Active mode applies cache, state-gating, and sharded prompts — license-bound auth, never spoofable tenant headers.
Sentry → Vault quarantine
Sentry crashes match Vault wins and mark them QUARANTINED (no silent auto-Hall). Ops restore or demote on /admin/ops — runtime monitoring links to governance memory.
E-sign + Workspace SSO
Team invites via DocuSign or Dropbox Sign, company domains, and Google Workspace SSO. Signing webhooks and ops panels ship ready — configure keys when you go live.
Platform & enterprise
TRI majority CONVERGE
Optional T1→T3 cost ladder for risk paths. Platform Big Brain: Claude + Gemini + Grok majority when enabled. Model splits alone no longer force HITL when majority agrees.
Signed HITL audits
Skip-MSGF and ARBITRATE decisions leave HMAC-signed, hash-chained snapshots — a compliance-ready trail of who approved what on /admin/ops.
Deploy gate
CI checks GET /api/msgf/deploy-gate for your project_origin. Ship only when verify is green for that silo.
Compound tenant isolation
Every vector scoped by project_origin + subpath — agencies and monorepos keep client and app memory from bleeding across silos.
Quantum-ready security
Optional hybrid post-quantum envelopes (X25519 + ML-KEM-768) for vault secrets and ML-DSA-65 authorship certificates — future-ready crypto without waiting on platform PQ-TLS.
Admin ops control tower
ARBITRATE queue, Vault quarantine, Sentry issues, DocuSign envelopes, strategy matrix, and remediation circuit — one /admin/ops surface for operators.
Structural ingest
The 6-Pillar Structural Ingest Engine
MSGF maps your active development project to six isolated, ultra-performance local ledger slices inside a hidden .msgf/ directory to eliminate system lag and context noise:
- P1
Static Ledger
Enforces hard codebase compliance laws; instantly drops a ruby-red HALT on critical syntax regressions.
- P2
Flow Sequence
Maps structural deployment priority and multi-file code dependencies.
- P3
Entity Profiles
Secures identities, tokens, and multi-tenant sandboxing boundaries.
- P4
State Ledger
Active "Flight Recorder" tracking your live-memory typing rhythm dynamics (HAL).
- P5
Local Variables
Shards front-end module context to save token waste.
- P6
Constraint Ledger
The Vault (what worked) and the Hall (what failed) — differential learning for every fix.
IDE — Command Center
MSGF Pulse Guard for Cursor & VS Code
The native extension ships a Command Center sidebar: connect once, generate targeted prompts, run allowlisted verify scripts, and sync outcomes to your token savings dashboard — including CONVERGE model presets (Claude / Gemini / Grok pairs).
0-Token Prompt Optimizer
Describe your task once. MSGF builds a sharded, @-attachment-ready prompt with mandatory agent verify rules — SOLO_FAST, no server-side LLM burn.
Run Scripts
Auto-registered verify commands in .msgf/run-scripts.json. Re-run tests without regenerating the prompt. Counters show up on your token savings dashboard.
Safe Build
One-click local build/test with async preflight. Pass syncs to verify-result; fail triggers Heal Cheap via dev-event — not a blind incident dump.
Command Center sidebar
Connection status, optimizer, Run Scripts, Safe Build, and advanced Pulse/heal ops in one Cursor/VS Code panel.
Verify loop
Vault on pass · Hall on repeat failure
When verify passes with a linked context pack, MSGF writes a positive beat to the Vault. Repeated failures on the same command pattern dedupe into the Hall after three strikes — so you get signal without noise. Safe execution uses execFile with an allowlisted command set (no shell injection from tampered script files).
Consensus
Small Brain presets · Big Brain TRI
Tenant verification defaults to Claude + Gemini (unanimous). Compliance and vendor-mandate paths can switch to Claude + Grok or Gemini + Grok. When logic drift is high, platform Big Brain runs TRI majority — Claude + Gemini + Grok — and only opens human notify on high original drift, no majority, or security NON_HUMAN. Prompt optimize stays SOLO_FAST.
Security
Quantum-ready vault crypto
Long-lived secrets can use hybrid KEM envelopes (X25519 + ML-KEM-768) and authorship proofs can use ML-DSA-65 certificates when enabled — so vault material stays ready for a post-quantum world. Transport still relies on platform TLS; we do not over-claim “HTTPS is PQ” until your load balancer negotiates PQ KEMs.
Integrations
Sentry, e-sign, and Workspace SSO
Sentry issues match Vault wins and quarantine poisoned context on /admin/ops. Team invites run through DocuSign or Dropbox Sign (company-selectable). Google Workspace SSO and company domains gate corporate seats. Unconfigured panels show as unconfigured — they do not break the rest of the product.
Token savings
Defensible ROI on your dashboard
After you map a project and run the IDE loop, your governance dashboard shows grouped counters: IDE verify (pass/fail/Vault/Hall), Run Script reruns, 0-token optimizer packs, ingest hash skips, and pulse routing mix. A 24h rollup separates MSGF cloud tokens from context savings you can defend to finance.
Heal Cheap
IDE build failures without full Pulse
dev-event handles IDE build failures: tenant Vault lexical match or a single Flash heal — never the full biometric Pulse → CONVERGE chain. Your keystrokes stay on Small Brain unless drift truly escalates.