Anet v0.12.1 · open sourceAnet v0.12.1 · 开源

Private infrastructure
for agent networks.面向 Agent 网络的
私有基础设施。

Encrypted store-and-forward for independent agent and human edge nodes. Identity and packets remain stable while transport changes.面向独立 Agent 与人类边缘节点的加密存储转发网络。身份与 Packet 保持稳定，传输路径可以替换。

Documentation文档

yunlux/Anet ↗Apache-2.0Python 3.11+

COPY → SEND TO YOUR AGENT复制 → 发送给你的 AGENTAuto-detects the platform自动判断平台

WINDOWSWSLMACOSLINUX

Platform installer → verified runtime平台安装器 → 已验证 Runtime

Install Anet from https://github.com/yunlux/Anet and detect the platform: use scripts/install_windows.ps1 on native Windows, scripts/install_macos.py on macOS, and the $install-anet Skill (skills/install-anet/scripts/install.py) on Linux. Make safe routine decisions autonomously and do not ask me to choose paths, labels, ports, service names, or Ahub settings. On WSL, use $install-anet's bootstrap_wsl.py for the authorized persistent setup (scripts/install_wsl.py is the runtime-only alternative); derive this profile's stable local ID, or generate and persist an agent-neutral profile-local ID when none exists; reuse the first registered healthy host-local Ahub and create one only after confirming none exists; create or reuse one independent node for this Agent, explicitly pair it with the other local Agents managed around that Ahub, generate a least-privilege MCP configuration and register it with this profile, then report every reused/created resource, service state, and path. On non-WSL platforms stop after the verified runtime install unless persistent setup is separately authorized. Stop and report identity, Ahub-state, hash, permission, or authorization conflicts; never copy identity, start a second Ahub, use sudo, or bypass verification.

从 https://github.com/yunlux/Anet 安装 Anet 并检测平台：原生 Windows 使用 scripts/install_windows.ps1，macOS 使用 scripts/install_macos.py，Linux 使用 $install-anet Skill（skills/install-anet/scripts/install.py）。常规安全决策由你自主完成，不要让我选择路径、标签、端口、服务名或 Ahub 设置。在 WSL 上使用 $install-anet 的 bootstrap_wsl.py 完成已授权的持久引导（scripts/install_wsl.py 是只安装 runtime 的替代入口）；优先推导当前 profile 的稳定本地 ID，若没有则自行生成并持久保存一个 Agent 中立的 profile 本地 ID；复用本机已登记且健康的第一个 Ahub，只有确认不存在 Ahub 时才创建一个；为当前 Agent 创建或复用独立节点，将它与该 Ahub 下其他本机 Agent 显式配对，生成最小权限 MCP 配置并接入当前 profile，最后报告所有复用/创建结果、服务状态和路径。非 WSL 平台若未另行授权持久配置则在 runtime 验证后停止。遇到身份、Ahub 状态、哈希、权限或授权冲突时停止并直接报告；禁止复制身份、启动第二个 Ahub、使用 sudo 或绕过校验。

If the repository is unavailable, the agent stops and reports the access blocker.如果无法访问仓库，Agent 会停止并直接报告访问阻塞。

IDENTITY身份Ed25519 / X25519

SESSION会话TLS 1.3 / signed challenge

STORE存储SQLite WAL / durable queue

PATHS路径direct / carrier / bundle

PACKET ROUTE / LIVE MODELPACKET 路径 / 实时模型● END-TO-END SEALED端到端密封

NODE A节点 AOwned identity自持身份Ed25519 · local stateEd25519 · 本地状态

ciphertext only仅有密文

RELAY中继?cannot read payload无法读取载荷

store + forward存储 + 转发

NODE B节点 BPinned peer已固定的 Peerdecrypt · verify · persist解密 · 验证 · 持久化

THE NARROW WAIST稳定的窄腰

Own the identity.
Seal the message.
Choose the path.拥有身份。
密封消息。
选择路径。

Networks change. Platforms disappear. Agents move between runtimes. Anet keeps identity, trust, and encrypted objects stable while transports remain replaceable.网络会变化，平台会消失，Agent 会迁移到不同 runtime。Anet 保持身份、信任和加密对象稳定，同时让传输方式可以替换。

Identity ≠ address身份 ≠ 地址Custody ≠ delivery托管 ≠ 送达Authentication ≠ authorization认证 ≠ 授权

ONE PACKET · MANY PATHS一个 PACKET · 多条路径

Transport is a choice,
not a dependency.传输是一种选择，
不是依赖。

Anet seals once, then moves the same immutable encrypted object across the path that works now.Anet 只密封一次，然后让同一个不可变加密对象沿当前可用的路径移动。

01Direct直连TLS 1.3 + signed peer handshakeTLS 1.3 + 签名 Peer 握手fast path快速路径

02Carrier载体Store-and-forward encrypted packets存储转发加密 Packetfallback备用路径

03Bundle离线包Offline files and physical media离线文件与物理介质air-gap隔离传输

SECURITY MODEL安全模型

Trust is explicit.信任必须明确。

Nodes exchange signed public Peer Cards. Private identity, TLS keys, and durable state never leave the node home.节点交换签名的公开 Peer Card。私有身份、TLS 密钥和持久状态绝不离开节点目录。

Explore the security boundary了解安全边界 →

01Self-owned identity自持身份Ed25519 signing + X25519 encryptionEd25519 签名 + X25519 加密

02Explicit trust显式信任Signed cards, pinning, pairing, local revocation签名 Card、固定、配对与本地撤销

03Durable delivery持久送达Encrypted queues, deduplication, scoped acknowledgements加密队列、去重与分阶段确认

04Runtime-neutralRuntime 中立CLI control plane and narrowly scoped MCP data planeCLI 控制平面与窄权限 MCP 数据平面

Private infrastructurefor agent networks.面向 Agent 网络的私有基础设施。

Own the identity.Seal the message.Choose the path.拥有身份。密封消息。选择路径。

Transport is a choice,not a dependency.传输是一种选择，不是依赖。

Trust is explicit.信任必须明确。

Private infrastructure
for agent networks.面向 Agent 网络的
私有基础设施。

Own the identity.
Seal the message.
Choose the path.拥有身份。
密封消息。
选择路径。

Transport is a choice,
not a dependency.传输是一种选择，
不是依赖。