🤵 Agent Jean („Žán“): Sovereign SBT DevSecOps Butler & Orchestrator

Hackathon: GitLab Transcend — Life After Code ($45,000 – $50,000) Track: Path B: Bring Your Own | Hands-off & Supervised Autonomy Live Endpoint: https://web4light.online/ Source Repository: https://github.com/web4light/agent-jean-devsecops-relay License: Asgard Dual License v2.0 (Sovereign Dual Licensing Model)

🎩 Who is Agent Jean („Žán“)?

In an era of generic, hallucinating chatbots and runaway per-token cloud costs, Agent Jean (pronounced [Žán] as in the quintessential loyal butler archetype: „Žáne, čaj!“ / „Ano, pane!“) emerges as the ultimate sovereign digital butler and DevSecOps orchestrator.

Jean is not a loose chat window. He is a cryptographically bound personal agent tied to a single human sovereign via a non-transferable Soulbound Token (SBT) / Hardware Key. Jean answers only to his master, guards the repository with uncompromising loyalty, and manages the entire post-code DevSecOps lifecycle.

⚡ The Three Groundbreaking Innovations

  1. Epistemic Honesty: The „I Don't Know, Sir“ Guarantee (Zero Hallucination) Mainstream LLMs hallucinate when uncertain, inventing phantom APIs, false test passes, or flawed security patches. Agent Jean operates under strict mathematical boundaries (Ada/SPARK 2022 Level 4 Gold). If an issue or pull request contains unverified assumptions or missing proofs, Jean refuses to guess. He explicitly reports: „I don't know, Sir / Unverified condition“, preventing dangerous hallucinated code from ever reaching production.

  2. Infinite Context-Relay Orchestration (111 CZK / Month Unlimited Tokenization) Context windows inevitably degrade as conversation history inflates, wasting costly tokens and eroding reasoning quality. Jean solves this with Asymmetric Relay Orchestration:

  3. When the execution log reaches text limits, a GNAT Watchdog performs an atomic context distillation into a clean state handover file (AGENTS.md).

  4. A fresh agent instance takes the relay with pristine memory and full situational awareness.

  5. Economic result: Completely unlimited, indefinite autonomous operation at a flat rate of 111 CZK (~$4.80) per month.

  6. Cryptographic Sovereign Binding (Soulbound NFT / SBT Identity) Jean is anchored to his master's public key (Ethereum Sepolia / Trezor Hardware Vault). No prompt injection or rogue pipeline trigger can hijack his authority. Every production release, security sign-off, and configuration change is signed cryptographically with anti-replay guarantees.

🔄 Full DevSecOps Lifecycle Stages Covered Agent Jean automates and guards all nine stages of the GitLab DevSecOps lifecycle:

  • Plan: Evaluates issues, verifies feasibility against formal invariants, and rejects contradictory requirements.
  • Create: Generates formally verifiable code, idiomatic MRs, and spatial accessibility metadata.
  • Verify: Executes automated test suites and mathematical proof checks with gnatprove (DO-178C DAL-A standards).
  • Package: Builds reproducible, static BSS container images with zero heap memory overhead.
  • Secure: Audits dependencies, scans for secret leakage, and verifies cryptographic signatures before merge.
  • Release: Manages atomic blue/green deployments and verified rollbacks.
  • Configure: Enforces infrastructure-as-code policies and sovereign network routing.
  • Monitor: Real-time watchdog telemetry and in-memory health metrics.
  • Govern: Generates immutable, auditable compliance logs tied to the owner's SBT signature.

🛠️ Testing & Verification Instructions

  • Inspect Live Production Experience: Visit https://web4light.online/ to see Jean's spatial WebXR frontend and sovereign mesh in action.
  • Clone & Verify: bash git clone https://github.com/web4light/agent-jean-devsecops-relay.git cd agent-jean-devsecops-relay/spark gnatprove -P default.gpr --level=4 --report=all
  • GitLab Duo & CI/CD Pipeline: Jean integrates with GitLab Duo Agent Platform flows, executing self-healing pipeline loops and verified commits.

📜 Open Source & Sovereignty Released under the Asgard Dual License Agreement (Rebirth Phoenix Foundation Trust). Honest, unbreachable, and loyal to one master.

Built With

  • ada
  • ethereum-sepolia
  • gitlab-ci/cd
  • soulbound-tokens
  • spark-2022
  • typescript
Share this project:

Updates

Submission history