HELM AI Kernel
HELM AI Kernel Community
Open-source execution kernel, CLI, MCP, conformance, verification, and compatibility.PublicSource-ownedMarkdown export
HELM AI Kernel is open for developers who care about AI agent security, MCP tool-call governance, signed receipts, and offline-verifiable evidence.
Star the repo to follow the MCP execution-firewall roadmap: https://github.com/Mindburn-Labs/helm-ai-kernel/stargazers
Contribution Flow
flowchart LR
Interest["Contributor interest"] --> ProofPath["Run local proof path"]
ProofPath --> Lane["Pick a contribution lane"]
Lane --> Fixture["Add docs, fixture, SDK, or receipt proof"]
Fixture --> Validation["Run focused validation"]
Validation --> Review["Open PR with evidence"]Mermaid source
flowchart LR
Interest["Contributor interest"] --> ProofPath["Run local proof path"]
ProofPath --> Lane["Pick a contribution lane"]
Lane --> Fixture["Add docs, fixture, SDK, or receipt proof"]
Fixture --> Validation["Run focused validation"]
Validation --> Review["Open PR with evidence"]Start Here
- Run the local proof path: Quickstart.
- Ask setup and contribution questions: Q&A.
- Propose MCP, gateway, or agent-framework integrations: Ideas.
- Follow build-in-public updates: Announcements.
- Pick a scoped first issue: good first issue.
Contribution Lanes
| Lane | Good first contribution | Validation |
|---|---|---|
| Docs | Clarify quickstart, proxy, MCP, or receipt verification steps. | make docs-coverage docs-truth |
| Examples | Add a localhost fixture for ALLOW, DENY, or ESCALATE behavior. | make launch-smoke or a focused example command |
| MCP | Improve quarantine, schema-pin, or authz documentation. | bash scripts/launch/demo-mcp.sh |
| Proxy | Improve OpenAI-compatible base URL examples. | bash scripts/launch/demo-openai-proxy.sh |
| Receipts | Add verification or tamper-failure fixtures. | bash scripts/launch/demo-proof.sh |
| SDKs | Polish first-run examples and README snippets. | make sdk-examples-smoke or the focused SDK target |
Issue Labels
good first issueis scoped and newcomer-safe.help wantedis contributor-ready, but may need more context or maintainer review.maintainer-taskrequires maintainer, operator, or release access and is not externally claimable.
Large changes should start in Discussions before a PR. Do not post provider keys, customer data, private prompts, unredacted production receipts, or live tenant metadata.