pkg/

Package admissioncontrol implements N+K capacity-reserve admission control.

Package agentprovision implements admission control and context sharing for interactive-agent workloads in Helix Cluster OS (HXC-1141).

Package anonymize provides deterministic, keyed-hash anonymization of text.

Package anticheat provides a model/revision anti-cheat verification token (V2, HMAC).

Package antientropy implements a Cassandra-style three-layer anti-entropy repair system over IN-MEMORY simulated replicas.

Package archlint mechanically enforces the architecture component map in docs/ARCHITECTURE.md (HXC-1424).

Package attestadmit implements an attestation-gated scheduler admission predicate for Helix Cluster OS GPU nodes (registry item HXC-1586).

Package auctionplace implements a bounty/auction-based economic placement mechanism with a single-writer claim lock.

Package auditproof implements a commit-then-prove reproducible audit.

Package backfill implements SLURM-style conservative backfill scheduling over a discrete resource timeline.

Package backoff provides exponential backoff for Helix Cluster OS.

Package balancemonitor polls an OpenAI-style billing API for the USD account balance and records each reading together with a caller-supplied RunID.

Package benchmark implements HXC-1308: an on-host micro-benchmark harness that produces NORMALIZED per-compute-class scores suitable for tier-assignment and scheduling hints.

Package billingfsm implements a scale-to-zero metered hot/cold billing state machine.

Package bootstrap provides rendezvous / bootstrap strategies for Helix Cluster OS.

Package budgetcap implements a global MaxCostPerHour budget cap enforcer over allocations.

Package burst implements a hysteresis-based burst autoscaler state machine for Helix Cluster OS.

Package burstcapacity provides deterministic, pure-Go burst capacity estimation and activation for the Helix Cluster scheduler.

Package bursthysteresis implements a two-threshold hysteresis controller that consumes a stream of utilization samples (float64 in [0,1]) and emits typed state-transition events.

Package capability implements node capability manifest generation and control-plane negotiation for the Helix Cluster OS (HXC-1309).

Package carbonsched implements a carbon-aware scheduler with per-job energy metering (HXC-1480).

Package cellmesh manages WireGuard inter-cell mesh configuration for Helix Cluster OS.

Package chaosexp defines the CE-01..CE-12 internal chaos experiment suite for HelixCluster.

Package checkpointmerge implements the container-checkpoint migration orchestration layer for Helix Cluster OS (HXC-1152).

Package chutes provides a clean-room, stdlib-only client for a Chutes-style decentralized-inference network.

Package chutesaccount provides a client for the Chutes API, covering model-list and user-account/balance queries against an OpenAI-style HTTP API.

Package classads provides ClassAd (classified advertisement) handling for Helix Cluster OS.

Package cloudspot implements a graceful-drain preemption handler for cloud spot / preemptible instances in Helix Cluster OS.

Package compliancedoc implements the EU AI Act compliance documentation pipeline (HXC-1481).

Package computeproto provides FlatBuffers serialization for GPU compute payloads in Helix Cluster OS.

Package config provides configuration loading and validation for Helix Cluster OS.

Package configsync provides conflict-free, coordinator-less synchronisation of cell-local configuration overrides across Helix Cluster replicas.

Package constraints implements a Pacemaker-style placement constraint engine.

Package context provides context utilities for Helix Cluster OS.

Package correlation provides deterministic correlation-ID assignment and a backend audit log with JSONL export/parse round-trip.

Package costrouter implements per-workload-type provider routing over a shared provider table.

Package costsched implements a deterministic, cost-aware GPU scheduler.

Package costtracker computes a deterministic monthly cost report for GPU allocations: blended cost-per-hour and the percentage reduction versus an AWS on-demand baseline rate.

Package covgate provides coverage-profile parsing and mutation-pairing audit tools that back the HXC-1138 Constitution §1.1 exit gate.

Package crdt provides state-based convergent replicated data types (CvRDTs) for Helix Cluster OS.

Package crypto provides cryptographic utilities for Helix Cluster OS.

Package dataplane provides ZeroMQ-based message patterns for internal Helix Cluster data planes.

Package deltacrdt implements four delta-state CRDTs: GCounter, PNCounter, ORSet (observed-remove set), and LWWMap (last-writer-wins map).

Package device — probe.go

Package devicecatalog provides a machine-readable device taxonomy catalog with lookup by CPU model string (HXC-1331).

Package devicemap provides conversion helpers between device.DeviceDescriptor and helixv1.Node (the protobuf wire type used by the Helix control plane).

Package deviceplugin implements a Nomad/Kubernetes-style gRPC device-plugin framework for the Helix scheduler.

Package deviceprofile provides a versioned-YAML device profile registry for T1-T8 tiers.

Package discovery provides service discovery for Helix Cluster OS.

Package doublecrypt implements the HXC-1361 double-encryption data path for Helix Cluster OS: WireGuard L3 (injected dependency) + mTLS L7 (real, in this package via crypto/tls and crypto/x509 from the Go standard library only).

Package dst implements HXC-1419: a FoundationDB-style DETERMINISTIC SIMULATION harness in pure Go.

Package e2eebench implements HXC-1556: a benchmark harness for the ML-KEM-768 / hybrid end-to-end-encryption handshake latency (target median < 1ms).

Package economics implements participant reward distribution and ROI reporting for the Helix Cluster OS economic layer.

Package edge provides edge-device admission control for Helix Cluster OS.

Package edgefusion provides an in-process stream-processing framework that merges sensor readings from multiple edge devices into fused outputs using tumbling windows.

Package edgeheartbeat implements an edge heartbeat protocol carrying battery %, charging state, thermal/CPU temperature and network type, so a power/thermal-aware scheduler can make placement decisions and tolerate device churn via a configurable offline timeout.

Package edgeregistry implements a deterministic, pure-Go multi-tier edge node REGISTRATION registry for registry item HXC-1184.

Package edgeverify implements redundant edge-output verification against a single TRUSTED anchor (pure Go, deterministic).

Package epochresolve implements config-epoch conflict resolution for simultaneous failovers.

Package errors provides structured error handling for Helix Cluster OS.

Package etcd provides a client wrapper for etcd in Helix Cluster OS.

Package etcdlint implements a static-analysis lint gate that enforces the Helix Cluster OS architectural rule: only cell-local packages are permitted to import etcd ("go.etcd.io/etcd…").

Package events provides event handling for Helix Cluster OS.

Package ewmarank provides utilization-aware EWMA candidate ranking with sticky-client routing.

Package exportcontrol implements export-control tier verification and country-code KYC checks applied at node onboarding (HXC-1482).

Package failconfirm implements a Redis-cluster-style two-phase failure confirmation protocol: a peer is first marked PFAIL (possible failure / Suspect) when a single node times it out locally, and is promoted to FAIL (Dead) only once a MAJORITY (quorum = floor(N/2)+1) of DISTINCT cluster members independently report PFAIL for it.

Package fallbackchain implements per-task ordered fallback chains with deduplication, an attempt cap, and empty-result handling.

Package federation provides the multi-cell (multi-cluster) federation core for Helix Cluster OS.

Package fedtopology models the five canonical federation topology patterns for Helix Cluster inter-cell adjacency and validates their structural invariants.

Package fedtrust implements a pure-Go cross-cluster federated-trust admission-policy evaluator (HXC-1358).

admission.go adds an OPTIONAL signed-identity + stake-based admission gate to the fiber transport.

Package flowcontrol implements Kubernetes API Priority and Fairness style fair queuing in pure Go, fully deterministic and free of any wall-clock, network, or host dependency.

Package fmea implements a codified FMEA (Failure Mode & Effects Analysis) catalog for Phase-6 federation failure modes in Helix Cluster OS.

Package forecast implements a deterministic, pure-Go predictive scaling forecaster.

Package fsresidency proves that a model file is really present on disk by reading byte ranges and verifying their SHA-256 hashes.

Package gepetto implements the HelixGepetto dual-resource arbitration strategy that decides how much overflow capacity to reserve on the Chutes marketplace as local GPU load rises, with an anti-starvation high-water cut-off.

Package gitops implements HXC-1367: an ArgoCD ApplicationSet federation client.

Package gpu provides registration hooks through which external provider adapters plug into the GPU layer.

Package gpuattest implements a device attestation crypto suite for Helix Cluster OS GPU nodes.

Package gpucatalog provides a supported-GPU compute-multiplier catalog, a LookupMultiplier function, and an attestation-aware Score function.

Package gpupool implements a GPU-provider-tier pool abstraction.

Package gputopo implements topology-aware NUMA/NVLink GPU placement scoring for Helix Cluster OS.

Package grafanadash generates and validates Grafana dashboard JSON for the Helix Cluster OS global federation health view.

Package gravaladmit implements a GraVal (GPU matrix-multiplication challenge-response) provider-admission gate for the Helix Cluster OS scheduler.

Package gravalverify implements the GraVal GPU attestation verifier with a VRAM-threshold gate and a concurrent batch verifier with a pass-rate KPI.

Package grpcutil provides gRPC utilities for Helix Cluster OS.

Package hashslot provides Redis-Cluster-compatible hash slot assignment and MOVED/ASK redirection for Helix Cluster OS.

Package headersanitize provides spoof-proof managed-header sanitization.

Package health — gRPC bridge for the standard grpc.health.v1 protocol.

Package healthmonitor provides a deterministic, pure-Go HealthMonitor that periodically checks a set of providers, detects healthy<->unhealthy transitions on an edge-triggered basis, fires auto-failover / recovery callbacks, and records a transition-event log.

Package healthprobe implements a Kubernetes-style three-tier health probe (startup / readiness / liveness) with a startup GRACE PERIOD, in pure, deterministic Go.

Package heartbeatcoalescer implements a deterministic, pure-Go heartbeat coalescer for Multi-Raft.

Package helixnet defines the HelixNetwork interface — a transport abstraction used across Helix Cluster OS.

Package helixtask provides a task SDK that wraps a function with lifecycle hooks and options, then submits the decorated unit of work to an injected pool (Submitter).

Package hlc provides a Hybrid Logical Clock (Kulkarni et al., 2014) for Helix Cluster OS.

Package hybridkex implements HXC-1476: a hybrid X25519 + ML-KEM-768 authenticated-less key exchange — the post-quantum half of Helix node-to-node transport.

Package hybridtco implements a Total-Cost-of-Ownership (TCO) calculator for a HYBRID own+burst economic model used by Helix Cluster OS capacity planning.

Package ice implements RFC 8445 ICE candidate gathering, prioritization, and connectivity-check scaffolding for the HelixCluster NAT-traversal subsystem.

Package idempotent implements an idempotent producer/broker that achieves exactly-once delivery using a (ProducerID, Seq) pair, modeled entirely in-memory and deterministically (no clock, no network, no host access).

Package imagepolicy implements an OPA-style workload admission policy for container images, performing signed-image, allowed-registry, and privilege checks.

Package inference provides a pluggable inference Backend abstraction and a capability-aware Router with a fallback chain for Helix Cluster OS.

Package inferenceproxy implements a guarded inference proxy for Helix Cluster OS.

Package informer provides an Informer-style list-watch local cache with indexers and resync, modeled after the Kubernetes informer/Store/Indexer pattern but kept pure-Go, deterministic, and self-contained.

Package jobadmit implements a Kueue-style suspend-then-admit tiered job admission controller as a pure-Go, deterministic, self-contained unit.

Package jwt provides JWT utilities for Helix Cluster OS.

Package kraft implements a KRaft-style, SELF-MANAGED Raft metadata quorum for the messaging layer.

Package latencysched implements a deterministic, latency-aware scheduler for inference request routing.

Package leader – etcd-backed leader election with fencing tokens.

Package llmadapter provides request/response shape adapters that translate a Claude Messages request and an OpenAI Responses-API request into a common OpenAI chat-completions request, and translate the OpenAI response back into the client-native shape, preserving tool-call ordering.

Package llmfailover provides an error-classified LLM failover taxonomy and a sandbox scheduling-hint contract for Helix Cluster OS.

Package local implements a registry of locally-owned GPUs with a Total-Cost-of-Ownership (TCO) model for Helix Cluster OS.

Package lock provides distributed locking primitives for Helix Cluster OS.

Package log provides structured logging for Helix Cluster OS.

Package lru provides a simple LRU cache for Helix Cluster OS.

Package marketplace implements a GPU/inference marketplace adapter layer and a composite scorer for Helix Cluster OS.

Package marketplaceadapter implements HXC-1454: a MarketplaceAdapter interface plus a Chutes adapter and a Name()-based dispatch Registry.

Package metering implements a deterministic, pure-Go marketplace metering lifecycle: a provider Registers (proving a capability via a supplied predicate), Claims a single Bounty, serves METERED invocations (each recording compute units), and is then Paid out.

Package metrics provides metrics collection for Helix Cluster OS.

Package middleware provides HTTP middleware for Helix Cluster OS.

Package modelintegrity implements a model-integrity verification gate, in the style of a HuggingFace cache integrity check, before a model is served.

Package modelretry provides status-code-driven retry-with-fallback across an ordered list of models.

Package modelrouter resolves the sentinel model name "default" to a concrete model id based on a routing strategy, and produces outbound JSON request bodies that carry sink-side evidence (the resolved model id and the runID).

Package multiraft implements a MultiRaftManager that partitions cluster state into independent shards, each running its own etcd raft group (RawNode) with its own elected leader.

Package mvcc implements a multi-version concurrency control (MVCC) revision store with a real in-memory B-tree key index and time-travel reads.

Package nattraversal provides a STUN message codec (RFC 5389) and a NAT-type classifier (RFC 3489 §10.2) for use within the HelixCluster NAT-traversal subsystem.

Package netutil provides network utilities for Helix Cluster OS.

Package nodeselector provides a deterministic, self-contained placement constraint schema and matcher for selecting cluster nodes.

Package offlinesync implements a pure-Go offline-sync PROTOCOL with delta compression.

Package openapivalidate implements a deterministic, self-contained OpenAPI-style request-validation admission middleware.

Package passthrough implements a disconnect-aware streaming passthrough.

Package phase7matrix implements a Phase-7 gap-matrix deliverable ledger with a verifier that recomputes each gap status directly from the repo (pure Go, deterministic, no network/host access).

Package phasegate implements the Helix Cluster OS sub-phase dependency-gate model and soak-condition validator (HXC-1386).

Package pool implements a GPU pool manager for Helix Cluster OS.

Package porcupine is a self-contained linearizability checker for Helix Cluster OS.

Package powergater implements a charging-gated scheduling guard (HXC-1175).

Package preempt implements value-multiplier (Gepetto-model) preemption for GPU scheduling.

Package priorityqueue implements a multifactor scheduler priority queue whose ordering is a COMPOSITE of age + fairshare + size + QoS.

Package provider defines a GPU-rental Provider abstraction for Helix Cluster OS and ships a Chutes reference adapter that talks an HTTP control API over net/http.

Package providerchain implements an ordered provider-tier fallback chain with SLA-bounded elapsed-time tracking, retriable-vs-terminal error classification, and a caller-supplied RunID recorded on every cascade.

Package pubsub provides publish/subscribe abstractions for Helix Cluster OS.

Package qos implements QoS-tier classification and routing for HelixCluster.

Package qualitygate implements the Helix Cluster OS KPI baseline validation and CI quality gate.

Package quantization — PodFormatAdvisor: the concrete serving-format decision point that GPU inference pods consult at startup (and on reschedule) to pick their operating format.

Package raftprofile codifies per-cell etcd Raft WAN-safe tuning profiles for the Helix Cluster OS.

Package ratelimit provides token bucket, sliding window, and per-key rate limiting for Helix Cluster OS.

Package rebalance implements Kafka-style cooperative-sticky incremental partition rebalancing in pure, deterministic Go.

Package redundantexec implements a BOINC-style redundant-execution trust scorer.

Package rescorer implements a periodic provider re-scoring loop with a price-spike guard.

Package residency implements a pure-Go data-sovereignty / data-residency admission-policy evaluator (HXC-1359).

Package retry provides retry logic with configurable backoff strategies for Helix Cluster OS.

Package revenueopt implements HXC-1456: a RevenueOptimizer that performs a greedy GPU-to-marketplace assignment, maximizing expected hourly revenue per GPU.

Package ringavg provides a fixed-window ring-buffer moving average that smooths a noisy utilization stream so a single transient spike does not trip a threshold.

Package sandbox provides a general-purpose capability-based guard with resource-limit enforcement and structured audit logging.

Package scan implements an Oracle-SCAN-style stable virtual client endpoint that load-balances connections across a dynamic set of backend nodes.

Package security provides TLS, SPIFFE, and Vault security primitives for Helix Cluster OS.

Package semaphore provides a counting semaphore for Helix Cluster OS.

Package serde — Cap'n Proto zero-copy serialization for control-plane Node.

Package session provides distributed terminal session lifecycle, CRDT-based state synchronization, and cross-node migration.

Package slotmigration implements an atomic slot/session migration controller for live session migration in Helix Cluster OS.

Package smartrouter implements an intelligent ModelRouter that selects the best-fit model for a workload based on one of five routing strategies: Latency, Throughput, Cost, TEE, or Balanced.

Package spiffefed implements SPIFFE federation trust-bundle exchange across Helix Cluster cells.

Package splitbrain implements split-brain prevention and partition classification for distributed consensus clusters (HXC-1373).

Package splitbrainalert codifies Prometheus alerting rules for split-brain and quorum-loss conditions in a Helix Cluster OS deployment (HXC-1380).

Package stats provides statistical utilities for HelixCluster OS.

Package stonith implements STONITH (Shoot-The-Other-Node-In-The-Head) node fencing for Helix Cluster OS.

Package storage — Redis-backed store for Helix Cluster OS.

Package streamfailover implements streaming-safe failover that retries ONLY before the first byte is emitted.

Package suitability provides a pure-Go, deterministic workload-suitability classifier that routes HPC-style workloads versus inference-style workloads.

Package swim provides the SWIM (Scalable Weakly-consistent Infection-style Membership) gossip protocol implementation.

Package thermalwarm implements a deterministic thermal pre-warm / scale-from-zero state machine for backends.

Package tierdef provides the authoritative T1-T15 tier-definition registry for the Helix Cluster OS.

Package tierdetect performs automated host-capability detection used to validate a requested provisioning tier BEFORE any resources are allocated.

Package tieredcache implements a three-tier cache: Hot (in-memory), Warm (NVMe-class backend), and Cold (SSD-class backend).

Package tiersec implements the per-tier security model for Helix Cluster OS.

Package timefault provides deterministic time-fault injectors and a clock-skew detector for testing distributed-clock robustness in HelixCluster.

Package tofu implements trust-on-first-use (TOFU) node identity verification with verify-then-pin semantics.

Package tracing provides distributed tracing utilities for Helix Cluster OS.

Package validator provides struct tag validation and custom rule registration for Helix Cluster OS.

Package voting provides split-brain-safe quorum decisions for Helix Cluster OS via largest-subcluster (majority) voting.

Package wasm provides a WebAssembly plugin runtime using Wasmtime for Helix Cluster OS.

Package watchmanager implements an etcd-style persistent watch manager with synced / unsynced / victim watcher groups.

Package watchtower implements a deterministic watchtower-style liveness + integrity prober for cluster instances.

Package websocket provides WebSocket utilities for Helix Cluster OS.

Package workclaim implements SKIP LOCKED-style optimistic work-claiming.

Package workerpool provides a worker pool for Helix Cluster OS.

Package workloadrouter implements HXC-1455: UnifiedManager.RouteWorkload.

Package workqueue provides a controller-runtime-style, rate-limited work queue for Helix Cluster OS.

Package x25519session implements an X25519 ephemeral session-key handshake.