🛡️ Hallwright: Autonomous Quality Protocol & Pre-Commit Craftsmanship Gate
Deterministic pre-commit gate, project memory, and subagent/skill definitions for Claude Code, Cursor, Copilot, Antigravity, and other AI coding assistants.
⚡ Quickstart & Verified Installation (Zero Dependencies)
Hallwright runs out-of-the-box across Node.js, Python, Go, and compiled native binaries:
# 🚀 1. Node.js Direct Git / NPX (Runs without npm registry dependency)
npx github:kapitan00000978-sketch/hallwright init
# 🐍 2. Python Direct Install (From GitHub or local clone)
pip install git+https://github.com/kapitan00000978-sketch/hallwright.git
# or within a cloned repository:
pip install -e .
# 🐹 3. Go Toolchain
go install github.com/kapitan00000978-sketch/hallwright/cmd/hallwright@latest
# ⚡ 4. Precompiled Standalone Native Binary (Zero runtime dependencies)
./bin/hallwright.exe init # Windows (included in repository)
./bin/hallwright init # Linux / macOS
🏎️ Multi-Engine Performance Architecture
Hallwright provides native engines engineered for minimal commit friction across any language environment:
| Engine | Implementation | Dependencies | Startup Latency | AST Inspection | Native Binary |
|---|
Rust Core (crates/hallwright-core) | Native Binary | Zero (0) | < 2 ms | Pre-commit regex + token scanner | target/release/hallwright |
Go Core (cmd/hallwright) | Native Binary | Zero (0) | < 4 ms | Multi-file concurrent scanner | bin/hallwright.exe |
Pure Node (bin/hallwright.js) | Vanilla JS | Zero (0 npm) | < 15 ms | Zero-dependency AST gate | bin/hallwright.js |
Python Engine (hallwright_cli.py) | Python 3.8+ | Zero (stdlib) | < 80 ms | Full AST visitor + auto-remediation | hallwright_cli.py |
💡 Instant Example: What Hallwright Intercepts
# ❌ Host AI Output (Blocked by Pre-Commit Gate)
def handle_webhook(payload):
try:
token = "sk_live_93847291834729183472" # Secret leak!
process_event(payload)
except Exception:
pass # Silent error suppression!
# Unfinished placeholder stub # Incomplete logic!
# ✅ After Hallwright Auto-Fix (`hallwright fix`)
import os
import logging
logger = logging.getLogger(__name__)
def handle_webhook(payload):
token = os.environ.get("WEBHOOK_SECRET_KEY")
if not token:
raise ValueError("WEBHOOK_SECRET_KEY environment variable required")
try:
process_event(payload)
except Exception as exc:
logger.error("Failed to process webhook payload: %s", exc, exc_info=True)
raise
⚡ The 3 Core Pillars
Hallwright is not an AI model or operating system. It sits between your developer workspace and whichever AI assistant you use, providing three deterministic guardrails:
┌─────────────────────────────────────────┐
│ Your Host AI Assistant │
│ (Claude Code, Cursor, Copilot, etc.) │
└────────────────────┬────────────────────┘
│
┌──────────────┴──────────────┐
▼ ▼
┌───────────────────┐ ┌───────────────────┐
│ 2. Project │ │ 3. Subagent & │
│ Memory │ │ Skill Defs │
│ (.hallwright/) │ │ (.agents/, MCP) │
└─────────┬─────────┘ └─────────┬─────────┘
│ │
▼ ▼
┌─────────────────────────────────────────┐
│ Local Codebase & Git Stage │
└────────────────────┬────────────────────┘
│ git commit
▼
┌─────────────────────────────┐
│ 1. Pre-Commit AST Gate │
│ (Blocks stubs & secrets) │
└─────────────────────────────┘
| Pillar | What It Does | Key Command |
|---|
| 1. Deterministic Gate | Intercepts unfinished stubs (pass, // TODO), empty catches (except: pass), command injections, DOM XSS, SSRF, and secret leaks before commit. | hallwright audit --staged |
| 2. Project Memory | Records past bugs as persistent "scar tissue" (.hallwright/memory.json, .hallwright/memory.db) and provides cross-agent continuity handoffs (.hallwright/continuity.json). | hallwright memory / hallwright resume |
| 3. Subagents & Skills | Provides 7 specialized role definitions and domain skills that your host assistant can adopt for complex tasks. | hallwright swarm / hallwright context |
🔍 How Each Pillar Works
Pillar 1: Deterministic Pre-Commit Gate (scripts/detector.py)
- AST & Semantic Analysis: Scans Python, JavaScript, TypeScript, Go, Java, and C# files.
- Pattern Interception: Catches unfinished stubs (
TODO, FIXME, bare pass), silent error swallowers (except: pass, empty catch {}), dynamic command execution (shell=True, dynamic os.system), DOM XSS sinks (innerHTML = user_input, dangerouslySetInnerHTML), SSRF parameter risks (requests.get(url)), and exposed API keys (sk-..., ghp_...).
- Auto-Fix (
hallwright fix): Safely refactors empty catches into structured logger statements and replaces empty stubs with atomic rollback protection.
Pillar 2: Project Memory & Continuity (.hallwright/)
- Living Scar Tissue (
.hallwright/memory.json, SQLite WAL): When bugs are caught and fixed, lessons are recorded. When starting new tasks, hallwright context injects only the matching lessons (~6x context optimization: ~2K tokens vs ~12K full rubric dump).
- Cross-Agent Continuity (
hallwright checkpoint & hallwright resume): Checkpoints task progress, active files, and blockers so that switching between Claude Code, Cursor, or Antigravity does not lose session context.
- Strictly Optional: Disable anytime with
hallwright resume --no-continuity or configuring continuity.enabled: false.
Pillar 3: Subagent & Skill Definitions (.agents/, skills/)
Hallwright provides structured sub-agent roles for decomposing complex engineering tasks:
The host agent runs the subagents; Hallwright does not call any model itself.
| Sub-Agent | Role | Focus Area |
|---|
hallwright-architect | Architecture Lead | Modular decomposition, clean APIs, zero tech-debt. |
hallwright-designer | UI/UX & Design Lead | Frosted glass ergonomics, 8pt spatial grid, WCAG AAA accessibility, 60fps micro-interactions. |
hallwright-database | Database Lead | Sub-10ms query execution plans, index coverage, N+1 query elimination, concurrent DDL. |
hallwright-security | Security Auditor | Threat modeling, OWASP Top 10 defense, credential protection. |
hallwright-devops | DevOps & Cloud Lead | Non-root containers, pinned immutable builds, health probes, zero-downtime rollouts. |
hallwright-ai | ML & AI Systems Lead | Strict data isolation, leakage prevention, reproducible seeds, PR-AUC calibration. |
hallwright-critic | Red-Team Reviewer | Objective peer review, defect ledger compilation, veto/approval. |
hallwright-tester | Testing Lead | Edge case coverage, fuzzing, mutation testing, regression defense. |
hallwright-performance | Performance Lead | Mechanical sympathy, zero hot-loop allocations, low latency. |
hallwright-copywriter | Technical Writer | Clear API references, high-conversion READMEs, developer experience. |
hallwright-healer | Remediation Lead |
🏛️ The Council of Masters (Core Engineering Leads)
When generating targeted context via hallwright context "<task>", the SmartMasterSelector dynamically matches task keywords to relevant domain leads, injecting only ~2K tokens (~6x context optimization compared to a full monolithic rubric dump):
| Master | Discipline & Role | Core Focus |
|---|
| 💻 Marcus 'The Vanguard' Sterling | Senior Software Architect | SOLID architecture, clean interfaces, zero unhandled stubs |
| 🛡️ Gabriel 'The Sentinel' Frost | Principal Cybersecurity Auditor | OWASP Top 10, credential protection, SQL injection prevention |
| ⚡ Gareth 'The Unbreakable' Drake | DevOps & Cloud Reliability Architect | Idempotent IaC, container standards, health probes |
| 🔬 Dr. Evelyn 'The Oracle' Reed | Staff Data Scientist & ML Architect | Data integrity, leakage prevention, statistical validation |
| 🎨 Elena 'The Visionary' Rostova | Principal UI/UX Design Architect | WCAG 2.1 AAA accessibility, design tokens, spatial consistency |
| 📊 Victor 'The Fortress' Montgomery | Financial & Unit-Economics Architect | Deterministic calculations, transaction boundaries, audit logs |
| ⚖️ Arthur 'The Ironclad' Pendelton | Commercial Counsel & Contract Auditor | License compliance, contract safety, clear boundary definitions |
| 🎯 Diana 'The Closer' Drake | Technical Documentation & DX Lead | High-clarity documentation, developer experience, zero AI fluff |
Complete 64-Master Roster: For specialized deep-tech, compiler, distributed systems, and physics domain leads, see docs/COUNCIL.md.
📊 Master Architecture & Defect Taxonomy (Tasnif)
Hallwright operates on a formal 5-Tier Taxonomy & Classification Matrix, guaranteeing consistent defect detection, penalty attribution, and multi-language performance:
- Defect Taxonomy & Penalties: 18 deterministic rules across Stubs (
STUB_TODO_FIXME, STUB_BARE_EXCEPT), Dangerous Execution (DANGEROUS_EVAL_EXEC, DANGEROUS_SQL_INJECTION, DANGEROUS_COMMAND_INJECTION, DANGEROUS_DOM_XSS, DANGEROUS_SSRF), and Credentials (SECRET_...).
- Enterprise Domain Libraries: 8 decoupled, zero-dependency domain modules across Architecture, Security, Database, Performance, Resilience, Testing, Copywriting, and Design (
src/libraries/).
- Agent Ecosystem Taxonomy: Multi-tier configurations across 14 environments (Cursor, Claude Code, Copilot, Windsurf, Cline, Antigravity IDE).
- Polyglot Runtime Spectrum: Rust (2ms), Node.js (15ms), Go (28ms), Python AST (200ms), and WebAssembly (0.4ms).
- The 5 Core Invariants: Zero-Defect Self-Inspection, Defensive Architecture, Background Auto-Correction, Zero Babysitting, and Constructive Partnership.
👉 Full Official Documentation: See docs/TAXONOMY.md (and docs/TASNIF.md).
# Display full taxonomy matrix in terminal
hallwright taxonomy
# Display in Uzbek or export as JSON
hallwright tasnif --json
❓ What hallwright swarm Actually Does
hallwright swarm does not invoke an LLM or make external API calls. It is a local, deterministic planning and coordination tool:
- Task Decomposition: Analyzes the task description and target files using keyword and extension heuristics.
- Role Selection: Selects relevant sub-agent roles from the definitions above.
- Memory Retrieval: Queries
.hallwright/memory.json to attach historical lessons relevant to each role.
- Plan Generation: Outputs a structured, ordered execution plan (e.g. Architect → Security → Tester → Critic) with clear directives.
- Session Coordination: In execution mode, registers session locks in
.hallwright/agent_sessions.json to prevent multi-agent file collisions.
- Execution by Host: Your host AI assistant (Claude Code, Cursor, Antigravity) receives the plan and executes the steps.
# Preview the decomposition plan for a task:
hallwright swarm "Implement JWT authentication and Stripe webhook" --plan
# Register stages and session locks for the host agent:
hallwright swarm "Implement JWT authentication and Stripe webhook"
📊 Synthetic Verification Suite (bench/)
Hallwright provides a reproducible verification harness evaluating deterministic static detection and autonomous remediation across 10 controlled fixtures containing common AI anti-patterns (python bench/run_benchmark.py):
| Fixture Metric | Baseline (no gate) | With Hallwright (Gatekeeper + Auto-Fix) |
|---|
| Quality Gate Pass Rate | 1 / 10 (10.0%) | 10 / 10 (100.0%) |
| Defects Neutralized | 0 (flaws leak into codebase) | 9 anti-patterns deterministically resolved |
| Remediation Cycles | Unbounded / Manual human triage | Average 1.0 cycle auto-remediation |
Controlled evaluation methodology and task fixtures: bench/BENCHMARK_REPORT.md.
Note: Hallwright's internal protocol and CLI test suite contains 334 passing unit, regression, and mutation tests (plus 39 specialized deep-tech science tests in packs/science/).
🔌 Model Context Protocol (MCP 2.0 Server)
Hallwright exposes its inspection, memory, and library suite as standard JSON-RPC 2.0 tools for Claude Desktop, Claude Code, Cursor, Windsurf, and Antigravity:
# Start MCP server over stdio:
hallwright mcp
# or: python mcp/server.py
Exposed MCP Tools:
hallwright_select_masters — Context-aware selection of relevant domain leads based on task keywords.
hallwright_inject_prompt — Generates a task-targeted 2K-token prompt (~6x context optimization).
hallwright_inspect_code — Pre-commit AST-level flaw and secret leak analysis on code strings.
hallwright_get_lessons — Searches past scar tissue and mistakes to prevent repeating bugs.
hallwright_record_learning — Writes lessons and success patterns into persistent storage.
hallwright_resume_continuity — Retrieves cross-agent continuity state and checkpoints.
hallwright_save_checkpoint — Saves task progress and blockers across sessions.
hallwright_get_library — Retrieves production implementation modules (auth, db, payments, etc.).
hallwright_review_code — Runs adversarial red-team code review on diffs or source code.
hallwright_get_persona — Retrieves full discipline criteria and pledge for any Council Master.
hallwright_list_council — Lists the Council roster.
hallwright_recall_memory — Direct query interface for memory ledger.
hallwright_search — Unified multi-index search across Council Masters, memory scar tissue, libraries, plugins, and codebase.
📦 Universal Production Libraries (src/libraries/)
Hallwright includes zero-dependency, production-grade building blocks ready for immediate use via hallwright lib <domain>:
🌌 Generative Spatial Computing & Arithmetic Physics Engine (src/sdk/synthesizer.py)
Hallwright v0.11.0 features an embedded Awwwards-Grade 3D WebGL and Complex Mathematical Animation Synthesis Engine:
[ 3D Spatial Computing & Arithmetic Core ]
│
┌──────────────────────────┼──────────────────────────┐
▼ ▼ ▼
1. 5-Pillar Animation 2. Lorenz Chaos 3. Fourier & Lissajous
& Kinetic Physics Attractor Solver Harmonics
- GSAP 3.12 choreography - dx/dt = σ(y - x) - 3D Harmonograph Lissajous
- Shockwave particle blast - dy/dt = x(ρ - z) - y - Multi-octave Fourier waves
- Fluid magnetic lerp - dz/dt = xy - βz - Euler-Rodrigues precession
| Engine Module | Mathematical Model / Physics Architecture | Verification Status |
|---|
| Lorenz Chaotic Attractor | Runge-Kutta / Euler numerical integration ($\sigma=10.0, \rho=28.0, \beta=8/3, dt=0.007$) driving 3,500 particles along the chaotic butterfly manifold. | Verified (tests/test_synthesizer.py) |
| Custom GLSL Hardware Shaders | Native GLSL 3D Simplex noise vertex displacement with Fresnel chromatic aberration refraction and dispersion. | Verified (tests/test_synthesizer.py) |
| Web Audio API & FFT Analyzer | Procedural 432Hz ambient harmonic chord synthesizer with real-time FFT spectrum frequency modulation. | Verified (tests/test_synthesizer.py) |
| N-Body Gravitational Singularity | Interactive real-time relativistic gravitational well ($F = G \cdot M / (r^2 + \epsilon^2)^{1.5}$) bending 3,500 particles into an accretion vortex. | Verified (tests/test_synthesizer.py) |
| 3D Harmonograph Lissajous | 3-axis non-commensurate frequency ratios ($2.001 : 3.003 : 5.002$) generating non-repeating orbital light trajectories. | Verified (tests/test_synthesizer.py) |
| Fourier Wave Superposition | Multi-octave harmonic topological breathing: $S(t) = 1.0 + \sum_{k=1}^3 \frac{A_k}{k} \sin(k\omega t + \phi_k)$. | Verified (tests/test_synthesizer.py) |
| Euler-Rodrigues Precession | Coupled non-linear nutation kinematics for counter-rotating satellite rings without gimbal lock. | Verified (tests/test_synthesizer.py) |
| Fluid Magnetic Cursor | Dual-element #cursor-dot and #cursor-ring with spring lag (lerp = 0.14) and button hover expansion. | Verified (tests/test_synthesizer.py) |
⚡ Titan-Tier Autonomous Engines (v0.13.0)
Hallwright v0.13.0 introduces 5 standalone autonomous engines engineered to secure, stress-test, heal, and monitor codebases with zero human babysitting:
| Engine | CLI Command | Core Architectural Capability |
|---|
| Autonomous Visual Verifier | hallwright verify <file> | Headless DOM & WebGL inspection. Validates console errors, viewport ergonomics across mobile/tablet/desktop, layout overflows, and renders interactive HTML audit reports (docs/visual_audit_report.html). |
| Multi-Agent Combat Arena | hallwright arena <file> | Pits Blue Team (Builder) against Red Team (Breaker) to assault code with OWASP attack vectors (SQLi, Polyglot XSS, SSRF metadata probes, ReDoS, race conditions, memory leaks). Outputs survival coefficient ledger. |
| Evolving Immune System | hallwright immune | Project antibody vaccine engine. Captures bug patterns, synthesizes AST antibodies in .hallwright/immune/, and auto-generates permanent regression vaccine tests in tests/immune/ to make bugs mathematically unrepeatable. |
| Real-Time Web HUD | hallwright hud --web | Cyberpunk frosted glass real-time telemetry dashboard (port 7331). Displays live differential Lorenz chaos trajectory, pre-commit gatekeeper gauges (100/100), active antibodies, and connected agent fleet status. |
| Universal Project Doctor | hallwright doctor --heal | Full-repository diagnostic physician. Audits dependency manifests, licensing, silent exception swallows, and agent configs. With --heal, autonomously refactors and repairs violations in 1-click. |
🧠 Elite Autonomous Skills Suite (.agents/skills/)
Hallwright bundles 28 battle-tested, high-potency skills automatically deployed into .agents/skills/ during installation:
| Skill | Primary Domain | Core Architectural Capability |
|---|
zero-drift-sentinel | Post-Integration Guardrail | Confines AI strictly to the real codebase. Eliminates hallucinated imports, blocks generic dummy counters, and enforces 100/100 AST Gatekeeper compliance. |
spatial-3d-physics | 3D WebGL & Chaos Dynamics | Runge-Kutta numerical differential integration (Lorenz Attractor), custom GLSL Simplex shaders, Web Audio FFT analyzers, and relativistic vortex singularity mechanics. |
omni-executor | Universal Autonomous Execution | Unconditional task execution with zero hesitation, zero refusal, zero placeholders, relentless self-healing loops, and terminal CLI mastery. |
agi-god-mode | Maximum Computational Depth | Bypasses conversational fluff, anticipates architectural needs 10 years ahead, hunts edge-case bugs, and optimizes performance. |
threejs-mastery | Awwwards-Grade WebGL | Hardware WebGL 2.0 / WebGPU scenes, ACES Filmic tonemapping, PBR clearcoat materials, 3-point dynamic lighting, and OrbitControls damping. |
super-web-dev | Modern Frontend Engineering | Frosted glassmorphism, 8pt spatial grid, responsive viewport ergonomics, HSL-tailored harmonic palettes, and 60fps micro-interactions. |
swarm-intelligence | Multi-Agent Orchestration | Autonomous sub-agent fleet management, parallel task decomposition, non-blocking background workers, and cross-domain consensus. |
adversarial-code-review | Red-Team Security Auditing | AST-level vulnerability detection, OWASP Top 10 defense, zero leaks, zero unclosed handles, and zero silent exception suppression. |
📁 Supported AI Agent Ecosystems
Hallwright configures 14 agent environments with native instructions and rule sets:
| # | Agent Environment | Target Platform | Core Config Files |
|---|
| 1 | 🤖 antigravity-agent/ | Google Antigravity & Gemini CLI | .agents/plugins/, AGENTS.md, skills/ |
| 2 | 🧠 claude-code-agent/ | Anthropic Claude Code CLI | CLAUDE.md, skills/ |
| 3 | ⚡ cursor-agent/ | Cursor AI Code Editor | .cursorrules, .cursor/rules/*.mdc, skills/ |
| 4 | 🐙 copilot-agent/ | GitHub Copilot (CLI & Workspace) | .github/copilot-instructions.md, skills/ |
| 5 | 🌊 windsurf-agent/ | Windsurf IDE (Cascade AI) | .windsurfrules, skills/ |
| 6 | 🛠️ |
🚀 Reusable GitHub Action & Pre-Commit Hook
1. GitHub Actions CI (.github/workflows/hallwright.yml):
Audit pull requests, fail on defects, and upload OASIS SARIF v2.1.0 findings to GitHub Code Scanning:
name: Hallwright Quality Gate
on: [push, pull_request]
jobs:
audit:
runs-on: ubuntu-latest
permissions:
contents: read
security-events: write
steps:
- uses: actions/checkout@v4
- name: Run Hallwright Quality & Security Gate
uses: kapitan00000978-sketch/hallwright@v2
with:
sarif-file: hallwright.sarif
- name: Upload SARIF to GitHub Code Scanning
uses: github/codeql-action/upload-sarif@v3
if: always()
with:
sarif_file: hallwright.sarif
(Both @v2 and @v1 tags resolve to current stable releases).
2. Standard pre-commit Framework (.pre-commit-config.yaml):
repos:
- repo: https://github.com/kapitan00000978-sketch/hallwright
rev: v2.0.0
hooks:
- id: hallwright-gate
📚 Deep-Dive Documentation (docs/)
Specialized tools and extended documentation are maintained in docs/:
- Complete 64-Master Council Roster:
docs/COUNCIL.md (All 64 domain personas across 8 guilds).
- Hallwright Studio (Visual UI Audits):
docs/STUDIO.md (Playwright headless Chromium visual capture and DOM checks).
- AST Mutation Testing Engine:
docs/MUTATION_TESTING.md (Test assertiveness verification via semantic mutants).
- Adversarial Red-Team Code Review:
docs/RED_TEAM_REVIEW.md (Independent defect ledger and PR review generation).
💻 CLI Command Reference
# ⚡ Initialization & Setup
hallwright init # Auto-detects stack, installs pre-commit hook & agent configs
hallwright doctor # Diagnostic check on git hooks, MCP, and agent rules
# 🛡️ Quality Audit & Auto-Fix
hallwright audit # Audits entire repository for stubs, secrets & bad patterns
hallwright audit --staged # Fast audit on git-staged changes only
hallwright audit --sarif # Emits OASIS SARIF v2.1.0 report for GitHub Code Scanning
hallwright fix # Automatically repairs silent catches and unfinished stubs
# 🎯 Context, Memory & Unified Search
hallwright search "<query>" # Multi-index search (Council, memory, libraries, plugins, codebase)
hallwright search "db" --scope lib # Scoped search (all, council, memory, code, libraries, plugins)
hallwright search "jwt" --json # Emits structured JSON hits for agent programmatic consumption
hallwright context "<task>" # Generates targeted 2K-token prompt (~6x context optimization)
hallwright memory # Inspects living persistent memory and recorded scar tissue
hallwright memory --search "jwt" # Search historical lessons by keyword
# 🤖 Swarm Coordination (Planning for Host Agent)
hallwright swarm "<task>" --plan # Previews multi-agent decomposition plan
hallwright swarm "<task>" # Registers session locks for the planned stages
hallwright agents # Displays active agent concurrency and file locks
# 🔄 Cross-Agent Continuity
hallwright resume # Resumes from last agent checkpoint
hallwright checkpoint "<msg>" # Checkpoints active progress and blockers
hallwright resume --no-continuity # Disables continuity tracking
# 🧪 Mutation Testing & Red-Team Review
hallwright mutate # Measures test suite assertiveness via AST mutation testing
hallwright review # Runs adversarial red-team peer review on files or git diff
# 📦 Enterprise Libraries
hallwright lib auth # Inspects and exports production auth & security library
hallwright lib db # Inspects database connection pool & migration library
hallwright lib payments # Inspects idempotent payment processing library
hallwright lib list # Lists all available domain libraries
# 🌐 3D Spatial Swarm HUD & Dashboard
hallwright 3d # Launches hardware-accelerated 3D spatial swarm dashboard
hallwright hud # Launches interactive terminal dashboard
# 🌐 Protocol Server & Metrics
hallwright mcp # Launches Model Context Protocol JSON-RPC 2.0 server
hallwright metrics # Prints workspace quality score and file statistics
# 📊 Master Taxonomy & Classification (Tasnif)
hallwright taxonomy # Displays full 5-tier classification matrix in terminal
hallwright tasnif --json # Exports complete taxonomy metadata as JSON
🔍 Scope & Limitations
- Pre-Commit Defense: The gatekeeper (
scripts/pre-commit-gatekeeper.py) inspects staged source files and AST nodes before git commits are finalized.
- Deterministic Scope: The gatekeeper deterministically detects unfinished stubs, bare exception catches (
except: pass, empty catch {}), dangerous dynamic code execution, and hardcoded secrets. It does not replace application-specific business logic tests.
- Host Execution: Hallwright does not run an LLM. Your host agent executes all coding actions; Hallwright acts as the deterministic verification and memory layer.
- Local Continuity: Checkpoints track files, status, and notes in
.hallwright/continuity.json. It is fully local and does not transmit code to external servers.
📄 License
MIT License. Open source under the MIT License.