gargoyl GitHub

Know what your Darkbloom fleet is really doing.

Built to show which hosts are up but not routed, missing a model, or past verification, with evidence behind every state. Repairs you confirm host by host are in development.

View on GitHub Join the Darkbloom pilot
fleet / evidence
Example data, not live
Illustrative per-field evidence for four example hosts. Not live data.
Host State Observed at (UTC) Field and evidence
3f9a…c21e observed routing_eligible = eligible coordinator · within TTL
b07d…41a8 stale model_state = resident daemon · 43m old, TTL 15m
e5c2…9f03 unknown no evidence attestation_state no observation · not assumed valid
71aa…0b5d blocked requests_total daemon · source blocked, value withheld
Every field carries its own state. Missing or conflicting evidence becomes unknown, never rounded up.

Principles

Evidence over assumptions

Every field carries its own source, timestamp, freshness window, and state: observed, stale, unknown, or blocked. Missing or conflicting evidence becomes unknown instead of being rounded up to “fine.”

One field, as a host reports it (example)
"model_state": {
  "value": "resident",
  "source": "daemon",
  "timestamp": "2026-10-30T13:19:47Z",
  "freshness_seconds": 900,
  "state": "stale",
  "sensitivity": "safe"
}

Privacy by design

The telemetry schema rejects prompts, completions, credentials, raw logs, customer identifiers, IP addresses, hostnames, and model names, with no export override. Only allowlisted aggregate fields, keyed to an assigned opaque host ID, can leave a host.

What a host may send (example)
may leave the host
  host_id          3f9a…c21e
  requests_total   1284
  model_state      resident

rejected by the schema
  prompts, completions
  credentials, raw logs
  IP addresses, hostnames
  model names

Repairs under your control In development

Repairs come from a short list of approved actions. Each is checked before it runs, targets one host, and waits for your confirmation. Nothing runs on its own. Tested in simulation so far, not yet on live hosts.

Sketch of the flow, simulated hosts only
target     b07d…41a8 only
evidence   model_state stale, 43m
action     from the approved list
preflight  checks passed
confirm    Run on b07d…41a8? [y/N]

Actively being built.

Darkbloom is the first integration. The telemetry schema, privacy checks, and evidence dashboard are in progress; host enrollment and validation on live hosts are still ahead.

Follow on GitHub