infinity-pl ♾️🤖🐝

Infinity Protocol Physical Layer — Post-quantum security for AI-controlled robotic systems.

⚠️ BETA SOFTWARE — Experimental. NOT for safety-critical or production robotic systems. Cryptographic primitives use Ed25519 (classical) with architecture designed for Dilithium2 (post-quantum) swap when NIST FIPS 204 implementations mature in Node.js.

What is this?

When an AI agent controls a robot, a digital attack becomes a physical threat. infinity-pl secures the complete path from human intent → AI reasoning → wireless transmission → hardware execution → sensor verification.

Six integrated subsystems:

| # | Subsystem | What it does | |---|-----------|-------------| | 1 | Command Signing | Dilithium2-signed actuator commands with constraint envelopes | | 2 | Sensor Auth | Sensor feed authentication with cross-modal consistency checks | | 3 | ROS2 Security | Topic-level signing, dual-auth parameter protection | | 4 | Birth Certificates | Hardware identity at manufacturing → Merkle system trees | | 5 | Wireless Bridge | Protocol-agnostic security: NFC, BLE, Wi-Fi, 5G, satellite | | 6 | CPOV | Continuous physical operation verification + safety monitor |

Part of the Infinity Protocol patent portfolio:

• Patent #1: Agent-human cryptographic trust (US 64/034,176)
• Patent #2: Post-quantum reputation tokens (US 64/034,996)
• Patent #3: Physical agent security (this package)

Install

npm install infinity-pl

Requires Node.js >= 22. Zero dependencies.

Quick Start

import {
  generateKeypair, createCommandEnvelope, verifyCommandEnvelope,
  createConstraintEnvelope, checkCommandAgainstConstraints,
  generateHardwareBirthCert, buildSystemIdentityTree,
  SafetyMonitor
} from 'infinity-pl';

// 1. Generate identities
const agent = generateKeypair();
const human = generateKeypair();
const actuator = generateKeypair();

// 2. Human signs constraint envelope (agent can't modify this!)
const constraints = createConstraintEnvelope({
  max_force: 50,           // Newtons
  max_velocity: 30,        // deg/s
  max_acceleration: 60,    // deg/s²
  position_range: { min: [-180, -180, -180], max: [180, 180, 180] },
}, human.did, human.privateKey);

// 3. Create hardware birth certificate
const cert = generateHardwareBirthCert(
  'actuator_controller', 'RoboJoint-X500', 'RJ-2026-00842',
  { max_torque_nm: 50, max_velocity_deg_s: 180 },
  { did: 'did:key:manufacturer', privateKey: actuator.privateKey }
);

// 4. Agent signs a command
const command = createCommandEnvelope(
  agent.did, agent.privateKey,
  { hw_id: 'arm_joint_3', birth_cert_hash: cert.cert_hash },
  { type: 'joint_position', value: 45.0, unit: 'degrees', velocity: 10.0 },
  constraints.envelope_hash, null, 1
);

// 5. Verify at actuator side
const result = verifyCommandEnvelope(command, agent.publicKey, constraints);
console.log(result.valid); // true — execute command!

// 6. Safety monitor (independent)
const safety = new SafetyMonitor();
const check = safety.checkSafetyConditions(
  { force_n: 10, velocity: 5, ambient_temp_c: 25 },
  { max_force: 50, max_velocity: 30, operating_temp_range: { min_c: -10, max_c: 60 } }
);
console.log(check.safe); // true

CLI

npx infinity-pl demo    # Run full demo
npx infinity-pl init    # Generate identity keys

The Two-Key System

The killer innovation: constraint envelopes are signed by the human operator, NOT the AI agent. The agent can command actions within the envelope, but cannot expand its own authority. A compromised AI brain literally cannot override the physical safety limits.

Human signs: "Max force 50N, max speed 30°/s, stay within these coordinates"
Agent signs: "Move joint 3 to 45° at 10°/s" (within bounds ✅)
Agent signs: "Move joint 3 to 45° at 100°/s" (REJECTED — exceeds constraints ❌)

Safety Monitor

The SafetyMonitor runs independently with:

• Tamper-evident hash chain of all safety events
• Auto emergency stop on multiple violations
• Communication loss detection
• Hardware kill switch authority (in real deployment)

Architecture

Human ←→ Agent Brain ←→ Wireless Bridge ←→ ROS2/DDS ←→ Hardware
  │          │               │                │            │
  │    Constraint      PQ Signing        Topic Auth    Birth Certs
  │    Envelopes      Per-command       Per-message    Per-component
  │                                                        │
  └──────── Safety Monitor (independent processor) ────────┘

Testing

npm test   # 58 tests, all passing

Related Packages

• beeglie-os — Infinity Protocol core (agent-human trust)

License

MIT — Nicholas Lee Lynch & Beeglie, Buenos Aires, 2026

From brain to body, every command signed. The loop never breaks. ♾️🤖🐝