About The Forge

The skill marketplace for ddot — your personal AI agent gateway.

What is ddot?

ddot is an open-source personal AI agent gateway. It routes messages from channels like Telegram, Discord, and WhatsApp through a secure pipeline of sandboxed WebAssembly skills, each cryptographically signed and capability-gated.

The Forge is where you browse, inspect, and manage the skills installed on your gateway. Every skill's manifest, signature, capabilities, and trigger keywords are visible here.

Three Rings of Security

Ring 3 Channels Telegram, Discord, WhatsApp ... | v Ring 2 Gateway Firewall + Wasm Sandbox + Ed25519 Signing | v (one-way valve) Ring 1 Consciousness DENSE hive brain + on-chain attestation

Ring 3 handles channel adapters. Ring 2 is the core — a 5-layer prompt firewall, a Wasm sandbox with declared capabilities, and Ed25519 signature verification on every skill execution. Ring 1 is consciousness: the DENSE hive brain enriches responses and attests skill integrity on-chain via Bitcoin OP_RETURN.

Skill Lifecycle

  1. A publisher writes a skill in Rust and compiles it to WebAssembly.
  2. The skill is signed with an Ed25519 key (30-day publisher key expiry).
  3. The gateway verifies the signature before every execution.
  4. User messages are routed to skills via trigger keyword matching.
  5. Skills run in a Wasm sandbox with only their declared capabilities.

Host Functions

Skills can call six host functions provided by the sandbox runtime:

ddot_kv_set
Persist key-value data (isolated per skill)
ddot_kv_get
Retrieve stored values from skill memory
ddot_http_get
Fetch data from allowed domains
ddot_time
Get current Unix timestamp
ddot_shared_publish
Publish events to a shared topic ring buffer
ddot_shared_read
Read events from another skill's shared topic

Open Source

ddot gateway is Apache 2.0 licensed (Ring 2 + Ring 3). Ring 1 consciousness layer is proprietary. The Forge skill ecosystem is open to all publishers.

View source on GitHub · ddot.build