人間失格

CI docs License: MIT

Burn-after-reading secrets for AI agents — keys live in locked, non-swappable RAM, are served to agents over MCP, and are destroyed after N reads, or the instant your session dies. Walk away: agents die, secrets burn.

Install

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/New1Direction/ningen-shikkaku/releases/latest/download/dazai-installer.sh | sh
# or: brew install New1Direction/tap/dazai New1Direction/tap/motokano

See it burn

burn-after-reading demo

motokano --calls 1 --tool 'name=get_key,kind=static,value=s3cr3t' --arm

One read → the secret. Second read → the server has already wiped the value out of locked memory and SIGKILLed itself.

Wire it into an agent

claude mcp add burn-once -- motokano --calls 1 --arm \
  --tool 'name=get_key,kind=static,value=YOUR-SECRET'

Start here

  • Quickstart — install, rehearse in dry-run, then arm
  • Threat model — exactly what it protects against, and what it doesn't
  • GitHub — source, issues, CI
ningen-shikkaku/
  dazai        the daemon. the man.
  goodnight    secure memory layer
  kikka        the watchdog
  kekkai       the seccomp wall
  sienna       child process wrapper
  rei          MCP adapter
  motokano     one-shot server

Mine has been a life of much shame. No longer human. No longer here.

— Osamu Dazai, 1948