✉️ The ChannelMessage Contract
Every event received from Slack, Discord, Telegram, or WebSockets is deserialized into an immutable ChannelMessage layout:
🛡️ Spoofing Protection: The AllowlistEngine
To secure the gateway interfaces, Hiroshi implements an allowlist gating filter (AllowlistEngine):
- Network ID Verification: Ingress packets are evaluated exclusively against unalterable platform network IDs (
sender_id), never user-controlled display names, neutralizing display-name forgery vectors. - Automatic Bot Filtering: Any message marked with
is_bot = trueis discarded unconditionally to prevent cascading agent loop feedbacks. - Open Mode Fallback: If the
allowed_sendersconfig variable is left empty, the engine operates in open mode, permitting all non-bot participants.