starburst

Restricted policy execution for Burst Kit, embedding a pinned upstream Starlark interpreter rather than implementing a new language parser/runtime.

Evaluate provides deterministic explicit inputs, strict decisions and an execution-step budget. Process invokes the separate burst-policy-worker with deadline/output limits. Linux workers lower address-space/data/CPU limits; other platforms require explicit development soft-memory mode. No filesystem, network, process, ambient clock or host module-loading APIs are exposed to policy code.

V2 adds frozen authority context, signed in-memory module bundles, explain/simulate tooling and bounded automation proposals. See v2 usage and limits and runnable examples.

See policy setup and bounds and troubleshooting. Run go test -race ./... independently here. The provisional module namespace must be finalized before publication.