Egress Network
no live agentDistributed egress fleet — every provider call exits through a bound node; trust tier gates which data classes may transit it. Nodes running the fabric-node agent hold a live session and execute dispatches remotely.
Fleet
Nodes sorted by health; quarantined nodes sink to the bottom and are flagged. Drain stops new dispatches (signalling the live agent session when one exists); quarantine removes the node from every candidate set until re-attestation.
| Node | Tier | Region | Public IP | Health | Latency | Bound accounts | Live session | Last seen | Status | Actions |
|---|---|---|---|---|---|---|---|---|---|---|
| Cloud US-East 1node_cf_use1_01 · cloud | Tier A | us-east-1 | 192.0.2.15 | 100% | 2 ms | 4anthropic/enterpriseopenai/pool-a+1 | no agent sessioncore-side simulated egress | just now | active | |
| SG Datacenter Rack 1node_sg_dc_01 · datacenter | Tier C | ap-southeast-1 | 203.0.113.10 | 99% | 3 ms | 8anthropic/enterpriseamazon-bedrock/prod+4 | no agent sessioncore-side simulated egress | just now | active | |
| Cloud EU-West 1node_cf_euw1_01 · cloud | Tier B | eu-west-1 | 192.0.2.44 | 98% | 4 ms | 3openai/pool-agoogle-vertex/prod | no agent sessioncore-side simulated egress | just now | active | |
| KL Office Egress 1node_my_kul_office_01 · office | Tier B | ap-southeast-1 | 198.51.100.21 | 97% | 9 ms | 6anthropic/enterpriseamazon-bedrock/prod+3 | no agent sessioncore-side simulated egress | just now | active | |
| KL Office Egress 2node_my_kul_office_02 · office | Tier B | ap-southeast-1 | 198.51.100.22 | 93% | 12 ms | 4anthropic/enterpriseamazon-bedrock/prod+2 | no agent sessioncore-side simulated egress | just now | active | |
| Home Lab (SoH)node_home_soh_01 · home | Tier C | ap-southeast-1 | 203.0.113.87 | 86% | 26 ms | 1openai/pool-a | no agent sessioncore-side simulated egress | just now | degraded | |
| KL Cafe Laptopnode_kl_cafe_01 · home | QUARANTINED | ap-southeast-1 | 198.51.100.99 | 31% | 48 ms | 0 | no agent sessioncore-side simulated egress | 2d ago | quarantinedfailed re-attestation · bindings failed over |
Node agent sessions
Sessions opened by the fabric-node agent (HELLO → CHALLENGE → AUTHENTICATE → WELCOME). A session stays live while heartbeats arrive inside the 90 s TTL; dispatches are handed to the agent over its long-poll channel and results stream back as frames.
| Session | Node | Epoch | State | Transport | Capabilities | Last heartbeat | Queue | Disp. / done |
|---|---|---|---|---|---|---|---|---|
| No agent has enrolled yet — the fleet is executing in core-side simulation. Use the quickstart below to attach a real node. | ||||||||
Enrollment
Seeded enrollment codes bind a fresh agent to a known node identity and trust tier. The code is exchanged for a node token, which the agent persists and uses for every later session.
# 1 - build the agent (Go 1.20+, stdlib only)
cd node && go build -o fabric-node ./cmd/fabric-node
# 2 - enroll against this core, then serve dispatches
./fabric-node \
-core https://fabric.whymelabs.com \
-enroll ENROLL-KUL-7788 \
-name my-kul-office-01 \
-state ~/.fabric-node.json
# 3 - optional: real provider calls instead of local simulation
export FABRIC_CRED_OPENAI_PRIMARY=sk-...Trust tier legend
What each tier certifies and which traffic it may carry.