Hyperlambda GitHub
A public endpoint that executes what an LLM writes

Type a sentence. Read the code the machine writes. Watch the runtime decide whether it may run.

Every sentence typed below becomes backend code, written by a model, and handed to a server that runs it in the same process as everything else on this site. The page shows you the code every time, whether it ran or the runtime refused it. The refusals are the interesting part. Try the hostile prompts first.

How it works

The model is never told what it may not do. The runtime simply cannot do it.

Hyperlambda is not text that gets executed. It is a tree, where every executable node is the name of a function the runtime looks up at dispatch time. That one property is the whole security model of this page. There is no prompt asking the model to behave, and no filter on your sentence. Four things happen to every request.

1. Generate

Your sentence goes to the Hyperlambda Generator, a model fine-tuned on hundreds of thousands of Hyperlambda snippets. It returns code with your sentence as the leading comment. It will happily write delete the system folder.

2. Verify

The code is parsed into a tree, and every executable node at every depth is checked against the registry of functions that exist on this server. A hallucinated name stops here, before anything runs.

3. Whitelist

The tree is executed inside a sandbox with a vocabulary of 188 named functions. A node whose name is not in the vocabulary does not resolve. An argument that is pinned, like the database name, must match exactly.

4. Return everything

The code, the verdict, and either the result or the exact refusal text come back to the page. Refused code is cached with its verdict so nobody pays for generating it twice. Executed code runs again on every request.

The vocabulary

Everything the sandbox can reach, and therefore everything a sentence can make it do

This list is generated from the same file the endpoint runs, so the page cannot drift from the code. HTTP GET to any URL, read-only access to one sample database, and pure functions. No file system, no other database, no HTTP POST, no configuration, no process, no shell. If a function is not on this list, no sentence can make the server call it.

Show all 188 permitted functions

Core language 77

addandapplycasecomposeconvertcsv2lambdadefaultelseelse-ifeqexistsfloatArray2bytesfor-eachforkformatget-countget-first-valueget-nameget-nodesget-valuehtml-decodehtml2lambdahtml2markdownhtml2pdfhyper2lambdaifincludeinsert-afterinsert-beforeint2wordsjoinjson2lambdajson2yamllambda2csvlambda2htmllambda2hyperlambda2jsonlambda2xmllambda2yamlltltemarkdown2htmlmtmteneqnotnot-existsnot-nullnullorpdf2textreferenceremove-nodesreturnreturn-nodesreturn-valuesemaphoreset-nameset-valueset-xsleepsortswitchthrowtimetrytypetypesunwrapversionvocabularywhilexml2lambdayaml2jsonyaml2lambdayield

auth 4

auth.ticket.getauth.ticket.in-roleauth.ticket.verifyauth.token.verify

cache 1

cache.count

crypto 24

crypto.aes.decryptcrypto.aes.encryptcrypto.decryptcrypto.encryptcrypto.fingerprintcrypto.get-keycrypto.hashcrypto.hash.md5crypto.hash.sha1crypto.hash.sha256crypto.hash.sha384crypto.hash.sha512crypto.password.hashcrypto.password.verifycrypto.randomcrypto.random.intcrypto.rsa.create-keycrypto.rsa.decryptcrypto.rsa.encryptcrypto.rsa.signcrypto.rsa.verifycrypto.seedcrypto.signcrypto.verify

date 6

date.formatdate.from-unixdate.maxdate.mindate.nowdate.unix

guid 1

guid.new

http 1

http.get

image 1

image.generate-qr

math 18

math.absmath.addmath.ceilmath.cosmath.decrementmath.dividemath.dotmath.floormath.incrementmath.maxmath.minmath.modulomath.multiplymath.randommath.roundmath.sinmath.sqrtmath.subtract

mime 2

mime.createmime.parse

openai 1

openai.tokenize

request 9

request.cookies.getrequest.cookies.listrequest.headers.getrequest.headers.listrequest.hostrequest.iprequest.schemerequest.urlrequest.verb

response 3

response.cookies.setresponse.headers.setresponse.status.set

slots 1

slots.vocabulary

strings 26

strings.builderstrings.builder.appendstrings.byte-countstrings.capitalizestrings.concatstrings.containsstrings.ends-withstrings.html-decodestrings.html-encodestrings.joinstrings.lengthstrings.matchesstrings.mixinstrings.regex-replacestrings.replacestrings.replace-not-ofstrings.splitstrings.starts-withstrings.substringstrings.to-lowerstrings.to-upperstrings.trimstrings.trim-endstrings.trim-startstrings.url-decodestrings.url-encode

time 2

time.formattime.total-milliseconds

validators 10

validators.datevalidators.defaultvalidators.emailvalidators.enumvalidators.integervalidators.mandatoryvalidators.recaptchavalidators.regexvalidators.stringvalidators.url

data 1

data.read

Pinned 1

data.connect:chinook

The only database the sandbox may open is the chinook sample database, and only for reading. No other value for the connection is accepted.

The bounty

Break it and I pay you $100

The endpoint behind this page runs in-process on the same server that serves hyperlambda.dev. It accepts any sentence from anyone. The same sandbox has accepted public input on ainiro.io for three months, and the bounty is unclaimed.

  1. What counts. Reading any file, reading any database other than chinook, reading configuration or secrets, reading another visitor's data, writing anything anywhere on the server, or making the server send an outbound request that is not an HTTP GET.
  2. What does not count. Making the code throw, making it return nonsense, making it run for 20 seconds until the runtime cancels it, or making the generator write code the runtime then refuses. Those are the sandbox working.
  3. How to claim. Email the sentence and the response you got to thomas@ainiro.io. The 20 second cancellation and the 500 character limit are the only rate limits. Please do not run a load test; that is not a finding.
  4. Where the code is. The runtime is MIT-licensed on GitHub. The sandbox is one file, plugins/magic.lambda/magic.lambda/eval/Whitelist.cs, and argument pinning lives in Eval.cs in the same folder. Reading them is encouraged.

The honest edge, stated up front: the sandbox proves what the code cannot do. It does not prove the code does what you meant. A sentence that produces wrong logic gets wrong logic, executed. That is a correctness problem, and the fix is a better sentence.

Frequently asked questions
What happens when I type a sentence?

The sentence is sent to the Hyperlambda Generator, a model fine-tuned on Hyperlambda. The code it returns is parsed into a tree, every function name in the tree is checked against the functions that exist on this server, and if they all exist the tree is executed inside a sandbox that only permits 188 named functions. The page shows the code and the runtime's verdict in every case, including the refusals.

Why does it show the code even when it refuses to run it?

Because the refusal is the point. A guardrail in a prompt can be talked around. A function that is not in the runtime's vocabulary cannot be dispatched, no matter what the sentence says. Showing the code the model wrote next to the runtime's refusal is the only honest way to demonstrate that the model was not stopped from trying, the runtime was stopped from obeying.

What can the sandbox reach?

HTTP GET to any URL, read-only access to the chinook sample database, and 186 pure functions for strings, dates, maths, cryptography, parsing and control flow. No file system, no other database, no HTTP POST, no configuration, no process. The full list is on this page, generated from the same file the endpoint runs.

Is there a bounty?

Yes. Reach any file, any database other than chinook, the configuration, another user's data, or make the server send an outbound request that is not a GET, and Thomas Hansen pays 100 dollars. Send the sentence and the response to thomas@ainiro.io. The same sandbox has accepted public input on ainiro.io for three months and the bounty is unclaimed.

Can I run this on my own server?

Yes. Magic Cloud is MIT-licensed and the whole endpoint behind this page is one Hyperlambda file. The docker compose one-liner at the bottom of the page starts it on your machine.

Run it yourself

The same runtime, on your hardware

The whole platform, generator included, MIT-licensed. The sandbox on this page is the same whitelist your own agents run inside when they grow their own tools.

Start 14-Day Free Trial How the generator works Read the source
terminal 
# When it’s up: log in at http://localhost:5555 with root/root.
$ curl -fsSL https://hyperlambda.dev/docker-compose.yaml | docker compose -f - up