Rename security-package references matrix_security -> morpheus_security

The private security package was renamed matrix_security -> morpheus_security
in its own repo. Update the public seam + call sites to import it by the new
name so the deploy contract stays consistent:
- runtime/security seam: from morpheus_security import ... / SECURITY_BACKEND
- gateway + runtime call-site references and 2 docs
- Matrix-Security-System repo-name references -> Morpheus-Security-System

Interface names only — no security rules or internals added. The bridge
sanitizer/exporter leak-filter patterns are deliberately left untouched.
Verified: seam falls back to noop when the package is absent, binds
SECURITY_BACKEND=morpheus_security when the renamed core is on the path.

Author: Neo

CREDENTIALS_NEEDED.md

@@ -5,7 +5,7 @@ The only remaining work is *you* supplying the credentials/accounts below and ru
 the deploy. Nothing here ships with real secrets — every value is an env-var / config
 placeholder. Default network is **Base Sepolia (testnet, chain 84532)**; nothing
 touches mainnet, and the security layer stays in **OBSERVE** until you review it
-(see `Matrix-Security-System/ENFORCEMENT.md`).
+(see `Morpheus-Security-System/ENFORCEMENT.md`).
 
 Status legend used across the final report: **WORKING** (tested, runs) ·
 **CREDENTIAL-GATED** (code complete, needs the secret to function) · **UNVERIFIED**
@@ -19,7 +19,7 @@ Status legend used across the final report: **WORKING** (tested, runs) ·
 |---|---|---|
 | `MTRX` (iOS app) | private | `Config/PendingCredentials.swift` (all blank by default) |
 | `0pnMatrx` (platform) | public | `openmatrix.config.json` (copy from `.example`) + env vars |
-| `Matrix-Security-System` (security core) | private | env vars only (never committed) |
+| `Morpheus-Security-System` (security core) | private | env vars only (never committed) |
 
 ---
 
@@ -79,7 +79,7 @@ Set under `services.<name>.*` in `openmatrix.config.json`. Each service returns
 | ccip | `services.ccip.router_address` (Base Sepolia CCIP router) + per-bridge addresses | CCIP/Hyperlane/Wormhole/Axelar/Stargate |
 | auctions | `services.auctions.auction_address` + `.orderbook_address` | Dutch/English/sealed-bid + orderbook |
 
-## 5. Security layer (private `Matrix-Security-System`) — env only, never committed
+## 5. Security layer (private `Morpheus-Security-System`) — env only, never committed
 
 | Credential | Env var | Unlocks |
 |---|---|---|
@@ -96,7 +96,7 @@ Set under `services.<name>.*` in `openmatrix.config.json`. Each service returns
 
 | Credential | Where | Unlocks |
 |---|---|---|
-| Deploy key / fine-grained PAT with read on `Matrix-Security-System` | deploy CI / image build | `pip install git+ssh://…/Matrix-Security-System` so the seam binds real enforcement. Absent → platform runs with `SECURITY_BACKEND=noop` (safe, inert). See `Matrix-Security-System/DEPLOY_ASSEMBLY.md`. |
+| Deploy key / fine-grained PAT with read on `Morpheus-Security-System` | deploy CI / image build | `pip install git+ssh://…/Morpheus-Security-System` so the seam binds real enforcement. Absent → platform runs with `SECURITY_BACKEND=noop` (safe, inert). See `Morpheus-Security-System/DEPLOY_ASSEMBLY.md`. |
 
 ## 7. Per-component contract addresses (app) — fill AFTER `deploy_all.py`
 
@@ -115,9 +115,9 @@ The full chain is wired in code: **app → gateway → agent → dispatcher →
 gate → tool → chain**. To exercise it end-to-end on Base Sepolia:
 
 1. **Install both layers together** (per `DEPLOY_ASSEMBLY.md`): check out `0pnMatrx`,
-   then `pip install -e .` of `Matrix-Security-System` alongside it (deploy key).
+   then `pip install -e .` of `Morpheus-Security-System` alongside it (deploy key).
    Confirm `python -c "import runtime.security as s; print(s.SECURITY_BACKEND)"`
-   prints `matrix_security` (not `noop`).
+   prints `morpheus_security` (not `noop`).
 2. **Set the env** (sections 1, 3, 5): RPC, chain 84532, deploy key, platform wallet,
    `ANTHROPIC_API_KEY`, `OPENMATRIX_API_KEY`, owner + Twilio. Keep
    `OPNMATRX_MORPHEUS_MODE=observe`.

gateway/security_gate.py

@@ -11,7 +11,7 @@
      security seam (``runtime.security``).
 
 The decision — allow / deny / classification — is made entirely inside the private
-``matrix_security`` package. When that package is not installed the seam is an inert
+``morpheus_security`` package. When that package is not installed the seam is an inert
 OBSERVE no-op and this gate allows everything (the platform still boots).
 
 The one piece of routing metadata here, ``action_type_for``, maps a public service

gateway/server.py

@@ -257,7 +257,7 @@ def __init__(self, config: dict):
         self._security_flush_task: asyncio.Task | None = None
         # Security OTP services — phone verification (owner + consumer phone connect).
         try:
-            from runtime.security import OTPService, OwnerVerification  # seam → matrix_security or no-op
+            from runtime.security import OTPService, OwnerVerification  # seam → morpheus_security or no-op
             self._otp = OTPService(self.config)
             self._owner = OwnerVerification(self.config, otp_service=self._otp)
         except Exception:
@@ -1330,7 +1330,7 @@ async def _start_cleanup_task(self, app: web.Application) -> None:
         # and load durable bans before serving; then flush its durable state
         # (bans -> DB/on-chain, breach alerts -> SMS/on-chain) on a short timer.
         try:
-            from runtime.security import get_morpheus_security  # seam → matrix_security or no-op
+            from runtime.security import get_morpheus_security  # seam → morpheus_security or no-op
             self._morpheus = get_morpheus_security(
                 {**self.config, "db": self.react_loop.memory.db}
             )

runtime/access_policy.py

@@ -9,7 +9,7 @@
 
 This module is the coarse PUBLIC floor. The authoritative, finer-grained policy
 (exact per-agent sets, ban/freeze integration, the closed-source nuance) lives in
-the private ``matrix_security.agent_access`` package and supersedes this when it
+the private ``morpheus_security.agent_access`` package and supersedes this when it
 is installed. The security seam (``runtime.security.agent_access_allowed``) binds
 the two: private if present, else this default. Either way the boundary holds.
 

runtime/config/validation.py

@@ -76,7 +76,7 @@ class ConfigValidationError(RuntimeError):
     ("notifications.webhook.bearer_token",  "NOTIFY_WEBHOOK_BEARER", False),
     # NOTE: owner-verification secrets (OWNER_APPLE_ID / OWNER_WALLET /
     # OWNER_PHONE_NUMBER) are declared and validated by the private security
-    # package (matrix_security), not here — the public platform never references
+    # package (morpheus_security), not here — the public platform never references
     # the owner-auth factors. All env-only; never committed.
     # Observability
     ("monitoring.sentry_dsn", "SENTRY_DSN", False),

runtime/protocols/integration.py

@@ -119,7 +119,7 @@ def _init_protocols(self) -> None:
         # config is passed so the layer resolves owner/blockchain/db subtrees (the
         # gateway creates the singleton first, at startup, with the DB handle).
         try:
-            from runtime.security import get_morpheus_security  # seam → matrix_security or no-op
+            from runtime.security import get_morpheus_security  # seam → morpheus_security or no-op
             self._morpheus_security = get_morpheus_security(self.config)
         except Exception:
             logger.exception("Failed to initialise MorpheusSecurity")

runtime/security/SECURITY_INTERFACE.md

@@ -20,13 +20,13 @@ owners, or sanitizes — are **not in this repository** and never will be.
 
 ## Two backends
 
-- **`matrix_security` installed** → real enforcement (the private package,
+- **`morpheus_security` installed** → real enforcement (the private package,
   co-installed at deploy).
 - **not installed** (open-source clone, local dev) → an inert **OBSERVE no-op**:
   every action is allowed and logged, nothing is enforced. The platform boots
   and runs normally; it simply has no real security layer.
 
-`SECURITY_BACKEND` (`"matrix_security"` or `"noop"`) reports which is active.
+`SECURITY_BACKEND` (`"morpheus_security"` or `"noop"`) reports which is active.
 
 ## Status
 

runtime/security/__init__.py

@@ -2,7 +2,7 @@
 
 This package is a BOUNDARY, not an implementation. It exposes the security
 contract the open platform calls (the Morpheus gate, OTP, owner verification)
-and binds it to the private ``matrix_security`` package **if that package is
+and binds it to the private ``morpheus_security`` package **if that package is
 installed**. If it is not — an open-source clone, or local dev — the seam falls
 back to an inert OBSERVE no-op: every action is allowed and logged, nothing is
 enforced. The platform boots either way.
@@ -11,7 +11,7 @@
 rules for HOW it decides (detection, classification, bans, owner/OTP internals,
 sanitizer patterns) live only in the private package and never appear here.
 
-  - Real enforcement  → install ``matrix_security`` (private), co-located at deploy.
+  - Real enforcement  → install ``morpheus_security`` (private), co-located at deploy.
   - No private package → OBSERVE no-op (safe, non-blocking, no enforcement).
 
 The Glasswing contract auditor (``audit.py``) is a separate, open feature and is
@@ -29,9 +29,9 @@
 logger = logging.getLogger(__name__)
 
 try:
-    # Real enforcement core (private repo: Matrix-Security-System). Present only
+    # Real enforcement core (private repo: Morpheus-Security-System). Present only
     # when co-installed at deploy. The seam imports names, never logic.
-    from matrix_security import (  # type: ignore
+    from morpheus_security import (  # type: ignore
         MorpheusMode,
         MorpheusSecurity,
         OTPService,
@@ -41,16 +41,16 @@
         evaluate_agent_access as _private_agent_access,
     )
 
-    SECURITY_BACKEND = "matrix_security"
-    logger.info("Security backend: matrix_security (real enforcement available)")
+    SECURITY_BACKEND = "morpheus_security"
+    logger.info("Security backend: morpheus_security (real enforcement available)")
 
 except Exception:  # ImportError, or any load error → inert OBSERVE no-op.
     SECURITY_BACKEND = "noop"
     _private_agent_access = None
     logger.warning(
-        "Security backend: noop. The private matrix_security package is not "
+        "Security backend: noop. The private morpheus_security package is not "
         "installed; the platform runs with security in OBSERVE (no enforcement). "
-        "Install matrix_security for real enforcement (see SECURITY_INTERFACE.md)."
+        "Install morpheus_security for real enforcement (see SECURITY_INTERFACE.md)."
     )
 
     class MorpheusMode(str, Enum):  # type: ignore[no-redef]
@@ -133,7 +133,7 @@ def agent_access_allowed(
 
     The ToolDispatcher calls this on EVERY tool call, keyed on the trusted
     ``agent`` from the request context. The authoritative policy lives in the
-    private ``matrix_security`` package when installed; otherwise the public
+    private ``morpheus_security`` package when installed; otherwise the public
     coarse default (``runtime.access_policy``) applies. Either way the per-agent
     boundary is enforced — a subverted agent cannot reach another agent's tools.