Statecraft
OverviewProductsPapersRegistryDocsGet Started
spec-governedSign in
Papers

Writing, checkable against source.

The same rule that governs the code governs the words: every claim links to a public repo or is marked forward-looking. Read the source, then read the paper.

Featured whitepaper

The Statecraft Ecosystem

How a governed agentic delivery control plane is built in the open

Statecraft is a governed control plane for agentic software delivery. It is built around one loop: intent becomes a governed spec, a contract stamps a complete application from an open template, a fleet operates the result, and a tamper-evident record makes the whole run checkable by someone who trusts none of it. This paper walks the mechanisms that make that loop honest, from the spec spine that governs every repo in the family (including this website) to the identity, decision, and attestation primitives that keep humans and agents on the same rails. Where a piece is designed but not yet shipped, it is marked as such: the status ladder on the home page rolls up from the specs, not from this paper.

July 16, 2026 4 min read4 sectionsRead the whitepaper
StatecraftAGPL-3.0

the governed delivery control plane

enrahituApache-2.0

the EnRaHiTu template chassis (Encore.ts + rauthy + hiqlite + Turso)

statecraft-cliApache-2.0

the CLI and MCP server

spec-spineApache-2.0

the spec-governance toolchain everything above is governed by

tenant-emitApache-2.0

the tenant certificate emitter: signs a produced app's governance certificate

tenant-tailApache-2.0

the tenant certificate verifier: re-checks the factory's paperwork, no trust in the producer

action-gateApache-2.0

a pure, deterministic decision gate: evaluate(context, checks) returns Allow, Deny, or Degrade

attest-ledgerApache-2.0

a tamper-evident record ledger: append-only, hash-linked, Ed25519-signed, with an independent verifier

canonical-keysort-jsonApache-2.0

deterministic canonical JSON: a lexicographic key sort at the serialization boundary, so record hashes agree

trust-windowApache-2.0

a rolling-window trust scorer: weighted samples map to a graduated privilege level

governed by spec-spine
RegistryGitHubStatic, spec-governed, no tracking.