Products & architecture

The ecosystem, in layers.

10 public repositories, one governed stack. Each owns a specific surface: the toolchain everything is checked against, the substrate an app is born from, the control plane, the interface people and agents drive, and the small primitives that make the record checkable. All open source, all spec-governed.

Architecture layers

Governance toolchain

The spec spine everything else is built and checked against. Markdown is the source of truth; drift is refused at pull-request time.

Substrate

The runnable chassis a stamped app is born from: Encore.ts, rauthy, hiqlite, and Turso in a single container with zero managed dependencies.

Control plane

The governed loop itself: specify, stamp, operate, verify. This is the layer the status ladder tracks as it lands.

Interface

How people and agents drive the plane: a CLI and an MCP server exposing the same governed verbs, so an agent passes through the controls a person does.

Verification primitives

Small, single-purpose libraries that make the record checkable by someone who trusts none of it: certificates, a signed ledger, canonical hashing, a decision gate, and a trust score.

The governed delivery flow

01
Specify/ spec-spineshippedintent compiles to a typed, hash-verifiable spec; drift is gated in CI
02
Stamp/ enrahitu + template contractin progressa contract stamps a complete app from the chassis, born with a certificate
03
Operate/ the fleetshippedone container, one volume; update and backup are governed verbs with an audit trail
04
Verify/ attest-ledger + tenant-tailshippedthe run is recorded in a signed ledger and re-checked by an independent verifier

Each chip is rolled up from the spec that governs it. The status ladder on the home page tracks the same truth.

The repositories.

Statecraft

the governed delivery control plane

AGPL-3.0

The governed delivery control plane: the loop that turns intent into an operated, verifiable application.

Specify, stamp, operate, verify as one governed loop
Your code lives in your GitHub org the whole time
AGPL-3.0: self-hostable, copyleft

enrahitu

the EnRaHiTu template chassis (Encore.ts + rauthy + hiqlite + Turso)

Apache-2.0

The EnRaHiTu template chassis a stamped app is born from, runnable on its own today.

Encore.ts, rauthy, hiqlite, Turso in one container
Zero managed dependencies
The substrate for the factory's stamp

statecraft-cli

the CLI and MCP server

Apache-2.0

The command line and MCP server: the same governed verbs for people and for coding agents.

One set of verbs, one set of guards
MCP face so an agent uses the controls a person does
No side doors around the governance model

spec-spine

the spec-governance toolchain everything above is governed by

Apache-2.0

The spec-governance toolchain the whole family, including this website, is built and checked against.

compile, index, lint, couple: the governed loop
Deterministic: same inputs, byte-identical output
Refuses code that drifts from its owning spec

tenant-emit

the tenant certificate emitter: signs a produced app's governance certificate

Apache-2.0

The tenant certificate emitter: signs a produced app's governance certificate from a finished run.

Emit-only by construction, separate from the verifier
Signs what the factory actually produced

tenant-tail

the tenant certificate verifier: re-checks the factory's paperwork, no trust in the producer

Apache-2.0

The tenant certificate verifier: re-checks the factory's paperwork with no trust in the producer.

Offline, identity-free, read-only
Fails with a specific diagnostic on any mismatch

action-gate

a pure, deterministic decision gate: evaluate(context, checks) returns Allow, Deny, or Degrade

Apache-2.0

A pure, deterministic decision gate at the heart of every governed action.

evaluate(context, checks) returns Allow, Deny, or Degrade
No hidden state: same inputs, same decision

attest-ledger

a tamper-evident record ledger: append-only, hash-linked, Ed25519-signed, with an independent verifier

Apache-2.0

A tamper-evident record ledger: what the plane did, in a form a stranger can re-check.

Append-only, hash-linked, Ed25519-signed
Ships with an independent verifier

canonical-keysort-json

deterministic canonical JSON: a lexicographic key sort at the serialization boundary, so record hashes agree

Apache-2.0

Deterministic canonical JSON so record hashes agree across independent parties.

Lexicographic key sort at the serialization boundary
The same bytes hash the same way everywhere

trust-window

a rolling-window trust scorer: weighted samples map to a graduated privilege level

Apache-2.0

A rolling-window trust scorer: privilege is earned and decays rather than granted once.

Weighted samples map to a graduated privilege level
Trust reflects recent behavior, not a one-time grant