Docs.rs

MCP ToolMap + WASIX/WASI executor bridge

Greentic executor for running wasix:mcp-compatible WebAssembly components with policy-driven verification and sandboxing.

The keel command: new, build, run, test, dev, serve, docs, doctor, login, logout, token, inspect, view, lint, migrate, pack, publish, scenes, shot, film, listen, diff, smoke, check, probe, play, perf, record, replay and mcp

Render graphics from untrusted documents to RGBA, with resource limits and isolated workers.

Policy checks for AI coding agents: decides allow, defer, review or deny for every tool call from Claude Code, Codex, Cursor, OpenClaw, GitHub Copilot CLI, pi and Gemini CLI, configures Claude Code's, Codex's and Cursor's own OS sandboxes from the same policy, and keeps a local audit log.

Append-only local audit log for OpenMoat decisions (SQLite, WAL, redacted).

Keel Engine facade: launch, prelude, World and re-exports of the engine crates, with optional backends behind features

Default-deny egress proxy for OpenMoat: CONNECT with an SNI check, plain HTTP, its own DNS, an audit record per connection, and opt-in TLS termination for brokered secrets.

OpenMoat's policy decisions for your own agent: compile a policy, decide each tool call before it runs. Pure; enforcement stays with the caller.

Host adapters for OpenMoat: translate agent hook payloads to actions and decisions back to hook responses.

Policy model and decision engine for OpenMoat. Pure: no I/O, no OS calls.

Native rich-text editor for websites: a typed document model with a closed schema, markdown storage that round-trips exactly, invertible steps, transactions, undo history, commands, markdown shortcuts, a server-side schema check, and a contenteditable surface with IME composition and a no-JavaScript textarea fallback

Documentation sites from a directory of Markdown: clean-URL pages, sidebar, table of contents, previous and next links, checked internal links, highlighted code, llms.txt and a static export, as a keel-web Site

Rust binding over the pbwire C ABI: dynamic protobuf without generated code

engenho-blue — a blue program embedded in an engenho crate, loaded under an empty posture on its own thread. It decides from the facts it is handed, reaches nothing, and Rust applies its verdict.