Demo: Watch on GitHub (12 MB)
What Is Decapod
Like Docker is a runtime for containers, Decapod is a runtime for agents. You set it up once, then agents operate inside a governed environment with persistent state, enforced methodology, proof gates, and coordination primitives.
Agents can write code. But they can't reliably ship because they forget what they built yesterday, treat best practices as vibes, say "done" without evidence, and trip over each other in parallel. Decapod fixes that with over 50 validation gates that enforce the agent<->Decapod contract.
Decapod is not a prompt pack, an agent framework, a hosted SaaS platform, a review bot, or a human workflow tool. Humans may read artifacts; agents are the operators. It's infrastructure: the environment where agent work becomes enforceable.
Quickstart
That's it. Agents now operate inside the governed environment. Proofs decide 'done'.
How It Works
Decapod is a tool for agents, not for humans. After decapod init is present in a repo, agents operate inside the governed environment. Two things set it apart from orchestration frameworks: an embedded constitution and coordination primitives.
Embedded Constitution
Every Decapod binary ships with a compiled-in methodology: binding contracts, authority chains, proof doctrine, and architectural guidance — 40+ documents covering specs, interfaces, architecture, and plugins. Agents don't receive tips; they receive contracts.
decapod init generates thin entrypoints (AGENTS.md, CLAUDE.md, GEMINI.md, CODEX.md) that point agents into the constitution. Every agent, regardless of provider, enters through the same contract and follows the same authority ladder:
Intent > Architecture > Implementation > Proof
Projects customize behavior through .decapod/OVERRIDE.md — extend or adjust any contract without forking the constitution.
Coordination Primitives
Agents operating in the same repo share durable infrastructure:
- Proof ledger + knowledge graph — Decisions, conventions, and proof events survive sessions and model switches. Stored in
.decapod/data/as SQLite + append-only event logs, forming a repo-native knowledge graph of intent → change → proof. - Proof gates —
decapod validateis authoritative. If it fails, the change is not complete, regardless of summary confidence. - Shared backlog — A brokered task system with audit trails. Agents claim work, record transitions, and archive completions. No duplicate effort, no lost context.
- Policy boundaries — Trust tiers, risk zones, and approval gates. Governance that scales with autonomy.
- Event sourcing — Every state mutation goes through a broker that records who did what, when, and why. State can be deterministically rebuilt from events.
Architecture
your-project/
├── AGENTS.md Agent universal contract (generated)
├── CLAUDE.md Claude entrypoint (generated)
├── GEMINI.md Gemini entrypoint (generated)
├── CODEX.md Codex entrypoint (generated)
└── .decapod/
├── data/ State: SQLite DBs + event logs
├── generated/ Derived artifacts (auto-managed)
├── OVERRIDE.md Project-specific constitution overrides
└── README.md Control plane documentation
Agents interact through the CLI control surface. Direct mutation of .decapod/data/ violates the control-plane contract.
Security
See SECURITY.md. Agents must handle credentials securely — never log, never commit, always rotate. Violations are constitutional breaches.
Contributing
Decapod is built with Decapod. To develop:
Support
License
MIT. See LICENSE for details.