🦀
cargo install decapod && decapod init --proof
Decapod
Daemonless, local-first governance kernel behind AI coding agents.
Agents call Decapod on demand to turn intent into context, then context into explicit specifications before inference,
enforce boundaries, and deliver proof-backed completion across concurrent multi-agent work.
Canonical Contract: assets/constitution.json section core/DECAPOD
Decapod provides comprehensive documentation for both human operators and AI agents.
- Human Documentation (mdBook): Conceptual overview, workflows, adoption guide, and reference.
- Agent Orientation Corpus: API-awareness layer for agents, including command contracts and payload examples.
- Universal Agent Contract (AGENTS.md): The machine-readable entrypoint for all agents operating in this repo.
cargo install decapod
decapod init --proofdecapod init --proof creates .decapod/, a local folder your agent uses to remember intent, rules, context, specs, and proof.
Your conversational workflow does not change. You keep working through your agent; Decapod gives the agent the missing control plane. Intent is captured, scope is bounded, context is shaped, protected areas are respected, work is isolated, and completion is proven against the project’s rules and the Decapod constitution.
AI coding agents often lose the plot: they forget intent, pull too much context, skip dependencies, and touch protected files. Decapod gives them a repo-native governance layer that makes intent explicit, boundaries enforceable, context deliberate, and completion provable.
flowchart TD
UserIn["User"] -->|"intent"| AgentPre["Agent (Pre)"]
AgentPre -->|"governed request"| Model["Model"]
Model -->|"response"| AgentPost["Agent (Post)"]
AgentPost -->|"verified result"| UserOut["User"]
AgentPre -.->|"ping for context"| UserIn
AgentPre -. "optional governance path" .-> DecapodPre["Decapod (Pre)"]
DecapodPre -. "intent, context, gates" .-> AgentPre
AgentPost -. "optional proof path" .-> DecapodPost["Decapod (Post)"]
DecapodPost -. "boundaries, checks, proof" .-> AgentPost
DecapodPost -. "needs more context" .-> AgentPre
style UserIn fill:#ff6b9d,stroke:#c44569,color:#fff
style UserOut fill:#ff6b9d,stroke:#c44569,color:#fff
style AgentPre fill:#a855f7,stroke:#7c3aed,color:#fff
style AgentPost fill:#a855f7,stroke:#7c3aed,color:#fff
style Model fill:#06b6d4,stroke:#0891b2,color:#fff
style DecapodPre fill:#fbbf24,stroke:#f59e0b,color:#000
style DecapodPost fill:#fbbf24,stroke:#f59e0b,color:#000
Agent ↔ User pings — The 1st agent (governance) and 2nd agent (proof) can ping the user for additional context when intent is unclear or verification needs human input.
Decapod is called by the agent at governance boundaries. Before inference, the agent may branch into Decapod to shape intent, context, and gates. After inference, the agent may branch into Decapod when the work needs boundary checks, verification, proof, or another governed pass.
Each Decapod call may recurse until the work is shaped, bounded, and provable. Decapod is not the agent and not the model; it is the governance kernel the agent calls whenever work needs control.
Decapod is called before:
- Acting — clarify intent and generate specs
- Inference — resolve focused context capsules
- Touching Code — enforce boundaries and protected paths
- Completing — produce verification and proof
- Clarifies intent — Converts vague requests into explicit, versioned specifications.
- Bounds context — Resolves only the minimal relevant code/docs for the task.
- Enforces boundaries — Safeguards protected branches and sensitive modules.
- Governs adaptation — Manages feedback-driven instruction changes through explicit review.
- Requires proof — Gates completion on deterministic verification artifacts.
Decapod preserves what agent workbenches lose: reusable, repo-native knowledge that survives the session.
.decapod/
generated/
specs/ # Human-visible intent and architecture specs
context/ # Deterministic context capsules
artifacts/ # Verification output and proof provenance
data/ # Durable repo-native state (DBs, events, todos)
config.toml # Project shape and agent-facing configuration
OVERRIDE.md # Local rules that override embedded defaults
Every run leaves operational evidence. The generated files are the human-visible proof surface: inspect them locally, review them in PRs, and use them to re-establish state across different agents like Claude, Codex, Gemini, Cursor, and Kilo.
Decapod ships with an embedded engineering constitution: over 100 declarative documents covering architecture, security, performance, and testing.
Everything an engineering org usually keeps in tribal memory or review culture becomes executable guidance. Your agent does not guess; it reads the constitution, cites claim IDs, follows gates, and produces proof.
- Daemonless — Runs on demand like
gitorgrep. - Repo-native — All state lives in your repository.
- Provider-agnostic — Works across agent workbenches.
- Proof-gated — Completion requires passed verification gates.
- Boundary-aware — Enforces protected paths and branch isolation.
git clone https://github.com/DecapodLabs/decapod
cd decapod
cargo build && cargo test