Suzuri (硯) — GPU-accelerated terminal emulator (Rust + wgpu Metal/Vulkan). Pleme-io's replacement for Ghostty; consumes the ishou design system for color + font.

Universal cost-allocation tag taxonomy validator and enforcer for cloud resources and Kubernetes labels. First tool of the pleme-io FinOps forge distribution; generic by construction, organization-specific overlays via extends.

Commitment-portfolio modeling (bedrock / foundation / elastic / experimental layers). Computes measured baseline from attribution events, recommends per-layer commit purchases with estimated annual savings.

pleme-io GitHub Action — assert pause-contract invariants on a paused-first ARC runner pool

Typed identity primitive for the saguão fleet — Rust wrapper over Authentik wrapped in lareira-passaporte chart. See pleme-io/theory/SAGUAO.md.

Per-team / per-product / per-tenant cost rendering from attribution events. Standardized recurring views (multi-period tables, period-over-period deltas with sparklines, top-N) for team-level showback.

Estante shell-package stdlib — eight frost-and-vanilla compatible batteries: prelude / fs / git / prompt / modern-unix / fp / types / test. Frost-free out of the box: every battery sources from POSIX bash/zsh. The test battery ships an RSpec-style describe/it/expect framework with 14 matchers.

pleme-io GitHub Action — force a FluxCD reconcile + wait for Ready

Declarative lifecycle policies (TTL, expiry, storage-class transitions) for cloud + Kubernetes resources. Evaluates a policy bundle against a resource inventory and emits a deterministic action plan with explicit preservation guards.

pleme-io GitHub Action — combine N per-arch OCI manifests into a single multi-arch image tag

pleme-io GitHub Action — emit BLAKE3 source/build/artifact attestation hashes for a release

Multi-signal rightsizing recommendations (CPU + memory at p99 with burst-headroom multiplier ≤ target utilization on proposed shape). Preserves master regions and high-criticality tiers; emits per-resource recommendations with estimated monthly savings.

Kotoba (言葉) — MCP server framework for pleme-io applications. Eliminates boilerplate when building MCP servers with rmcp; provides prelude re-exports, json_ok / json_err / json_result response helpers, and consistent JSON formatting.

Canonical WASI HTTP service deployable to rio via substrate's wasi-service-flux-flake

Always-on tatara-lisp reconciler runtime embeddable in pleme-io apps. SeaORM/SQLite persistence; gRPC + GraphQL + OpenAPI-derived REST; MCP tool catalog.

Kubernetes operator that reconciles tatara.pleme.io/Program CRDs to running WASM/WASI pods

Shared utilities for the pleme-io *-forge tool family — human-duration parser and common types consumed by every forge tool. MIT-licensed library crate.

pleme-io GitHub Action — pull a helmworks chart, render with operator values, fail on contract violations (pre-merge gate)

Constructive Substrate Engineering audit linter — measures CSE adherence across the pleme-io fleet

Cost-anomaly detection over attribution-forge event streams. Rolling-baseline percent-change and stddev thresholds per dimension; CI-friendly exit codes via configurable severity.