The code that runs on your machine

Our control plane is closed — it's the product. But the launcher and agent that run on your server are open, because you should never trust privileged code you can't read.

served live from the control plane — this is the exact code in production, right now

# browse below, or clone — self-hosted, no third parties
git clone https://repo.infraveil.com/runtime.git

launcher.py.j2live professional_agent.py.j2live infraveil-approver.pylive starter_server.js.j2live tools/verify-ledger.pyverify your ledger tools/approve-release.pysign releases offline README.mdhow to verify LICENSEApache 2.0

Always current

The runtime files above are served straight from the control plane's live source — the same files it renders and ships to your agents. When the runtime changes, this changes with it. No stale mirror.

Verify your ledger

python tools/verify-ledger.py agent_audit_<id>.jsonl --head <anchor from your dashboard>

Lock us out

Generate an approval key offline with approve-release.py --genkey, register the public half, and sign each release. Your agents then run only code you signed — a compromised Infraveil can't forge it.

Trust by inspection — not assertion.