Runtime governance for AI coding agents

Compiled
Instinct.

A rule in a prompt can be ignored, argued past, or compacted away. Warden sits outside the model — every tool call checked before it runs, and almost all of them waved through without a word.

Safety rules
~100
Output filters
~20
Runtime engines
4
Agent harnesses
3+
Median hook latency
~55ms

Latency measured locally. Your machine will tell you its own number.

Four engines.

Each one owns a different timescale.

Reflex

Act now

Deterministic pattern checks on every hook call — unsafe actions, doom loops, injection attempts.

Anchor

Stay grounded

Carries session state: phase, drift, focus, verification debt, trust.

Dream

Learn quietly

Mines finished sessions for conventions, repairs and dead ends. Never on the hot path.

Harbor

Connect

Adapters for Claude Code, Codex CLI and Gemini CLI, plus an MCP server and a local dashboard.

Runs locally. Auto-approval stays off until you turn it on.

Read the docs