ARF · The Agent Watchdog · Free & Open Source

AGENTS UNDERSTOOD. PEOPLE TRUSTED.

Governance, audit trails, and control for every AI coding assistant. Works with Claude Code, Codex, Gemini CLI, Aider, gptme, Goose, OpenCode, Amazon Q, Cline, Ollama, and more. Free. Open source. Five minutes to set up.

Governance & Policy

Declarative TOML rules evaluated on every request. Allow, deny, or require-approval. Circuit breakers trip automatically on violations.

Cryptographic Provenance

Ed25519-signed Merkle DAG of every agent action. SHA-256 hash-chained. Tamper-evident proof that the agent did exactly what it claimed.

Terminal UI

11 screens including live agent output, governance rule list, audit chain, diff viewer, traffic monitor, and branch manager.

Human-in-the-Loop

Agents pause on flagged operations. Approve or deny from the TUI, VS Code, or JetBrains. Every decision recorded in the proof chain.

MCP Server

Exposes governance state, knowledge base, tasks, and agent controls via Model Context Protocol. Agents can query their own governance status.

Multi-Agent Orchestration

Launch up to 12 parallel agents with shared governance. Merkle DAG tracks concurrent branches. Fan-out dispatch routes tasks to the right model.

Works with
Claude Code Codex CLI Gemini CLI Aider gptme Goose OpenCode Amazon Q Cline Ollama + any OAI-compat CLI
First Releases · 2026
ARF · Agent Rule Framework

Know what your agents did -
before it matters that you didn't.

A governance layer that interposes between your AI coding tools and their APIs. Every action is policy-checked, cryptographically attested, and hash-chained into a tamper-evident record. Not logs. Proof of what happened, in what order, under what policy.

Explore ARF →
tgcryptfs · Encrypted Cloud Storage

Your keys. Your files.
Their infrastructure,
blind to both.

Transparent encrypted storage using Telegram's infrastructure. Files encrypted on your machine before any network contact. A dead man's switch destroys keys if you stop checking in. What Telegram stores, no one can read.

Explore tgcryptfs →

When the mechanical is augmented with proof, people are freed for the work that matters.

  • Agents that can be trusted because they can be verified.

    ARF interposes between your AI tools and their APIs, checking every action against declarative policy and sealing each decision into a cryptographic chain. Your team directs; agents execute; ARF attests to every step.

  • Sensitive data protected from the architecture down.

    tgcryptfs encrypts before data leaves your machine. The cloud stores opaque blocks it cannot read. Only your keys, on your device, produce files. The blocks stay opaque at rest, in transit, and under compulsion.

  • Compliance as infrastructure, not as process overhead.

    When governance, provenance, and access control are handled at the infrastructure layer, your team is freed from the mechanics of compliance and returned to what only people should do.

  • Each freed cycle compounds toward what matters.

    Process augmentation isn't a one-time gain. Every mechanical task absorbed by governed agents accumulates capacity for the work that defines what your organization becomes.

For teams ready
to augment
with intention.

Professional services for small and medium companies integrating AI into how they build and operate. Strategy, engineering, and the hard parts in between.

AI-Accelerated Product Design

Compress design and delivery cycles without compressing quality. Agent-assisted iteration with human taste at every decision gate.

Business Process Consulting

Map where your people spend time on coggery. Replace the mechanical with governed agents. Return your team to the decisions only people can make.

Custom Software Engineering

AI-accelerated development of the products and tools your team needs. From greenfield to production, with governance built in.

Specialization
Reverse Engineering Software
Specialization
Reverse Engineering Hardware & Embedded
Specialization
Agent Project Management & Delivery
Our belief

THE MECHANICAL SHOULD BE AUTOMATED.

Every hour a capable person spends on process coggery is an hour the organization loses. Scheduling, documentation, compliance verification, build monitoring, credential rotation: real costs paid in the most finite resource an organization has.

"When the mechanical is governed and automated, the work becomes strategic. Strategy compounds in ways that repetition never can."

We build infrastructure for teams who have decided that their people are worth more than the machines currently occupying them. ARF products and services put AI to work where it belongs: under governance, doing the mechanical, while your team focuses on what only they can contribute.

Read the Mission →