The governance runtime for autonomous software.

CLI quickstart

CLI evaluation reference: configure one supported path, govern one consequence, inspect the evidence, and verify it. The CLI is not currently publicly issued.

Ask Aarmos

Signed-in product help with short answers from the Aarmos knowledge base and links to canonical documentation.

Without governance

What breaks when consequential agent actions run without governance.

The agent lifecycle

How Build and Run sit on a governance runtime that produces proof by construction — not a four-stage checklist.

All how-tos

See it work · 15 seconds, then 10 short walkthroughs for the app and CLI.

Get Aarmos — install page

Current evaluation access and future installation steps. No signed Aarmos CLI release is available for public download on Windows, macOS or Linux; all three have installation checks using unsigned builds. Browser verification and public AVAR verification libraries are available; CLI and companion issuance remain closed.

CLI reference

Every aarmos CLI command grouped by task: set up, run under policy, author policy, prove, and operate.

Configuration & precedence

Flag > env > workspace > user > default, every recognised AARMOS_* variable, and aarmos config explain.

MCP adapter

Wrap a Model Context Protocol server; Aarmos routes tool calls through your local policy gate.

OpenAPI adapter

Point Aarmos at any REST endpoint by URL. Scopes, dry-run, and receipts apply automatically.

Deep-link / webhook adapter

Broker non-standard actions — URL schemes, outbound webhooks, custom transports — under the same policy runtime.

AVAR spec

Ed25519-signed, hash-chained receipts. Verify with the browser verifier or public AVAR verification library; the standalone avar binary is not currently publicly distributed.

ASP (Policy-as-Code) spec

YAML authoring, CLI (lint/test/compile), and the specification.

Governed Actions

One class of consequence at a time: the facts a decision needs, every enforced path and named bypass, and a fixed evidence budget. Receipts are unchanged.

Concept index

All concepts on one page.

Error codes

Every denial the policy gate can emit — kill-switch, delegation, budget, step-cap, rate-limit — with meaning, causes, and the exact fix.

Technical FAQ

Troubleshooting and common questions — vault, providers, backups, CLI, playbooks, receipts, and rate limits.

aarmos doctor

One-screen runtime health check — WebCrypto, storage, service worker, policy gate, kill-switch, ledger anchor, clock skew.

aarmos activity

Terminal-only view of recent governed actions, read from local receipts — filter by time, status, op or agent; tail live with --follow.

Bring Your Own Storage (BYOS)

Encrypted-file token store for headless / server deployments. AES-GCM + PBKDF2, mandatory conformance suite, drop-in adapter interface.

Self-managed endpoint

Point Aarmos at your own inference endpoint or gateway.

Entitlement signing secret rotation

Rotate the entitlement signing secret. Scope, expected impact, exact steps, rollback.

Authority key rotation

Rotate the Ed25519 key backing an aarmos://authority URI. Stable URI preserved, monotonic sequence, subscriber re-pin.

Field Guide — how to operate AI safely in production

The 'why' behind the docs. Long-form essays on governance runtimes, portable verification, and the roles that consume them.

Without governance

The problem governance addresses, framed for executive review.