io.github.Runewardd/runeward

Rune Box: an environment where your agent can roam freely but with receipts.
The open-source governance harness for AI agents, by Runeward.

Put enforceable policy, human approvals, isolated execution, budgets, and signed evidence around any AI agent. Rune Box works with an existing agent or multi-agent framework rather than requiring a new model or orchestration stack.

Prove it in one command

Prerequisites: a running Docker, OrbStack, or Podman engine and the runebox binary.

runebox quickstart

The command creates .runebox/quickstart.toml, checks the policy, runtime, image, and state path, runs an allowed command, proves a destructive command is denied before execution, and verifies the signed audit trail. It never overwrites an existing policy unless --force is passed.

doctor and dashboard readiness also resolve required secret sources. A Charter that references an unset env:// value is not presented as launch-ready.

runebox doctor quickstart                     # explain setup problems safely
runebox --config-dir .runebox serve          # dashboard + governed REST API
runebox evidence export quickstart -o run.json
runebox evidence verify run.json              # independent policy/audit verification

What Rune Box adds

Every governed action follows one path:

agent request → policy → human approval when required → limits → sandbox → signed audit event

Naming

Documentation and UI use familiar terms first. Existing API paths and file fields retain the original themed names for compatibility.

... View full README on GitHub