Thriving Thriving Rust RS TypeScript TS
↑ 65 ?
covenant open-covenant/covenant

A capability-based operating layer for long-running autonomous software engineering agents. Rust daemon, signed capabilities, append-only audit, drift-aware memory, fail-closed sandbox dispatch, commit-scoped provenance.

https://opencovenant.org ↗
HEALTH ? 80 / Healthy
// solo builder// help wanted// hidden gem// release machine// fork magnet agent-infrastructureagent-osai-agentsaudit-logautonomous-agentscapabilitiesllmmcpoperating-systemprovenance ?
04-2026 · today · mizuki0x
★8 Share View on GitHub ↗

// readme

Covenant

Open infrastructure for agent-native computing.

Covenant sits below agent applications and above the host operating system. It owns the state, authority, and accountability concerns that recur across agent frameworks — scoped capabilities, durable memory, runtime isolation, append-only audit, and commit-scoped provenance — so individual frameworks can stop reinventing them.

Status. Local control plane is real and live-tested (50 Rust crates, ~284k lines, 3870 source-discovered Rust tests including 486 live boundary tests). Production-grade sandboxing for hostile agent code and networked multi-peer operation are roadmap; the Solana settlement program is deployed on mainnet (credits, staking, slashing, on-chain receipt anchoring), but its daemon-driven economic lifecycle is not yet production. See BUILT.md for the explicit honesty boundary.

Multi-chain reach. The trust layer also projects onto Base mainnet as signed statements any EVM contract verifies with one ecrecover — ERC-8004 agent registration, a deployed bond-receipt verifier, a registered EAS reputation schema, and an ENS CCIP-Read…