ARF the Agent Runtime Firewall sits between your AI coding agents and the world. Every request governed. Every action attested. Every decision cryptographically sealed. Works with any CLI, any model, zero code changes.
Every other approach to agent governance requires you to use their SDK, their framework, their agent runtime. ARF doesn't care what your agents are built on. It intercepts at the HTTP layer between the CLI tool and the API so governance just works, for every agent, transparently.
No SDK changes. No prompt wrappers. No agent modifications. Point your CLI tool's API endpoint at ARF, set your policy, and your agents are governed.
How interposition works →HTTP proxy between CLI and API. Bidirectional protocol translation between Anthropic, OpenAI, and Gemini wire formats. One ARF, any runner, any model.
02 · GovernanceTOML-based rules. Circuit breakers that trip on violations. Governance profiles: Strict, Standard, Minimal. Health grades A–F. Compatible with industry policy languages.
03 · AuditEd25519-signed, SHA-256 hash-chained proof bundles. Merkle DAG for concurrent branches. Not what changed but what the agent decided, under what policy, by whose approval.
04 · PlanningAgent work goes through a governed lifecycle. Agents propose before they act. Humans approve. Completed work gets a cryptographic seal. Cross-agent review workflows.
05 · EnvironmentsJailed git worktrees. OS-level sandboxing (macOS sandbox-exec, Linux unshare namespaces). Network policy enforcement. Local or remote. The Agent Relay Fence.
06 · CompatibilityWorks with Claude, Codex, Gemini CLI, Ollama, DeepSeek, Qwen, and any OAI-compatible local model. The Adaptive Runtime Framework.
07 · OrchestrationUIA (Unified Instruction Assembly) decomposes complex tasks. Fan-out to multiple agents in parallel. Merge only branches that pass governance. The Board coordinates everything.
08 · SteeringIntercept and rewrite messages before the agent sees them or after it responds. Add context, constraints, corrections. Detect and block prompt injection. The Autonomous Request Filter.
09 · InterfaceLive proxy traffic. Governance events. Circuit breaker controls. Config hot-reload. Session persistence. Diff viewer. Agent call signs. The Agent Rendering Framework.
10 · Examples12 agents in parallel, quality-gated merges. Dead man's circuit breakers. Fully auditable AI code review pipelines. Route tasks by type to different models. And a lot more.