Forseti Research Install OMNIS

OMNIS KEY V1

One key.
Every engine.

A governed runtime for local, receipt-backed engineering intelligence. Every model and tool call passes the gate first; every action earns a hash-chained receipt. Secure, local, architectural — not a chatbot cosplaying as an OS.

Install OMNIS KEY

OMNIS · governed action

intent model or tool request enters

gate BIFROST — deterministic brake on policy

tool CADMUS · governed MCP

envelope VELLUM — signed action receipt

ledger LUNA — hash-chained, re-runnable

RELEASED

alt BRAKED before execution when policy refuses

The gate is the product — nothing executes on a vibe.

Why it exists

Agents and copilots can drift, leak, or take destructive actions with no audit trail. OMNIS KEY runs engineering work locally behind a deterministic gate: specify, verify, discover, remember — with the same input producing the same verdict and the same hash every run.

Four engines

Specify → Verify → Discover → Remember. PROSPECTOR and LUNA ship live underneath; full OMNIS orchestration is V1.

CADMUSBrain dump → buildable spec. Acceptance tests, non-goals, constraints, and release blockers — intent before code.SPECIFY
PROSPECTORSoftware-estate discovery — what is good, what is risky, what is missing, and what to fix first.DISCOVER
LUNAActivity → work brief. Persistent memory with evidence boundaries and export-ready receipts.REMEMBER

What makes it different

The brakeMutating or destructive actions are refused before they run, against per-agent policy. A drifting agent cannot quietly take an unsanctioned action.gate
Hash-chained receiptsEvery action is enveloped in VELLUM and chained into the LUNA ledger. Compliance can re-run and verify any decision after the fact.ledger
Governed MCP hostConnects to MCP servers and runs every tool call through the gate — read-only calls clear; destructive calls brake before they reach the server.MCP
Air-gapped lockdownLockdown mode refuses every cloud model lane at the adapter — not a status flag. The deterministic workbench runs fully offline.offline
Zero LLM decision pathGovernance verdicts are deterministic. Models may assist; they do not own the release decision.deterministic
Signed distributionMac app is Developer ID signed and Apple-notarized. Python wheel ships through the standard supply chain.signed

Governed MCP

Every MCP call through the gate — proven on the real protocol, not a mock.

Read-only toolBrake clears → tool runs → result released → hashed into the ledger.approved
Destructive toolBrake refuses before execution → the tool never runs → the refusal is still ledgered.braked

Install

Two ways in — local server on loopback, workbench in your browser. Requires Node.js 18+ on PATH.

OMNIS KEY · 0.1.4

pip pip install --upgrade omnis-key==0.1.4

run omnis — full workbench

flag omnis --lockdown — air-gapped, no cloud lanes

flag omnis --no-agents — deterministic tools only

mac signed Developer ID · notarized · macOS 13+

Download & install guide

Full install steps, checksum, and proofs live on omniskey.ai.

Plain English

OMNIS KEY is one local keyring for serious engineering work. You ask it to spec a build, audit code, map a messy repo, or remember what happened last sprint — but nothing dangerous runs until the gate says yes, and everything that does run leaves a receipt you can verify later. Same question, same answer, same hash.

Boundaries

OMNIS is the engineering OS layer inside MIRRORVERSE — not BACCHUS hospitality ops.

← Products MIRRORVERSE → Install guide →