1.2: compile APL to a WASM module (requires --features apl-wasm)

iaga policy compile policy.apl --output policy.wasm

1.2: verify a plugin's Sigstore bundle + SBOM (requires --features plugin-attestation)

iaga plugins verify ./plugins/my-plugin.wasm

Install + start

```bash cargo install --path crates/iaga-sentinel-core

Docker

docker compose up -d
curl http://localhost:4010/health     # -> 200
docker compose down

The container persists its DB and signer key in a named volume (iaga-sentinel-data). Receipts signed inside the container can only be verified by the same container. To share a signer key across deployments, mount your own key file or set IAGA_SENTINEL_SIGNER_KEY_PATH.

1. Install and start

```bash cargo install --path crates/iaga-sentinel-core

What ships in the open build today (this repository)

Verifiable by git clone && cargo test --workspace && docker compose up -d:

• 12-layer governance pipeline, single binary, single endpoint (POST /v1/inspect), 275/275 default tests passing.
• Signed action receipts, Ed25519 plus Merkle append-log per run, verifiable offline with iaga replay <run_id> --verify-only.
• Agent Policy Language (APL), a typed DSL with deterministic tree-walk evaluator, instruction budget, short-circuit evaluation. Try iaga policy lint <file.apl>.
• APL live overlay, load a bundle as iaga serve --policy <file.apl>. Stricter-wins merge with the YAML profile system.
• Reasoning plane scaffold, iaga reasoning info. Bring your own ONNX models via --features ml (tract backend, no native deps).
• Cross-platform UserspaceKernel, iaga run -- <cmd> spawns governed child processes on Linux, macOS, Windows.
• HTTP API with Bearer auth, iaga gen-key then call POST /v1/inspect with Authorization: Bearer <key>.
• SQLite and Postgres backends, switch by setting DATABASE_URL=postgres://... and building with --features postgres. Receipts go to the matching backend automatically.
• BYOK-ready signer, IAGA_SENTINEL_SIGNER_KEY_PATH points at any 32-byte Ed25519 key file, including one served by your KMS (AWS KMS, Azure Key Vault, HashiCorp Vault, on-prem HSM via the filesystem-mount pattern).
• Docker deployment, docker compose up -d, /health returns 200 within about 10 seconds on the first attempt.
• WASM plugin loading, iaga plugins list and iaga plugins validate <file.wasm>.

Run the smoke yourself. Every claim above is reproducible from a clean checkout.

Quickstart

Tutorial — from zero to verified evidence

This walkthrough takes you from a clean checkout to a cryptographically signed, offline-verifiable record of an agent action, then layers on governance and observability. Every command and output below is real (captured from the open build on the default SQLite backend).

Default SQLite. Add --seed-demo to load the demo agents + workspaces.

iaga serve --seed-demo ```

Open mode disables auth for this walkthrough; --seed-demo loads demo agents.

IAGA_SENTINEL_OPEN_MODE=true iaga serve --seed-demo

8. Bring your own reasoning (optional)

Build with --features ml, point IAGA_SENTINEL_REASONING_MODELS at your ONNX models, and the reasoning plane emits scores the policy can read. ML produces evidence, never the verdict; receipts embed the SHA-256 of every model that touched the decision.

CLI flow (no auth)

```bash

HTTP API flow

```bash

Generate an API key once

iaga gen-key --label my-app

Launch a child process under the governance pipeline

iaga run --agent-id openclaw-builder-01 -- python my_agent.py

Integrations

Put IAGA Sentinel in the loop of any agent framework — one signed receipt per tool call. Adapters live in the SDKs (sdks/python, sdks/typescript) with copy-paste examples in examples/integrations/.

Shipped: Custom (@governed), LangChain, LangGraph (Py/JS), LlamaIndex, Pydantic AI, OpenAI Agents SDK, CrewAI, AutoGen, Microsoft Agent Framework, OpenAI (Py/TS), Vercel AI SDK, MCP (GovernedTool + iaga proxy), Claude Code (PreToolUse hook) and the Claude Agent SDK. Each is cooperative governance (allow / review / block, fail-open-by-default transport); a Rust client crate (iaga-sentinel-integrations) speaks the same wire contract.

The Python adapters are tested both with dependency-free fakes (CI) and against the real framework libraries (sdks/python/tests/e2e/). See the support matrix and per-framework guides in examples/integrations/README.md.

---

Community vs Enterprise

IAGA Sentinel has an open build and a commercial Enterprise edition. The open build is the source-verifiable evidence core in this repository. Enterprise adds managed, platform-specific, and compliance-delivery capabilities for organizations that need operational support beyond the public runtime.

The public boundary is documented in docs/adr/0010-oss-enterprise-boundary.md.