Local-first governance runtime for OpenAI Codex

Proof-carrying missions for Codex.

Codex generates freely. AxiomGate lets it act only within explicit authority: right identity, right target, enforced at the Codex hook. And it lets Codex claim done only with a tamper-evident Build Receipt anyone can verify offline.

55.8-67.8%action-boundary violations

Across 2,208 prompt variants, UnderSpecBench measured action-boundary violation rates of 55.8-67.8%, including Wrong Target and OverScope cases. AxiomGate is the layer that stops that.

Open the dashboard View on GitHub
Try it, no setup
$npx axiomgate replay all
Zero runtime dependencies Enforced, not suggested Verifiable offline
axiomgate · governed mission replay · 1 denied 
$ axiomgate mission run◆ contract msn_lockout · sha256:d5548d7d9c…
✕ DENY  preview.deploy · PreToolUse        'acme-staging' is not owned by mokimeow        EXISTS_NOT_OWNED · recorded as evidence
✓ PASS  lockout engages after 5 failed logins · evd_impl✓ PASS  the change exposes no secrets · evd_secr
$ axiomgate receipt verify✓ PASS  receipt integrity · 5/5 checks · offline
Plan · Govern · Execute · Prove

Five governed stages. Every claim carries its evidence.

A mission is compiled into a versioned, hashed contract before Codex writes a line. Every action and every claim of done is checked against it by machinery, not by the model's self-report.

1

Plan

Objective and acceptance criteria compiled into a hashed contract.

2

Guard

Identity resolved. Every action policy-checked at the Codex hook.

3

Run

Codex builds under sandbox and intent boundary. Usage is ledgered.

4

Verify

Tests and scanners produce machine evidence. Model claims don't count.

5

Prove

Completion gated on evidence. A tamper-evident receipt is emitted.

Tamper-evident by construction

"Done" is a receipt, not a vibe.

Every mission ends in a Build Receipt: contract hash, commit, and a hash-chained evidence trail for every criterion. Anyone can verify it offline. No server, no account, no trust in the agent's word.

  • ✓Chained evidence. Each record hashes the previous one. Edit anything and verification fails.
  • ✓Admissibility. Only machine-sourced evidence counts. Model-claimed proof is rejected.
  • ✓Completion gate. COMPLETE only when every required criterion is PASS or WAIVED.
$axiomgate receipt verify
Local-first

Runs where your code runs.

Three commands. No cloud, no account. Mission state lives in your workspace's .axiomgate/ directory and receipts verify offline.

Sample Hosted previews show sample data and are always labeled. Real use is local: the dashboard reads your workspace's state directly.
quickstart · 3 commands
# 1 · clone and install
$git clone https://github.com/mokimeow/axiomgate && pnpm install
# 2 · run a governed mission in your workspace
$axiomgate mission run --workspace /path/to/project
# 3 · open mission control
$node apps/web/server.mjs --workspace /path/to/project

Ship proof, not promises.

Give Codex real authority boundaries and demand real evidence back. Plan. Govern. Execute. Prove.

Open the dashboard View on GitHub