I built this because existing agent frameworks either give agents god-mode filesystem access with no safety controls, or they're too locked down to be useful.

Key things I cared about that most frameworks skip:

- Runtime HITL checkpoints — pause mid-execution when risk is high, resume from exact state - Hybrid memory: vector + BM25 keyword + graph entities/relations scored together, no external dependencies - Security as a primitive: path jail sandbox, OTP pairing, XOR-encrypted local secrets - 22+ LLM providers with per-agent model policy and fallback chains - Multi-agent councils with debate rounds, soul evolution, and skill memory

Node.js, Prisma, Postgres/Redis, Docker. 55/55 tests passing. Apache 2.0.

Happy to answer questions about any of the architecture decisions.