Skip to content

umbra-core

An agent-agnostic change-control plane for coding agents.

Coding agents (Claude Code, Codex, Cursor, Copilot, Devin) can change your repository. umbra-core is the layer that decides how much authority a given change has earned — and proves it — for any agent. It sits above the agent, at the repository, where governance is enforceable.

For every change it runs one deterministic pipeline:

executable contract  →  untrusted-text quarantine  →  required checks  →
independent verifier  →  earned authority (0/1/2)  →  Ed25519-signed receipt

The governing insight: a coding agent cannot approve its own authority to make a change. The patch-writer is never the patch-approver. auto_merge is always false — a human merges.

Where to start

  • Quickstart — install and govern a change in minutes.
  • Concepts — the pipeline, earned authority, receipts.
  • GitHub Action — govern every PR (on the Marketplace).
  • Security — threat model and honest scope.

Install

pip install umbra-core