SHADI and AgentBridge
SHADI (Secure Host for Agentic AI Dynamic Instantiation) hardens this
machine. AgentBridge connects agents that may live on this host or on
other hosts.
SHADI is the local security boundary: identity verification, gated secret
access, OS-level sandboxing, encrypted local memory, and the SLIM node this
host admits. It does not control a remote agent's process, files, or
sandbox — only what runs here.
AgentBridge is the A2A interconnect across that gap. It wraps Claude Code,
Copilot, Codex, Cursor Agent, or any CliAdapter as a DID-signed listener
and talks to peers over SLIM, wherever they are registered. list --local
shows listeners on this host; delegate, handoff, and coordinate reach
a slim:// peer on this machine or another.
Why this repo
For teams that want a locked-down host for the agents they run locally, and
a way to pass work to agents that are not on that host.
- Verify who a local agent is before releasing secrets on this machine.
- Constrain what a local process can read, write, execute, and reach.
- Keep this host's memory encrypted at rest.
- Admit only authenticated SLIM peers onto this host's node.
- Reach agents on other hosts over A2A (
agentbridge), not ad-hoc pipes.
- Audit local changes with snapshots and runtime inspection tools.
What You Get
shadictl: the main CLI for policy, sandbox execution, identity, secrets, memory, and shell control.agentbridge: the A2A interconnect across hosts — coding CLIs (Claude Code, Copilot, Codex, Cursor Agent) are the flagship peers.shadi_sandbox: OS-enforced sandbox policy.agent_secrets: keychain-backed secret storage and verification gates.shadi_memory: SQLCipher-backed local memory.agent_transport_slim: secure transport and stdio bridge support.examples/shadi_demo_bot: a Rust demo bot that exercises the main SHADI features, including SLIM messaging.
Install the CLI
On Linux, install the latest released shadictl with:
curl -fsSL https://agntcy.github.io/shadi/install.sh | bash
For pinned versions, custom install paths, and installer environment overrides,
see Install the CLI.
On macOS, you can install the latest released shadictl or agentbridge
formula with Homebrew:
brew tap agntcy/shadi https://github.com/agntcy/shadi
brew install agntcy/shadi/shadictl
brew install agntcy/shadi/agentbridge
On Windows, once the matching WinGet manifest has landed in the default source,
you can install or upgrade either CLI with:
winget install --id AGNTCY.shadictl -e
winget install --id AGNTCY.agentbridge -e
winget upgrade --id AGNTCY.shadictl -e
winget upgrade --id AGNTCY.agentbridge -e
Each Homebrew formula builds from its own published release tag
(agntcy-shadi-cli for shadictl, agntcy-agentbridge-cli for agentbridge).
Both releases also include prebuilt archives for Linux (x86_64 and
aarch64), macOS (arm64 and x86_64), and Windows (x86_64).
For unreleased changes or any other host, use the source build flow below.
Quick Start
cargo build
cargo test
cargo run -p shadi_demo_bot -- feature-bot
The demo bot runs a compact end-to-end check across secrets, memory, sandboxing, and local SLIM messaging.
Learn More
Contributing
See CONTRIBUTING.md, CODE_OF_CONDUCT.md, and SECURITY.md.
License
See LICENSE.md.