Open components by execution-governance layer.

The open stack separates policy publication, deterministic compilation, proposal shape, admissibility evaluation, and runtime mediation. Commercial Cloud, Console, Ledger Workspace, Guard Inspector, and multi-tenant operations remain separate product surfaces.

Current developer path

pip install waveframe-guard==0.19.0

Guard 0.19.0 wraps the customer's existing mutation callable. It works with custom agents and common orchestration frameworks without requiring a Waveframe-specific agent loop.

Guard protects the callable path that is actually wrapped. Direct access to the original function, another API, shell, process, or credential path is outside that enforcement guarantee unless deployment permissions independently remove the bypass.

Layered ecosystem

Governance

Waveframe Ledger 0.9.0

Authoring / Publication

Turns supported policy meaning into reviewable, publishable authority while preserving unsupported or residual meaning instead of silently guessing it. v0.9.0 adds catalog 3 with independently approved create/modify authority, action-scoped roles and selectors, and fresh approval.

ConsumesSource policy, capability/domain constraints, human decisions

EmitsPublished authority, bundles, commitments, receipts, lineage

Does notRun enforcement or make model output authoritative

Install: pip install governance-ledger==0.9.0

Compilation

CRI-CORE Contract Compiler 0.5.0

Deterministic Contract Build

Compiles approved governance JSON into stable contract artifacts and deterministic hashes. v0.5.0 adds compile_action_policy for separate create/modify roles plus literal exact/prefix allow and deny selectors.

ConsumesApproved legacy or action_policy.v1 governance JSON

EmitsCompiled authority contract + contract hash

Action APIcompile_action_policy(...); the existing CLI remains legacy-only

Install: pip install cricore-contract-compiler==0.5.0

Proposal

Proposal Normalizer 0.2.0

Canonical Input Shape

Builds the canonical proposal boundary consumed by CRI-CORE while preserving caller-supplied contract truth rather than inventing authority.

ConsumesActor, mutation, artifacts, contract reference

EmitsCanonical proposal envelope

Does notInterpret policy or decide admissibility

Install: pip install cricore-proposal-normalizer==0.2.0

Kernel

CRI-CORE

Admissibility Kernel

Evaluates a canonical proposal against compiled authority and returns the deterministic commit decision. PyPI and GitHub provide 0.14.0 with strict-by-default evaluation. Direct PyPI metadata confirms publication despite the older pending wording in the GitHub release record.

PyPI baselinecricore==0.14.0

GitHub releasev0.14.0

Does notExecute the mutation

Runtime

Waveframe Guard 0.19.0

Mediated Execution Boundary

Guard.local() and Guard.cloud() wrap sensitive tools, resolve/verify authority, evaluate immediately before callback execution, and block the callback when authority does not permit it. v0.19.0 adds catalog-3 governed repository creation and modification with separate action authority; repository writes use repository_tool and a bound RepositoryTarget.

ConsumesActual tool call, actor identity, explicit authority ref

EmitsDecision plus execution/mutation evidence

Does notGenerate actions, author policy, or sandbox the entire process

Install: pip install waveframe-guard==0.19.0

Authority / Evidence

Waveframe Cloud

Commercial Operations Plane

Hosts authority distribution, runtime identity, evidence preservation, receipts, and Console operations. v0.6.0 is the latest published release and adds native Ledger v4 create/modify publication plus guided runtime connection with public Guard 0.19.0. Production activation remains a separate blocked handoff, so this release is not presented as a completed hosted cutover.

ConsumesPublished authority and governed evidence

EmitsRegistry/publication responses, receipts, operational views

Does notReplace Guard's local admissibility decision

30-second integration shape

pip install waveframe-guard==0.19.0

Start with the public SDK, then use the repository creation example for action-scoped create/modify authority or wrap an application capability through the documented Guard boundary.

Read package compatibility · Read architecture flows