Agent
Long-running process on the project VM. Workflow engine, GitHub App, encrypted secrets, safety checks. This is the autonomous software.
Batteries-included software factory · the model is a tool
One agent per project and a swarm of coding-runtime workers under a single opinionated harness — taking your production system from issue intake to reviewed, staged, and shipped. Claude, Grok, and Codex are spawned as tools; they never own the loop.
curl -fsSL https://pub-320c65d12c95410aa947b2b539e51834.r2.dev/install.sh | sh
Linux x86_64. One steelframe binary: TUI, agent, and
updater. No compiler on the box.
Long-running process on the project VM. Workflow engine, GitHub App, encrypted secrets, safety checks. This is the autonomous software.
Multi-project console on your laptop. Connects over HTTPS. Does not run autonomy loops. First launch opens the config wizard.
Claude Code, Grok Code, or Codex — a CLI the agent starts for implementation, review, and chat. Swappable. Never sees raw secrets.
A factory is more than rules. Steelframe also ships the workflow engine, GitHub intake, the consoles, and the release channel. The harness is the part that lives in your repo.
Lint-before-push, format-on-edit, no --no-verify,
CI before merge. The command is yours; the gate is Steelframe’s.
Feature branch, no push to protected refs, staging before
production, explicit prod promote. Topology
(pr.base, protected refs) is a project overlay.
The agent diffs the merged pack and opens one
sf/harness PR when the tree drifts. You merge it.
Missing or stale pack files become a PR, not a reminder.
Labeled GitHub issues become workflow runs. The selected coding
runtime implements on an sf/ branch.
Open PRs Steelframe did not author get a review. Its own heads and the GitHub App bot are skipped.
Staging deploy and healthchecks run on the PR. Only then squash-merge to main. Agents never push main.
Production monitor uses HTTP checks, Grafana (gcx),
and optional kubectl. Incidents open issues, not hotfixes on main.
After install, run steelframe. First launch walks you
through steelframe config — name, agent URL, bearer
token. Chat, dashboard, credentials: the TUI talks to the agent, not
to GitHub as you. steelframe update keeps the binary
current.
steelframe setup installs git, gh, gcx, kubectl, and one
coding runtime. Then
sudo STEELFRAME_MASTER_KEY=… steelframe agent install
writes systemd. You still add a GitHub App and, for a public URL,
nginx + SSO.
sf/… feature branches.
Never directly to main.
.steelframe/harness.toml. Steelframe will not
silently revert a declared overlay.