OMNIS KEY V1
One key.
Every engine.
A governed runtime for local, receipt-backed engineering intelligence. Every model and tool call passes the gate first; every action earns a hash-chained receipt. Secure, local, architectural โ not a chatbot cosplaying as an OS.
intent model or tool request enters
gate BIFROST โ deterministic brake on policy
tool VANTAGE ยท CADMUS ยท governed MCP
envelope VELLUM โ signed action receipt
ledger LUNA โ hash-chained, re-runnable
RELEASED
alt BRAKED before execution when policy refuses
The gate is the product โ nothing executes on a vibe.
Why it exists
Agents and copilots can drift, leak, or take destructive actions with no audit trail. OMNIS KEY runs engineering work locally behind a deterministic gate: specify, verify, discover, remember โ with the same input producing the same verdict and the same hash every run.
Four engines
Specify โ Verify โ Discover โ Remember. PROSPECTOR and LUNA ship live underneath; full OMNIS orchestration is V1.
What makes it different
Governed MCP
Every MCP call through the gate โ proven on the real protocol, not a mock.
Install
Two ways in โ local server on loopback, workbench in your browser. Requires Node.js 18+ on PATH.
pip pip install --upgrade omnis-key==0.1.4
run omnis โ full workbench
flag omnis --lockdown โ air-gapped, no cloud lanes
flag omnis --no-agents โ deterministic tools only
mac signed Developer ID ยท notarized ยท macOS 13+
Download & install guide Mac DMG 0.1.4
Full install steps, checksum, and proofs live on omniskey.ai.
Plain English
OMNIS KEY is one local keyring for serious engineering work. You ask it to spec a build, audit code, map a messy repo, or remember what happened last sprint โ but nothing dangerous runs until the gate says yes, and everything that does run leaves a receipt you can verify later. Same question, same answer, same hash.
Boundaries
OMNIS is the engineering OS layer inside MIRRORVERSE โ not HYGEIA clinical safety, not BACCHUS hospitality ops. Governance claims are re-runnable artifacts; we do not ship what we cannot prove on the receipt wall.