SHADI

Secure Host for Agentic AI Dynamic Instantiation (SHADI) is a secure runtime for AI agents.

It gives agents a safer place to run by combining identity verification, gated secret access, OS-level sandboxing, encrypted local memory, and secure messaging.

Why SHADI

SHADI is for teams that want agents to work with real tools and real credentials without treating the host machine as a fully trusted environment.

• Verify who an agent is before releasing secrets.
• Constrain what a process can read, write, execute, and reach on the network.
• Keep local memory encrypted at rest.
• Connect agents over authenticated SLIM messaging.
• Audit changes with snapshots and runtime inspection tools.

What You Get

• shadictl: the main CLI for policy, sandbox execution, identity, secrets, memory, and shell control.
• agentbridge: a general-purpose agent interconnect over A2A — coding CLIs (Claude Code, Copilot, Codex, Cursor Agent) are the flagship use case.
• shadi_sandbox: OS-enforced sandbox policy.
• agent_secrets: keychain-backed secret storage and verification gates.
• shadi_memory: SQLCipher-backed local memory.
• agent_transport_slim: secure transport and stdio bridge support.
• examples/shadi_demo_bot: a Rust demo bot that exercises the main SHADI features, including SLIM messaging.

Install the CLI

On Linux, install the latest released shadictl with:

curl -fsSL https://agntcy.github.io/shadi/install.sh | bash

For pinned versions, custom install paths, and installer environment overrides, see Install the CLI.

On macOS, you can install the latest released shadictl or agentbridge formula with Homebrew:

brew tap agntcy/shadi https://github.com/agntcy/shadi
brew install agntcy/shadi/shadictl
brew install agntcy/shadi/agentbridge

On Windows, once the matching WinGet manifest has landed in the default source, you can install or upgrade either CLI with:

winget install --id AGNTCY.shadictl -e
winget install --id AGNTCY.agentbridge -e
winget upgrade --id AGNTCY.shadictl -e
winget upgrade --id AGNTCY.agentbridge -e

Each Homebrew formula builds from its own published release tag (agntcy-shadi-cli for shadictl, agntcy-agentbridge-cli for agentbridge). Both releases also include prebuilt archives for Linux (x86_64 and aarch64), macOS (arm64 and x86_64), and Windows (x86_64). For unreleased changes or any other host, use the source build flow below.

Quick Start

cargo build --workspace
cargo test --workspace
cargo run -p shadi_demo_bot -- feature-bot

The demo bot runs a compact end-to-end check across secrets, memory, sandboxing, and local SLIM messaging.

Learn More

• Start here: Getting Started
• System model: Architecture
• Security model: Security Notes
• CLI reference: CLI Reference
• Sandbox and policy details: Sandbox and Policies
• Shell and demo workflows: examples/shell_demo/README.md and examples/shadi_demo_bot/README.md

Contributing

See CONTRIBUTING.md, CODE_OF_CONDUCT.md, and SECURITY.md.

License

See LICENSE.md.