DOCS
Docs live in the repo.
We keep docs next to the source so they can't drift. Everything is Apache-2.0 and linkable.
README
Start here. Install, first policy, first tool call.
Architecture
Request path, component breakdown, threat model.
Policy guide
YAML schema, per-tool rules, principals, role forking.
Approval flow
HMAC signatures, single-use nonces, expiry, notifications.
Audit logs
Event shape, JSONL rotation, optional Postgres sink.
Budgets & cost audit
USD tracking per LLM call, /usage endpoints, per-agent caps.
Memory module
Optional: entities, episodes, graph traversals.
TypeScript client
@runestone-labs/gatekeeper-client — types + helpers.
Missing something? File an issue or email evan@runestonelabs.io.