Deny by Default
A request is denied unless an explicit policy rule makes it eligible.
OPEN-SOURCE SYSTEM
PRE-ALPHA · v0.1.0a3CLU Governance
A local-first preflight boundary for AI-proposed source changes. CLU evaluates eligibility and produces bound evidence; approval and application remain deliberately separate.
AI-PROPOSED CHANGE+POLICY+CURRENT SOURCE STATE↓ LOCAL PREFLIGHT ↓ALLOW / DENY EVIDENCE
APPROVAL + APPLICATION
OUTSIDE CLU
OUTSIDE CLU
THE PROBLEM
A source edit should not authorize itself.
A capable agent can propose a useful change and still be wrong, stale, outside policy, or operating on different bytes than a reviewer inspected. CLU narrows that problem to a local, testable boundary.
CONTROLLED SOURCE-CHANGE ARCHITECTURE
Evaluate. Bind. Stop.
- 01RequestOperation, target, caller-declared context.
- 02Current StateExisting bytes and repository conditions.
- 03Deny-by-Default PolicyExplicit allow rules; everything else denied.
- 04EvidenceDecision and rollback readiness bound to inputs.
- 05Allow / DenyEligibility result for an external authority.
- CONTROL BOUNDARY
- 06ApprovalOutside CLU’s current authority.
- 07ApplicationOutside CLU; no stage, commit, or push.
REAL INTERFACE
Eligibility is not authorization.
decisionallow
reason_codeeligible_for_human_approval
rollback_readiness_verifiedtrue
operator_approval_requiredtrue
mutation_authorizedfalse
mutation_appliedfalse
network_calls0
CURRENT SUPPORT
A narrow implementation with explicit edges.
Source-State Binding
Evidence is tied to the proposal, policy, and current source state used for evaluation.
Rollback Readiness
The preflight checks for recovery material before a request becomes eligible.
Offline Envelope
Current main can serialize and verify a local unsigned evidence envelope.
No Mutation Path
CLU does not approve, edit, stage, commit, push, or otherwise apply the proposed change.
Claude Edit Adapter
The current adapter covers a limited existing-file Edit path and maps allow to ask—not automatic permission.
PUBLIC EVIDENCE
Inspect the implementation, not the adjective.
229tests on current main
6 / 6latest CI jobs passed
3.12supported Python baseline
0runtime dependencies
Current-main counts are newer than the tagged v0.1.0a3 prerelease. The repository remains pre-alpha.
WHAT CLU DOES NOT PROVE
The limits are part of the evidence.
Not production or enterprise readyNo authenticated human identityNo signed or immutable provenanceNo non-bypassable security sandboxNo universal rollback guaranteeNo regulatory compliance claim
SOURCE + TESTS + ARCHITECTURE
Inspect CLU on GitHub.
Read the public implementation, policy examples, test suite, workflows, and documented limitations.