Developers

Build agents that respect the map.

Local-first enforcement for Claude, Codex, and Grok Build.

Adapters stay thin: they ask the local runtime what to do, and the runtime makes the deterministic decision.

Send an event. Get a decision. Ship a thin adapter.

One runtime contract. Every adapter, every agent, every language pack hits the same local boundary.

Adapter sends

{ intent: "write", path: "src/auth.ts" }

Runtime returns

{ decision: "allow", receipt: "r-7421" }

Contract

Thin adapters. Deterministic runtime.

Each adapter sends a lifecycle event; the local runtime returns allow, deny, ask, warn, restore, context, or receipt.

lifecycle eventintent: "write"paths: ["src/auth.ts"]task: "t-7421"

decision

allow + receipt

Runtime contract

Send a lifecycle event with affected paths and intent. Receive allow, deny, ask, warn, restore, context, or receipt.

objectiverefactor auth

allowedsrc/auth/**

touched4 files

Active task scope

Tasks narrow project allowed paths. Writes outside the task scope are denied with an in-scope hint.

javascript / typescript

python

rust

swift

java / kotlin

c# / .net

c / c++

ruby

php

sql

shell

config / build

Language packs

Detect files, extract symbols and references, emit chunks and diagnostics. No built-in packs — install only what the project uses.

Allow

r-7421

Ask

r-7422

Deny

r-7423

Receipts

Every decision can produce a compact receipt that batches to the server. Receipts never contain raw source.

Drift spotlight

Same edit cycle. Two outcomes.

One file. One task. The agent loads, modifies, saves, reverts, and reloads until policy or repository state diverges.

Scenario A

Without GlyphMap

Unenforced. Probabilistic. Drift accumulates each iteration.

Entropyrising

Checksum driftrising

Semantic divergencerising

Out-of-scope writesrising

Formatting drift detectedearly
Structural divergence in exportsearly
Unverified import inventedmid
Semantic instability escalatesmid
Generated output mutatedlate
Protected artifact write attemptedlate
Cumulative drift accumulationterminal

Initial → finalproject map fingerprint stable → project map fingerprint divergentDivergent, integrity degraded

Scenario B

With GlyphMap

Decision trees. Verified context. Drift denied at the boundary.

Entropybounded

Checksum driftbounded

Semantic divergencebounded

Out-of-scope writesdenied

Active task scope enforcedearly
Context packet bounded by taskearly
Invented import denied by mapmid
Delete redirected to _removedmid
Generated output write deniedlate
Receipt batch syncedlate
Deterministic repository state preservedterminal

Initial → finalproject map fingerprint stable → project map fingerprint stableIntegrity preserved

Conceptual comparison of the failure-mode envelope. Live per-workspace receipts are visible in the dashboard after install.