Rebekah

A reproducible home for governed agentic work.

A self-hosted, Nix-built OCI runtime combining local inference, agent execution, engineering provenance and durable review evidence.

Source & runtime Deployment contract Ephor governance

One runtime, distinct responsibilities

OpenCode handles interactive agents; Ollama provides local inference; Sylvae runs portable skills; WeftMark keeps engineering provenance and review evidence. Nostoi provides audit-chain tooling.

Services run with separate identities and state directories. Loopback services are reached through an authenticated, allow-listed gateway; runtime secrets are injected rather than included in the image.

Governance is an explicit integration

Ephor is opt-in. The public baseline image works without it; the separate governed image includes the fail-closed connector and oversight path.

Ephor was formerly KAGP, the Konsonans AI Governance Platform. Older documentation and integration names may use that name; they refer to the same project's earlier identity.

Build, pin, verify

Follow the deployment contract to build with Nix, inject secrets at runtime, pin the image by digest or image ID, and verify it in a real container. Local service health is distinct from this website's health endpoint.

Cloudflare hosts this project website. The self-hosted OCI services and authenticated gateway remain on the operator's runtime host.