Native client
Waymark Studio
SwiftUI mission control for work, Products, evidence, setup, and approvals.
Architecture
A control plane agents cannot rewrite.
Studio and the CLI ask. Waymark Engine decides. Broker performs privileged work. Core defines the safe language between them.
Headless client
waymark CLI
Scriptable commands and JSON over the same exact, versioned protocol.
Local authority · waymarkd
Waymark Engine
Owns durable state, scheduling, command admission, lifecycle, and the only writable execution surface.
Privileged boundary
Waymark Broker
Owns credentials, git, process execution, network writes, policy gates, persistence, evidence, and recovery.
Agent-facing foundation
Waymark Core
Pure models for intent, plans, scope, validation, decisions, and Tier-A-safe summaries.
With login launch enabled, Waymark Engine can keep routine governed work moving while no Studio window is open. Human decisions remain parked until an operator answers from Studio or the CLI.
Defense in depth
One boundary, reinforced four ways.
Compile-time
Core cannot reference Broker executors, credentials, UI, process APIs, or network clients.
Runtime
Agent harnesses launch inside OS-enforced sandboxes with a rebuilt, allowlisted environment.
Workspace
Managed worktrees and RepoSeatbelt place active work and recovery on separate capability paths.
Evidence
Safe durable records exclude raw prompts, code, diffs, credentials, and command output.
Data boundary
Useful history without a source-code exhaust trail.
Tier A · Durable
Safe operational facts
Identifiers, hashes, scopes, verdicts, counts, timings, policy versions, and bounded summaries.
Tier B · Local
Sensitive working material
Source, diffs, prompts, transcripts, screenshots, command output, credentials, and raw artifacts.
Private preview
Help shape the safer way to ship with agents.
Join the Studio waitlist for product progress, early previews, and launch access.