Kineti: file-bound test receipts, registered rollback, and a spend log with a cap for AI coding agents
v0.4.0
File-bound test receipts and registered rollback for AI coding agents.
Also a spend log with a cap. MIT. Works with Claude Code, Cursor, OpenCode, Codex and Antigravity through MCP.
$ kineti spend status
total $0 of $50; entries 0; tripped=false
$ kineti spend log --stage build --model sonnet --tokens-in 400000 --tokens-out 200000
logged $4.2 (stage build); run total $4.2
$ kineti spend log --stage build --model opus --tokens-in 100000 --tokens-out 60000
kineti: SPEND BREAKER TRIPPED: stage build total $10.2 reached ceiling $9.5 (exit code 3)
$ kineti spend check
kineti: TRIPPED: stage build total $10.2 reached ceiling $9.5 (exit code 3)
$ kineti spend reset
kineti: reset requires --i-am-human (breakers are human-only) (exit code 2)
$ kineti spend reset --i-am-human
breaker reset by human (exit code 0)
core-native/)Rust core with a hash-chained ledger and a commit check. Spend breaker exits with code 3 at 95% of recorded spend.
bin/, src/)rollback incomplete, exits 1, and that step stays pending.kineti-evidence.ts; receipts are not signed certificates.src/harness/benchmark.ts are design targets, not measured results: the ALE 76.4% pass rate, SWE-bench 4.2 min MTTR, and $0.31 per-outcome numbers are goal constants for the evaluation program. They have not been produced by empirical runs.Prerequisite: The CLI is distributed on npm and runs on Node.js (>= 18), but requires Bun (>= 1.1) installed on the system for governance execution (
curl -fsSL https://bun.sh/install | bash).
# Install globally (latest)
npm install -g kineti
# After v0.4.0 is published to npm, pin to that version
npm install -g kineti@0.4.0
# Or run directly with npx
npx kineti --help
Run Kineti as an MCP server in your editor for local test receipts, registered rollback, and a spend log. Spend totals are reported by the agent; Kineti does not independently measure provider billing or stop the agent from making calls outside Kineti.
Run Kineti's auto-configurator in your project directory:
kineti init
This detects your installed hosts (Claude, OpenCode, Codex, Cursor, Antigravity, Gemini, fx.sh), copies the 17 workflow skills into each one, writes the ~/.kineti/repo pointer, and prints the safety-hook block to paste into your host settings. Use kineti init --host <name> to install into a single host, or kineti init --install-root to add the project rule files.
MCP server config is not written automatically. Add it with the manual step below for your editor.
Initialize local project state separately from editor setup:
kineti state init --project my-project --goal "Describe the outcome for this run"
kineti init installs agent instructions and skills. kineti state init creates local task state. In CI, use kineti seed to create only missing state and spend files from kineti.config.json; it keeps existing locked state unchanged.
Claude Code (CLI):
claude mcp add kineti npx -y kineti mcp
Cursor:
Add to your project's .cursor/mcp.json or Cursor Settings $\to$ Features $\to$ MCP:
{
"mcpServers": {
"kineti": {
"command": "npx",
"args": ["-y", "kineti", "mcp"]
}
}
}
Windsurf uses a different path: ~/.codeium/windsurf/mcp_config.json, with the same mcpServers JSON.
OpenCode:
opencode mcp add kineti -- npx -y kineti mcp
Or add the block below to ~/.config/opencode/opencode.jsonc:
{
"mcp": {
"kineti": {
"type": "local",
"command": ["npx", "-y", "kineti", "mcp"]
}
}
}
Confirm with opencode mcp list.
Codex (CLI):
Add to ${CODEX_HOME:-$HOME/.codex}/config.toml:
[mcp_servers.kineti]
command = "npx"
args = ["-y", "kineti", "mcp"]
Confirm Codex sees Kineti:
codex mcp list
Kineti should appear in the list.
Google Antigravity: Install the Kineti skills into Antigravity:
kineti init --host antigravity
Gemini uses the same installer:
kineti init --host gemini
Neither host has a host-specific MCP command here. To connect the server, use the host's MCP settings to add a local stdio server with command npx and arguments -y kineti mcp. The exact settings format depends on the host.
Fx.sh: Install skill rules directly to your fx environment:
kineti init --host fx
Claude Desktop:
Add to ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows):
{
"mcpServers": {
"kineti": {
"command": "npx",
"args": ["-y", "kineti", "mcp"]
}
}
}
Cline / Roo Code:
Add a stdio MCP server in settings (Cline: .clinerules/mcp_settings.json, Roo Code: .roo/mcp_settings.json):
kinetinpx["-y", "kineti", "mcp"]# Start the visual companion dashboard (Apple HIG)
kineti companion
# Open http://127.0.0.1:8788
# Start the MCP governance server directly
kineti mcp
# Check spend circuit breaker status ($50 default ceiling)
kineti spend check
# Run tests and save a local workspace-fingerprinted receipt
kineti test -- echo hello
# Check local test receipt freshness
kineti test check --label test
# Prepare runtime state on a fresh CI checkout (run before tests and `kineti ci`)
kineti seed
# Run CI checks with required evidence labels
kineti ci --require-evidence typecheck --require-evidence unit-tests
CI workflows should pass every required test label to the gate. For example:
kineti ci --require-evidence typecheck --require-evidence unit-tests
The CI report checks the required receipts against the current workspace fingerprint and reports checks passed or blocked. It is not a signed safety certificate.
The Rust workspace contains eight separately versioned crates on crates.io. The v0.4.0 commands below are available after that release finishes publishing.
# Add the native core to your Rust project after v0.4.0 is published
cargo add kineti-core
# Or install the native CLI after v0.4.0 is published
cargo install kineti-cli@0.4.0
# Run the native Rust test suite locally
cargo test --manifest-path core-native/Cargo.toml
# Run the 5 native verification demo flows
cargo run --package kineti-cli -- test-all
kineti/
├── bin/ # TypeScript governance tools (single router: kineti.js)
│ ├── kineti.ts # CLI router source
│ ├── kineti-seed.ts # Creates missing CI state and spend files from config
│ ├── kineti-spend.ts # Self-reported spend circuit breaker ($50 ceiling, exit code 3, trips on recorded totals)
│ ├── kineti-saga.ts # LIFO undo stack & transactional rollback
│ ├── kineti-evidence.ts # Test exit codes with workspace fingerprints
│ ├── kineti-ci.ts # Required evidence and local state report
│ ├── kineti-companion.ts # Local dashboard server (loopback only)
│ └── kineti-mcp.ts # Model Context Protocol (MCP) server
├── core-native/ # Native Rust workspace (8 crates; harness uses Ed25519 library)
│ ├── Cargo.toml # Workspace manifest
│ └── crates/
│ ├── kineti-core/ # Double-buffered snapshots, HLC, Kernel, Commit Gate
│ ├── kineti-memory/ # Epistemic Engine, Multi-scope context, Tombstones
│ ├── kineti-reflex/ # Fast sensory classification & emoji reflexes
│ ├── kineti-connectors/ # Protocolized connectors & permission gating
│ ├── kineti-actions/ # Action execution & confirmation gates
│ ├── kineti-gateway/ # Messaging webhooks & bridge
│ ├── kineti-harness/ # Ed25519 OVT tools & Git worktree file separation
│ └── kineti-cli/ # Standalone native CLI binary
├── src/ # Shared TypeScript libraries (governance, scheduler, security)
├── skills/ # 17 agent workflow skills (installed by setup.sh)
├── hosts/ # 7 editor configurations (Claude, Cursor, Codex, OpenCode, Gemini, Antigravity, fx.sh)
├── hooks/ # 6 hook text blocks for host setup
├── public/ # Static legal pages
├── website/ # Static landing page (index.html plus video poster assets)
├── docs/ # Architecture specifications & security reports
│ ├── README.md # Docs index
│ ├── PLAN.md # Historical architecture proposal
│ ├── ARCHITECTURE.md # Rust core internals (not the CLI pitch)
│ ├── research/ # Research notes, not part of the CLI
│ ├── SECURITY_REPORT.md # Security audit & origin gating analysis
│ ├── TUTORIAL-first-run.md # Developer quickstart
│ ├── HOWTO-daily-loop.md # Daily operating loop
│ ├── SWARM_COORDINATION_AND_IDENTITY.md # Multi-agent identity & signing
│ └── MULTI_REPO_FLEET_AND_INTEGRATIONS.md # Fleet and integration design
├── tests/ # TypeScript governance and utility tests
├── .github/ # GitHub Actions CI, issue forms, PR template, Dependabot
├── AGENTS.md # Universal rules for AI agents in this repository
├── SECURITY.md # Vulnerability disclosure policy & SLAs
├── CONTRIBUTING.md # Development setup, testing, and DCO sign-off
├── LICENSE # MIT License
└── package.json # Kineti npm package manifest
Today Kineti provides local ledger tooling, registered rollback, spend totals based on agent reports, and test receipts bound to a workspace fingerprint. These tools do not mediate every agent action.
#![forbid(unsafe_code)] is enforced in the listed Rust crates.$50.00 default local ceiling, configurable in project settings; spend is agent-reported, and the logging command exits with code 3 near the recorded limit.For full architecture deep-dives and research treatises, refer to docs/README.md.
If you are an AI agent working in this repo, read AGENTS.md first. It holds all rules, workflows, memory spec, and program references in one file.
Distributed under the MIT License. See LICENSE for more information.
Humans and agents follow the same steps in CONTRIBUTING.md: setup, tests with proof, money rules, and the ship checklist.
FAQs
Kineti: file-bound test receipts, registered rollback, and a spend log with a cap for AI coding agents
The npm package kineti receives a total of 90 weekly downloads. As such, kineti popularity was classified as not popular.
We found that kineti demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Security News
On Front Lines’ Early Adopters: CISO podcast, Andrew Becherer shares lessons from Datadog, weighs the long-term costs of AI-built tools, and explains how founders can actually gain a CISO’s trust.
Security News
/Product
Socket for Origin scans dependency changes in pull requests and flags security risks based on your team’s policies. Now available in Cursor’s App Marketplace.
Security News
Agent Baseline’s new reference architecture shows how to secure software factories with four boundaries enforced outside the AI agent.