Agents propose. You approve.

Trust

Built by Ciel. KitsuneOS runs in production as the data layer under Ciel.

• 60 passing acceptance tests
• Cross-tenant isolation verified by named Gate 0b tests

The problem

Agents write. Postgres assumes human-reviewed code. Teams rebuild staging and approval flows badly, over and over.

Product

Change sets

Every mutation is a proposed change set. Nothing lands without review.

Grants

Field masks and row predicates restrict what each principal can see or propose.

History

Every write produces a revision attributed to the acting principal.

Proof

Known limitations

• Create-only schema in v0.1 — no migrations yet
• No GraphQL layer
• Table-count ceiling per workspace

Get started

Sign up and connect your agent with an API key.