Ovara

Ovara is runtime trust infrastructure for autonomous systems: a low-latency, single-binary Go gateway that intercepts machine-driven actions (shell, Git, GitHub, CI/CD), applies cryptographically-verified machine identity, evaluates policy, and computes trust signals.

Pre-release

Ovara is under active construction toward a V1.0.0 release. This documentation describes the design and the working gateway. Follow the repository for release updates.

Why Ovara exists

Cloud IAM, API gateways, workload identity, and observability were built for humans, deterministic services, predictable control flow, long-lived credentials, and bounded automation.

Autonomous systems change the threat model and the execution model. They make decisions at runtime, use tools adaptively, operate under delegated authority, and can drift over long horizons. Existing systems can authenticate these systems, but they cannot adequately constrain, explain, or revoke them at the moment of action.

Ovara provides that missing layer.

The missing control layer

Ovara sits on the execution path between an autonomous agent and a consequential action (shell, Git, GitHub, CI/CD). It provides the control layer that lets you constrain, explain, and revoke machine authority at the moment of action.

Where to go next

• Getting Started - run the gateway, issue your first decision
• Core Primitives - the five building blocks
• Execution Surfaces - the 11 intercepted action types

Repository

SidianLabs/OVARA (Go; Apache 2.0).