The Passport Office for the AI Economy

Deterministic Control for Probabilistic Tools

Generative AI can write code, but it can’t follow the rules.

It leaks secrets, invents dependencies, bypasses architecture, and shrugs at policy.Cabin Crew helps you deliver AI-generated work safely and effortlessly. It’s the correction loop that closes the gap between “AI magic” and production reality.

When an agent hallucinates a hardcoded key, we don’t just fail the build — we push the violation back to the agent with explicit guidance: “Try again, but use an environment variable.”

The agent fixes its own mistake.

You get production-ready code on the first review. And Compliance gets a cryptographically signed Black Box log of every correction, every decision, and every enforcement — automatically.

Try It on Your Open Source Repo — Free Forever

Install the Cabin Crew GitHub Action on any OSS repository and let your agents self-correct while you’re drinking your coffee. It integrates seamlessly with GitHub Models, works even under strict rate limits, and is lifetime-free for open source projects. Add Cabin Crew to your repo and watch bugs get fixed while you relax.

Install Cabin Crew GitHub Action

Platform Components

The Protocol

Every interaction follows the Plan → Govern → Apply lifecycle. Artifacts are hashed and signed, policies validate decisions, and receipts prove execution.

The Orchestrator

Platform-agnostic Go/Rust binary with embedded OPA for policy enforcement. Uses keyless OIDC for identity and generates cryptographically sealed audit logs.

The Engines

OCI-native workers (Scout, Planner, Dev, Infra, Tower) that execute specialized tasks. Open source and distributed as container images.

Audit Storage

Self-contained proofs (audit.json) with pluggable drivers. Default pushes to Git orphan branch, enterprise fans out to Splunk/S3.

Keyless Identity

No long-lived keys. Uses OIDC tokens from GitHub/AWS/GitLab to sign logs. Zero-config for OSS users via GitHub Actions adapter.

OCI-Native

Engines distributed as OCI images, executed as subprocesses to share host tools (git, npm). Content-addressable caching for CI efficiency.

View on Github

Ready to bring trust to your AI workflows?

Get Started

Open Core Architecture

We believe that the machinery of work should be a commodity, but the machinery of trust must be a standard.

The Engines are Open: We release our core PM, Dev, and Context engines under the Apache 2.0 license. We want the community to build better, faster, smarter workers.

The Protocol is Open: The JSON schema that defines how agents communicate is open for anyone to adopt.

The Governance is Guaranteed: The Cabin Crew Orchestrator ensures that regardless of which engine you use, the safety rails remain absolute.

Learn About Our Model

Plan
Govern
Apply

The Passport Office
For The AI Economy

Built on Open Standards
Secured for Enterprise

Keyless Identity
Zero-Config for OSS