From first launch to a verified change.
Astvyr is designed so the first useful result arrives in minutes, without uploading a repository you have not agreed to share.
The first run, in six steps.
- 01First run asks for a privacy and model choice. It does not upload a repository by itself.
- 02Import settings and extensions, or start clean.
- 03Connect a repository — local, or through the source control integration.
- 04Run read-only analysis first: indexing, architecture map, risk hotspots, no writes.
- 05Start a low-risk Mission and review the acceptance contract before approving it.
- 06Read the evidence bundle, then release through the gate.
Headless Missions, CI and runner control.
Stable output schemas, a non-interactive mode and deterministic exit codes. Signed binaries with device-bound authentication.
| Command | Purpose |
|---|---|
| astvyr mission create | Create a Mission from an intent, an issue reference or a template. |
| astvyr mission run | Run headless in CI with a service identity and a deterministic exit code. |
| astvyr mission watch | Stream timeline events and checkpoints in machine-readable form. |
| astvyr mission approve | Approve a contract, a plan, a diff or a release from the terminal. |
| astvyr evidence export | Export a sealed evidence bundle for an audit or a customer review. |
| astvyr runner enroll | Enrol a customer-hosted runner inside your own boundary. |
| astvyr twin create | Create an ephemeral Twin with a cost estimate and a hard ceiling. |
The states you will see in the timeline.
Pause, resume, cancel, retry or branch from a checkpoint. State is preserved across disconnects and restarts.
DRAFT → CONTRACTING → AWAITING_APPROVAL → PLANNING → READY → RUNNING → PAUSED → BLOCKED → VERIFYING → REWORK → EVIDENCE_READY → AWAITING_RELEASE → RELEASING → OBSERVING → COMPLETED → FAILED → ROLLED_BACK → CANCELLED → REJECTED → REOPENED
Pass
Criteria are covered by independent evidence.
Fail
A criterion is provably broken.
Inconclusive
Evidence is missing or stale. It is never silently converted into a Pass.
Needs human judgment
The trade-off belongs to a person, and the residual risk is recorded.
Seven interfaces, one authorisation model.
Versioned, idempotent and rate limited, with server-side authorisation on every resource and action.
Public REST API
Versioned, idempotent, paginated, rate limited, stable error model.
Query API
Complexity limits, field-level authorisation, persisted queries.
gRPC
Internal services over mTLS with a schema registry and deadlines.
Event bus
At-least-once delivery, idempotent consumers, ordering keys, replay policy.
Webhooks
Signed payloads, retries, delivery logs, secret rotation.
CLI
Stable output schemas, non-interactive mode, deterministic exit codes.
Tool adapter
Explicit scopes, schema validation, sandbox and policy mediation.
Connect the tools that already hold your truth.
Astvyr orchestrates existing controls and never bypasses an approval silently.
SOURCE CONTROL
GitHub, GitLab, Bitbucket
ISSUES AND KNOWLEDGE
Jira, Linear, Azure Boards, Confluence, Notion
CI/CD
GitHub Actions, GitLab CI, Jenkins, CircleCI, Buildkite, Azure Pipelines
PROGRESSIVE DELIVERY
Argo CD, Argo Rollouts, Flux, Harness, Spinnaker
CLOUD
AWS, Azure, Google Cloud
KUBERNETES
EKS, AKS, GKE, OpenShift, self-managed
INFRASTRUCTURE AS CODE
Terraform, OpenTofu, Pulumi, Ansible
OBSERVABILITY
OpenTelemetry, Datadog, Grafana, New Relic, Sentry, Elastic
SECURITY
SAST, SCA, container and IaC scanners, SIEM, secrets managers
COMMUNICATION
Slack, Microsoft Teams, email, PagerDuty, ServiceNow
FEATURE FLAGS
LaunchDarkly and compatible providers
IDENTITY
Okta, Microsoft Entra ID, Google Workspace, SAML, OIDC, SCIM
BILLING
Stripe and enterprise invoicing and tax providers
Platforms and channels.
Signed updates with rollback. Enterprise LTS keeps an admin-controlled upgrade window.
- Windows x64 / ARM64
- macOS Intel / Apple Silicon
- Linux x64 / ARM64
- StableStaged rollout, minimum soak, rollback, signed provenance.
- Early accessNot offered before release. After release: opt-in, a separate telemetry and evaluation cohort, a clear downgrade path.
- InsiderDaily builds with no production guarantee.
- Enterprise LTSLong support, security backports, an admin-controlled upgrade window.
- Air-gappedOffline signed bundles, checksums, chain verification and a rollback package.
Everything is versioned, including the contract.
Prompts, policies, agent profiles and evidence formats carry versions, so a decision can be reconstructed later.