Interfaces CLI + MCP Local or hosted
Control boundary Approval-gated No active routing
Decision records Append-only Canonicalized and hashed
Gateway output Credential-free LiteLLM, OpenRouter, Portkey Control-plane interfaces Recommendations and route changes stay inspectable at each boundary.
Private state stays private
Developers
One CLI, local or hosted. The same recommendation contract can run locally or through the authenticated hosted service.
pnpm optimizer recommend \
--decision-key coding-2026-08-03 \
--workload coding-agent \
--policy research-defaultAgents
Nine typed MCP tools. Recommend, explain, simulate, generate, inspect, diff, approve, roll back, and poll route-change alerts through the same service contract.
Explainable decisions Bounded fallbacks
Control boundary
Approval is data, not a mutable flag. Every decision, configuration, approval, rejection, rollback, and alert is tenant-isolated, append-only, canonicalized, and hashed.
Tenant-isolated No active routing
Decision lifecycle
Inspect every transition Stage 4 applies later; this control plane produces bounded, reviewable records.
Stage 4 applies later
01 Recommend Join exact public evidence, independent performance, private terms, balances, budgets, and policy into one immutable decision.
02 Simulate Replay the exact snapshot or test explicit counterfactuals without rereading changing data or sending inference traffic.
03 Generate Emit credential-free LiteLLM, OpenRouter, or Portkey documents with source digests and a bounded fallback sequence.
04 Approve Bind approval or rejection to one exact manifest digest. Rollback creates a new unapproved revision instead of rewriting history.
Machine-readable contract
Discover the interface without exposing private data. The public endpoint describes commands, hosted transports, and safety semantics. Recommendation inputs and outputs stay behind a tenant-scoped bearer token.