permit0
Stop AI agents from doing things they shouldn't. The action authorization layer — pre-execution, deterministic, policies included. Drop in. Day one.
File Explorer
Download Latest Version (.zip)- config.toml
- SKILL.md
- architect.md
- fixer.md
- implementer.md
- reviewer-arch.md
- reviewer-correctness.md
- reviewer-design.md
- reviewer-spec.md
- spec-designer.md
- new-pack.md
- new-pack.md
- agent-pipeline.yml
- bootstrap.yml
- ci.yml
- PULL_REQUEST_TEMPLATE.md
- __init__.py
- _client.py
- test_guard.py
- pyproject.toml
- README.md
- 001-gmail-simple-email.yaml
- 002-outlook-simple-email.yaml
- 003-gmail-read-message.yaml
- 004-gmail-search.yaml
- 005-gmail-list-mailboxes.yaml
- 006-gmail-draft.yaml
- 007-gmail-archive.yaml
- 008-gmail-delete-single.yaml
- 009-gmail-mark-spam.yaml
- 010-gmail-send-internal.yaml
- 011-gmail-send-external.yaml
- 012-gmail-send-bulk-external.yaml
- 013-gmail-send-credentials-external.yaml
- 014-gmail-set-forwarding.yaml
- 015-gmail-add-delegate.yaml
- 016-gmail-unknown-tool.yaml
- 017-outlook-read-message.yaml
- 018-outlook-read-thread.yaml
- 019-outlook-move-folder.yaml
- 020-outlook-create-mailbox.yaml
- 021-outlook-delete-single.yaml
- 022-outlook-send-internal.yaml
- 023-outlook-send-external.yaml
- 024-outlook-send-secret-external.yaml
- 025-outlook-set-forwarding.yaml
- 026-outlook-add-delegate.yaml
- client.rs
- error.rs
- lib.rs
- reviewer.rs
- types.rs
- Cargo.toml
- audit.rs
- calibrate.rs
- check.rs
- digest.rs
- gateway.rs
- hook.rs
- mod.rs
- pack.rs
- serve.rs
- engine_factory.rs
- hook_config.rs
- main.rs
- cli_tests.rs
- pack_snapshot.rs
- Cargo.toml
- matcher.rs
- mod.rs
- parameter.rs
- path.rs
- mod.rs
- condition.rs
- mod.rs
- normalizer.rs
- pack.rs
- risk_rule.rs
- lib.rs
- lockfile.rs
- normalizer.rs
- pack_loader.rs
- pack_validate.rs
- risk_executor.rs
- validate.rs
- pack_integration.rs
- Cargo.toml
- mod.rs
- pipeline.rs
- proposal_store.rs
- types.rs
- analyzer.rs
- mod.rs
- override_store.rs
- types.rs
- context.rs
- engine.rs
- error.rs
- lib.rs
- Cargo.toml
- permit0.test.mjs
- lib.rs
- build.rs
- Cargo.toml
- index.d.ts
- index.js
- package-lock.json
- package.json
- vitest.config.js
- alias.rs
- context.rs
- error.rs
- fallback.rs
- lib.rs
- registry.rs
- traits.rs
- Cargo.toml
- lib.rs
- test_permit0.cpython-312-pytest-9.0.3.pyc
- test_permit0.py
- Cargo.toml
- pyproject.toml
- block_rules.rs
- config.rs
- constants.rs
- lib.rs
- scorer.rs
- template.rs
- property_tests.proptest-regressions
- property_tests.rs
- Cargo.toml
- amplifier.rs
- block_rules.rs
- context.rs
- lib.rs
- sqlite_storage.rs
- storage.rs
- types.rs
- Cargo.toml
- eval.rs
- loader.rs
- mod.rs
- parser.rs
- schema.rs
- dispatcher.rs
- lib.rs
- parsed.rs
- tokenize.rs
- pack_integration.rs
- Cargo.toml
- 0001_init.sql
- 0002_digests.sql
- 0001_init.sql
- 0002_policy_cache_v2.sql
- chain.rs
- digest.rs
- digest_writer.rs
- export.rs
- key_store.rs
- memory_sink.rs
- mod.rs
- otel_sink.rs
- pg_sink.rs
- redactor.rs
- signer.rs
- sink.rs
- sqlite_sink.rs
- stdout_sink.rs
- tee_sink.rs
- types.rs
- lib.rs
- pg_state.rs
- policy_state.rs
- policy_state_memory.rs
- policy_state_sqlite.rs
- Cargo.toml
- lib.rs
- Cargo.toml
- error.rs
- lib.rs
- provider.rs
- types.rs
- token_tests.rs
- Cargo.toml
- lib.rs
- norm_action.rs
- permission.rs
- risk.rs
- taxonomy.rs
- tool_call.rs
- taxonomy_doc_sync.rs
- Cargo.toml
- client.rs
- config.rs
- mod.rs
- role_mapper.rs
- routes.rs
- session.rs
- approval.rs
- auth.rs
- dashboard_routes.rs
- lib.rs
- pack_routes.rs
- routes.rs
- server.rs
- state.rs
- index.html
- packs.html
- Cargo.toml
- 2026-05-22-fixed-tier-dsl-and-policy-cache.md
- 2026-05-22-fixed-tier-dsl-and-policy-cache-design.md
- 2026-05-23-hook-config-file-and-ui-routed-hitl-design.md
- docker-quickstart.md
- enterprise-strategy.md
- installation.md
- taxonomy.md
- decision-allow-from-allowlist.json
- decision-allow-low.json
- decision-allow-minimal.json
- decision-deny-critical.json
- decision-human-medium.json
- live-daemon.test.ts
- setup.ts
- FailOpenBuffer.test.ts
- Permit0Client.buffer.test.ts
- Permit0Client.test.ts
- permit0Middleware.test.ts
- permit0Skill.test.ts
- types.fixture.test.ts
- errors.ts
- FailOpenBuffer.ts
- index.ts
- Permit0Client.ts
- permit0Middleware.ts
- permit0Skill.ts
- types.ts
- package-lock.json
- package.json
- README.md
- tsconfig.build.json
- tsconfig.json
- vitest.config.ts
- vitest.integration.config.ts
- README.md
- _source.yaml
- aliases.yaml
- TODO_VERB.yaml
- TODO_VERB.yaml
- .gitkeep
- .gitkeep
- .gitkeep
- CHANGELOG.md
- pack.yaml
- README.md
- .gitkeep
- README.md
- _source.yaml
- add_delegate.yaml
- aliases.yaml
- archive.yaml
- create_mailbox.yaml
- delete.yaml
- draft.yaml
- flag.yaml
- list_drafts.yaml
- list_mailboxes.yaml
- mark_read.yaml
- mark_spam.yaml
- move.yaml
- read.yaml
- read_thread.yaml
- search.yaml
- send.yaml
- set_forwarding.yaml
- _source.yaml
- add_delegate.yaml
- aliases.yaml
- archive.yaml
- create_mailbox.yaml
- delete.yaml
- draft.yaml
- flag.yaml
- list_drafts.yaml
- list_mailboxes.yaml
- mark_read.yaml
- mark_spam.yaml
- move.yaml
- read.yaml
- read_thread.yaml
- search.yaml
- send.yaml
- set_forwarding.yaml
- add_delegate.yaml
- archive.yaml
- create_mailbox.yaml
- delete.yaml
- draft.yaml
- flag.yaml
- list_drafts.yaml
- list_mailboxes.yaml
- mark_read.yaml
- mark_spam.yaml
- move.yaml
- read.yaml
- read_thread.yaml
- search.yaml
- send.yaml
- set_forwarding.yaml
- email-send-simple.yaml
- README.md
- pack.lock.yaml
- pack.yaml
- README.md
- fintech.profile.yaml
- healthtech.profile.yaml
- bootstrap-labels.sh
- build.sh
- deploy.sh
- detect-skills.sh
- install-harnesses.sh
- pipeline.sh
- test.sh
- SKILL.md
- SKILL.md
- SKILL.md
- .dockerignore
- .gitignore
- .mcp.json
- Cargo.lock
- Cargo.toml
- CLAUDE.md
- clippy.toml
- CODEOWNERS
- deny.toml
- docker-compose.yml
- Dockerfile
- LICENSE
- otel-collector-config.yaml
- polis.yml
- polis.yml.example
- README.md
- rustfmt.toml
# Installation Guide
1. Get the code
git clone https://github.com/permit0-ai/permit0
Downloads the entire project code from GitHub to your computer.
cd permit0
Moves into the project folder you just downloaded.
2. Docker
Easy RecommendedPrerequisites
- Git Needed to download the project code from GitHub.
- Docker Desktop Needed to build and run containers. Install it and keep it running in the background.
cd permit0 && docker compose up -d --build
Moves into the project folder you just downloaded.
cd ../permit0-mcp && docker compose up -d --build
Moves into the project folder you just downloaded.
docker create --name _p0tmp permit0-engine:latest
Type this command into your terminal and run it.
docker cp _p0tmp:/usr/local/bin/permit0 ~/.local/bin/permit0
Type this command into your terminal and run it.
docker rm _p0tmp && chmod +x ~/.local/bin/permit0
Type this command into your terminal and run it.
Run docker compose ps to check the containers are Up. If the README mentions a port, open http://localhost:PORT in your browser.
Pulled directly from this repo's README.
3. Node.js
EasyPrerequisites
⚠️ This is a large repository, so this method may point to an internal sub-package rather than the actual core product. Check the full README as well.
cd crates/permit0-node
This project's files live in a subfolder, so move into it first.
npm install
Downloads and installs the libraries listed in package.json.
npm start
Starts the development/run server.
After running the command, open the address shown in the terminal (usually something like http://localhost:3000) in your browser.
4. Python
EasyPrerequisites
⚠️ This is a large repository, so this method may point to an internal sub-package rather than the actual core product. Check the full README as well.
pip install .
Installs the package published on PyPI directly — no need to clone the source.
python <실행할 파일명>.py # README에서 정확한 실행 파일명을 확인하세요
Runs the Python script (or module).
If it runs without errors and prints output in the terminal, it worked.
5. Rust
MediumPrerequisites
- Git Needed to download the project code from GitHub.
- Rust (rustup) Installing via rustup also installs cargo.
cargo build --release
Compiles the Rust project.
cargo run
Builds and then immediately runs the program.
If cargo build finishes without errors, it worked. The executable is created under target/.
// repository documentation
Was this content helpful?
(0 ratings)