We open-sourced our agent platform's governance layer: hexagonal architecture and governed execution

Description and use

SOIT offers an open‑source agent runtime with built‑in governance, enabling enterprises to safely run AI agents in production while controlling access, secrets, egress, audit logs, and costs.

Problem

Teams can build AI agents but struggle to trust them in production due to lack of governance, credential management, egress control, auditability, and cost visibility.

Outcome

SOIT enables teams to run AI agents in production with full governance, auditability, and cost visibility, while remaining open‑source and vendor‑agnostic.

Workflow

• 1. Define agents and workflows in the visual editor with versioning.
• 2. Configure approved models, tools, and knowledge bases via per‑version allowlists.
• 3. Store credentials in Vault and inject them through the gateway.
• 4. Set egress policies to restrict outbound HTTP calls.
• 5. Deploy SOIT with a single Docker‑Compose command.
• 6. Run agents; each step is recorded in the runtime ledger.
• 7. Monitor live metrics, cost, and failures in the workspace console.
• 8. Replay or audit runs using the trace timeline.

Evidence

Every agent run is a governed run. Chat turn, agent loop, or workflow run — everything flows through one runtime ledger (Run / RunStep / Trace), and the same controls apply on every path:

Source

The platform self‑hosts with one command: git clone … docker compose … up -d

Source