The tooling layer

Thoth

A governance layer for AI coding agents. It does not replace your AI tools, it makes them auditable.

Thoth wraps the agents you already use, Copilot, Codex, Claude Code and Gemini, with structure, traceability and accountability. All governance data lives in your repository, alongside your code. No SaaS, no cloud dependency.

The problem

AI coding agents are powerful but unaccountable

No one knows what an agent changed or why. There is no structured path from a request to shipped code. Context is lost between sessions. Teams have no audit trail for compliance or quality. Thoth makes agent-assisted delivery traceable, recoverable and auditable, without slowing teams down.

Figure 1 / the governed spec lifecycle
Draft → Requirements → Design → Tasks → Implementation → Review → Complete

Each phase has a gate. Each gate requires evidence. Each artefact gets provenance. You cannot skip from Draft to Implementation.

Figure 2 / what lives in the repository
.cdf/ ├── config.yaml ├── steering/ ├── specs/<slug>/ │ ├── requirements.md │ ├── design.md │ ├── tasks.md │ ├── implementation.md │ └── reviews/ ├── audit/governance.jsonl └── cdi/
What it does

Built around enforcement, not advice

01

Provenance recording

Every artefact records who or what produced it, which model, when, and a content hash for integrity.

02

Phase-gated delivery

Governed work moves through a spec lifecycle. Gates require evidence before any advance.

03

Audit journal

An append-only JSONL timeline of every action, with a reasoning field on each one.

04

Model-diversity review

The review subagent must use a different model family from implementation. It is a hard constraint.

05

CDI assessment

Run the six-dimension health check from inside the editor, with one improvement priority.

06

Subagent Workbench

A live view of the orchestration graph, node status, cost, and the model-diversity check.

Getting started

Active for any team in under two minutes

Install it in your editor

Thoth runs in VS Code, Cursor and Windsurf. Install from the Marketplace or sideload the VSIX.

Run guided setup

Answer four to six plain-English questions. Thoth detects your stack and drafts the governance files.

Pick an adoption tier

From assistive to agent-led. Higher layers can seal fields so downstream teams cannot relax them.

Start working

Governance is now active. Every agent reads the same rules from a generated AGENTS.md bridge.

In active development

Thoth is built in the open and licensed under PolyForm Noncommercial, so it is free for individuals, research and internal evaluation. The rebuild story behind structural enforcement, and what comes next, is documented in the kernel devlog.