How Cirvix works & how to implement it.

# macOS & Linux (Homebrew)
brew tap cirvix/tap && brew install cirvix

# macOS & Linux (curl standalone binary installer)
curl -sSL https://cirvix.com/install.sh | bash

# Windows (PowerShell standalone binary installer)
irm https://cirvix.com/install.ps1 | iex

# Start the Cirvix control plane daemon in the background
cirvix daemon start --policy-dir=/etc/cirvix/policies

# Verify daemon health and audit chain status
cirvix status

# Option A: Register Cirvix as the global MCP enforcement layer in Claude Code
claude mcp add cirvix -- cirvix mcp-proxy

# Option B: Run Claude Code under active Cirvix execution containment
cirvix wrap -- claude

{
  "mcpServers": {
    "filesystem-controlled": {
      "command": "cirvix",
      "args": ["proxy", "--tool", "@modelcontextprotocol/server-filesystem", "--", "/workspace"]
    },
    "postgres-controlled": {
      "command": "cirvix",
      "args": ["proxy", "--tool", "@modelcontextprotocol/server-postgres", "--", "postgresql://localhost/prod"]
    }
  }
}

from cirvix import Guard, CirvixDeniedError, CirvixHeldError
from langchain.agents import initialize_agent, Tool

# Raw, powerful tools that need strict governance
raw_tools = [execute_sql_query, read_local_file, invoke_external_webhook]

# 1-Line Cirvix Guard Wrapping
guarded_tools = [
    Guard.wrap(tool, agent_id="support-agent-v2", tenant_id="org_enterprise")
    for tool in raw_tools
]

agent = initialize_agent(guarded_tools, llm, agent="zero-shot-react-description")

try:
    response = agent.run("Find customer transaction 902 and update their tier.")
except CirvixDeniedError as err:
    # Terminal denial: Agent requested an action forbidden by organizational policy
    print(f"Action blocked by Cirvix: {err.reason} (Rule: {err.rule_id})")
except CirvixHeldError as held:
    # Held for Human-in-the-Loop (HITL) approval
    print(f"Action held pending approval from: {held.approvers}. Approval ticket: {held.ticket_id}")

import { guard, CirvixDenied, CirvixHeld } from "@cirvix_ai/agent-control";

const safeTools = guard.wrap(myAgentTools, {
  agent:       "pr-automation-bot",
  environment: process.env.CIRVIX_ENV ?? "production",
  socketPath:  "/var/run/cirvix/ipc.sock"
});

try {
  await agentRunner.execute({ tools: safeTools });
} catch (err) {
  if (err instanceof CirvixDenied) {
    console.error("Blocked by policy [" + err.ruleId + "]: " + err.message);
  }
}

apiVersion: apps/v1
kind: Deployment
metadata:
  name: autonomous-agent-fleet
  labels:
    app: agent-worker
spec:
  replicas: 5
  template:
    metadata:
      labels:
        app: agent-worker
    spec:
      volumes:
        # Shared ultra-low latency Unix socket
        - name: cirvix-socket
          emptyDir:
            medium: Memory
        # Read-only policy configuration
        - name: cirvix-policies
          configMap:
            name: production-agent-policies
      containers:
        # 1. Primary AI Agent Container
        - name: agent-app
          image: internal-registry.company.com/agent-app:2.4.0
          env:
            - name: CIRVIX_SOCKET
              value: "/var/run/cirvix/ipc.sock"
          volumeMounts:
            - name: cirvix-socket
              mountPath: /var/run/cirvix

        # 2. Cirvix AgentControl Sidecar
        - name: cirvix-guard-sidecar
          image: cirvix/proxy:1.0
          securityContext:
            readOnlyRootFilesystem: true
            allowPrivilegeEscalation: false
          env:
            - name: CIRVIX_MASTER_KEY
              valueFrom:
                secretKeyRef:
                  name: cirvix-kms-credentials
                  key: master-key
          resources:
            limits:
              cpu: "250m"
              memory: "128Mi"
          volumeMounts:
            - name: cirvix-socket
              mountPath: /var/run/cirvix
            - name: cirvix-policies
              mountPath: /etc/cirvix/policies
              readOnly: true

name: Cirvix Agent Security Scan
on: [pull_request]

jobs:
  policy-audit:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - name: Install Cirvix CLI
        run: curl -sSL https://cirvix.com/install.sh | bash
      - name: Validate Policies and Agent Tool Schemas
        run: cirvix scan --policy-dir=./policies --tools=./src/agent/tools.json --fail-on-warnings