- Inputs: scoped inputs + selected library + contracts/v1
- Deterministic pipeline (stable ordering)
- Outputs: pack.zip + DecisionPack.pdf/html + verify.json + SHA256.txt
- Does not: issue certifications; packages evidence for review
- Runs: Windows portable, offline
- Invokes: AEGIS for compile/render; emits verifier artifacts
Products
Civitas currently presents two primary product lines. Sanctuary Core is the adaptive and controlled local workspace line. EPI Rail is the portable evidence-pack, verification, and reviewer-ready delivery line.
Choose the line first, then the supporting system depth
This route is the portfolio root, not a components catalog. Start by choosing the product line. Sanctuary Core is for serious local agent work with visible authority and bounded proof. EPI Rail is for portable reviewer-ready evidence packs with deterministic outputs and local verification.
- Sanctuary Core covers adaptive daily work plus a controlled path when output needs trace and review.
- EPI Rail covers portable evidence packs, proof posture, and local verification for reviewer-ready delivery.
- Included modules stay visible below as system depth, not as the first portfolio choice.
Primary product lines
Sanctuary Core
Serious local workspace and agent-system line for persistent work, explicit authority, visible provenance, and a bounded path from adaptive daily use into controlled reviewable work.
- Adaptive Workspace for continuity, recent artifacts, and useful local work without leading with compliance-heavy framing.
- Controlled Workspace when work must be traceable, inspectable, and defensible across handoff or later challenge.
- Trust-aware boundary: query stays advisory, authority stays explicit, provenance stays visible.
Sanctuary Core is now a first-class line on this route. It is not positioned as a hidden internal artifact or a loose side surface.
EPI Rail
Portable evidence-pack and verification line for teams preparing concrete reviewer-ready material across pinned library baselines, with deterministic outputs and local verification.
- Bundled local Windows runtime with offline generation, portable review artifacts, and local verification.
- Proof-first posture: public proof, local verify, and packaged purchase paths remain the clearest support routes.
- Packaged Duo is still the direct-buy path; Rail Core and Pro remain narrower supporting lanes.
EPI Rail remains a major product line, but it no longer has to carry the whole portfolio route by itself.
Proof, verify, and purchase remain important orientation routes, but they sit beneath the product-line decision instead of replacing it.
Need a bounded delivery path instead of a packaged product path?
If neither primary product line is the immediate fit, use the scoped engagement routes for fixed-scope delivery work or custom intake.
Included system components
Modules deepen the system; they are not the portfolio root
Cupola, AEGIS, LEO, EPI Viewer, and EPI CLI sit below the product lines as included system components. They explain how the evidence-pack line is assembled and how supporting interfaces remain inspectable.
Keep the hierarchy honest: choose Sanctuary Core or EPI Rail first; drop into component depth only when you need system shape, bundle composition, or interface detail.
- Compiles library rules + evidence into reviewer-ready packs
- Enforces framework spine + coverage gates (where applicable)
- Renders: DecisionPack.pdf + DecisionPack.html + manifest/seal JSON
- Guarantees: deterministic structure + stable sections
- Offline: no cloud fetch; evidence must be provided/ingested
- Used by LEO in the compile stage
- Ingest -> Search -> Provenance (path/snippet/provenance tuple)
- Produces evidence hits consumed by compilation
- Deterministic JSON shapes + stable ordering
- Offline-first; local indexing
- Does not: invent evidence; retrieval only
- Supports local corpora for scoped runs
- Verifies pack integrity + expected shapes
- PASS/FAIL + reasons (JSON)
- PowerShell-friendly for technical users
- Runs offline; Rust CLI
- Consumes pack.zip + emits verify.json
- Suitable for CI/local validation gates
- Non-technical review surface
- Drag-and-drop pack.zip, displays outcomes
- Uses bundled verifier via relative tools path
- Windows portable; offline
- Shows claim-to-evidence context for review
- Exports verify JSON for records
Public mirror of the interface used by the toolchain.
- Declares artifact shapes + schema_version
- Keeps tools interoperable without lock-in
- Compatibility surface for upgrades
- Versioned interface across LEO, AEGIS, Cupola, Viewer, CLI
- Used to validate manifests/seals and verifier outputs
- Supports incremental migration with explicit schema changes