GUS Documentation

A secure agent you can actually read about.

GUS is an open-source AI agent that runs on a computer you control — with hard spend caps the model can't touch, credentials in a vault it can never read, and every action scanned, approved, and receipted. These docs cover all of it, in plain language.

The short version

GUS is built on one assumption: the model is not trusted. Everything a model reads is untrusted input, so no safety property depends on the model behaving. Spend caps are enforced by a Governor outside the model. Secrets live in a vault with no read API. Risky actions park for a human approval that is bound to the exact action and works once. And every finished job leaves a receipt — what ran, what it cost, what the security scan found — verified by a checker that is not the agent itself.

New here? Start with the install. Want the guarantees first? Read the safety model.