Home

IronVise Wiki

IronVise is a pre-execution firewall and tamper-evident flight recorder for AI agents. It checks every action an agent proposes against your policy before it runs, executes approved actions inside an OS sandbox, and writes everything to a hash-chained, Ed25519-signed ledger. Anyone can later verify that record offline, without your database, your keys or your cooperation.

IronVise was previously called EctoLedger. If you are upgrading, start with Migrating from EctoLedger.

Status: prototype, not independently audited. What IronVise catches, and what bypasses it, is documented openly. See Security and Reporting.

Start here

I want to	Go to
Install the desktop app, CLI, Docker image or an SDK	Getting Started
See it work in a few minutes	Quickstart
Understand how it works	Concepts and Architecture
Connect Claude Code, Codex, Antigravity CLI or an MCP server	Agent Integrations
Look up a command or flag	CLI Reference
Set environment variables and policies	Configuration
Understand isolation per platform	Sandboxing
Check a certificate or a ledger	Verification and Certificates
Call IronVise from Python or TypeScript	SDKs
Use the desktop app or the Observer dashboard	Dashboard and Desktop App
Fix a problem	FAQ and Troubleshooting
Contribute	Contributing

Try it without installing anything

Open the browser verifier, click a sample certificate, then the copy with a single character changed. The verifier is the same Rust code compiled to WebAssembly, and nothing is uploaded.

What IronVise is, in one picture

agent proposes an action
        |
        v
  policy engine -> semantic guard -> strict schema -> tripwire   (any "no" stops it)
        |
        v
  signed ledger entry -> sandboxed execution -> scanned observation -> signed ledger entry

It complements a sandbox; it does not replace one. A sandbox limits what a command can reach once it runs. IronVise decides whether the command should run at all, and keeps a signed record that someone else can check.

What it is not

IronVise uses no blockchain. It is not a SIEM, ticketing or GRC suite, not a guarantee that a compromised host or an out-of-loop process behaves, and not a legal shield by itself.

Links

• Repository: github.com/EctoSpace/IronVise
• Website: ectospace.com/IronVise
• Releases: github.com/EctoSpace/IronVise/releases
• Full reference documentation: docs/README.md
• Changelog: CHANGELOG.md