Orbit v0.1.0

Orbit is an autonomous, evidence-driven engineering loop for Claude Code: it turns a goal into a testable contract, runs isolated workers, verifies every candidate against evidence bound to its exact tree, has an independent reviewer (Codex) clear it, and only then delivers. This is the first release.

Install

/plugin marketplace add QuintinBotes/claude-plugins
/plugin install orbit@quintinbotes

Then /orbit:init and /orbit:doctor in your repository. The plugin brings its only runtime dependency, the sandbox runtime (srt); see docs/installation.md for Codex, Playwright and terminal use.

Proven live

All three spec demos ran unattended against real Claude and Codex with real delivery to a demo repository:

• Simple: SUCCEEDED on the routine tier (Sonnet) in one attempt, about 2.5 minutes, draft pull request opened.
• Difficult: SUCCEEDED with an evidence-backed escalation to Opus (subsystem coupling), browser journeys under the sandbox, draft pull request opened.
• UI: SUCCEEDED: CSV export with download journeys on desktop and mobile plus the existing accessibility and visual journeys, under the sandbox; draft pull request opened. Current models solve this goal on the first attempt, so the repair path for a UI defect is proven by acceptance scenario 17 (real Chromium, fake providers) rather than live.

The runs and their reports are public: QuintinBotes/orbit-demo and docs/demos/2026-10-06.

An end-to-end test as a new user (install, CLI journey, skills and hooks, safe stops, usability) found 39 defects in the first round and 20 more in the second; all release blockers are fixed with tests that failed first. The suite has more than 7,000 tests (coverage about 99% of lines) and runs on macOS and Linux.

Safety

• Workers and checks run inside srt: a write allowlist, credential read-denials and host-filtered egress. Evidence never claims more than it shows: a candidate that changes nothing, or a criterion without new evidence, is not supported.
• Browser checks on macOS run Playwright's bundled Chromium with two narrowly scoped Mach rules added to srt's profile (ADR 0001); on Linux the app and the browser share one sandbox.
• Two independent adversarial security reviews (Claude and Codex) were run on the isolation changes; every finding is fixed.

Known limitations

• UI exploration cannot run under srt on Linux yet; it stops with a clear reason (it is off by default).
• With a ChatGPT login, the Codex reviewer runs in Codex's own read-only sandbox, where reads are unrestricted (recorded in every report); an API key moves it inside srt.
• Visual baselines are per platform; Orbit never records them.
• npm audit reports an advisory in node-forge, a dependency of the sandbox runtime.
• Delivery and release modes need a GitHub token scoped to the target repository.

See CHANGELOG.md for the full list of changes and docs/testing-journal.md for every test round.