Keel setup

This is Keel's public, release-only bundle for agent-assisted onboarding. It contains the two skills a coding agent needs to inspect an application, prepare a bounded Keel integration, and help a human author a friendly policy without taking authority from that human.

Skills

• keel-setup inventories execution paths, prepares state-D integration, and verifies one intended allow and one intended deny through POST /v1/execute.
• keel-policy translates human intent into Keel's canonical policy document and reports where the requested rule is unsupported or unenforceable.

Read shared/CONSTITUTION.md, then read the selected SKILL.md in full. Use an immutable 40-character commit SHA. Verify SHA256SUMS before running a bundled helper. Do not use curl | sh or reconstruct a missing release from memory.

Credential boundary

The copied setup prompt and this repository contain no Keel credential or customer identifier. A coding agent must never ask a human to paste a credential into a conversation. When runtime verification is reached, the human creates a Runtime key in the Keel dashboard and enters it only at a release-pinned helper's password-style prompt in a terminal they control. The key is never a command-line argument, never appears in shell history, and is not installed into the application by the verification step. The clipboard remains an exposure surface.

Two helpers perform network I/O, and both verify this release before prompting and refuse a terminal that cannot hide input. keel-setup/scripts/verify_execute.py obtains a project-bound read-only verification profile, makes the two bounded verification requests described by the setup skill, and confirms the profile did not change during the proof. keel-setup/scripts/authoring_context.py makes one read-only request for the project's non-secret authoring context and prints it unchanged; it creates no permit, changes no policy, and executes nothing. The remaining helpers are local, read-only analysis or schema validation.

Provenance

SOURCE.json identifies this public bundle version and the files maintained only by the publication layer. This repository intentionally excludes internal specifications, production workflows, private repository history, and unrelated tools.

Apache-2.0. See LICENSE.