01
Supporting proof / Released work
cfctl
Keep an AI operator from granting itself permission to write.
A governed Cloudflare control plane that makes infrastructure changes reviewable before execution and verifiable afterward.
Hash-bound plans separate intent from mutation; exact-operation approval, one Cloudflare boundary, live verification, and durable rectification evidence are implemented in a Rust CLI with macOS and Linux release artifacts.
Inspect the repository