Seal

One policy file (seal.toml) that compiles into the policy files Annalist and Paldron enforce. No dashboard, no runtime, no billing. Each tool works alone — Seal keeps their policies from drifting apart.

github.com/GregDixonMXN/seal · Go

Railpane role

Seal becomes the canonical policy definition/compiler layer: one Railpane policy model compiling to SettleAgent, Paldron, Annalist, Rift, MCP authorization, credential issuance, and approval rules. Railpane owns central management, versioning, distribution, inheritance, fleet policy, rollback, simulation, and audit.

Use

go install github.com/GregDixonMXN/seal@latest
seal compile --in seal.toml --out-dir ./seal-out
annalist run -- paldron exec --policy seal-out/paldron.policy.toml -- <command>

See upstream examples/green (passes) and examples/red (.env denied).

Stamp and verify

seal stamp --command "paldron exec -- python3 src/write_ok.py" --session 163 --out receipt.json \
  --annalist-gate-exit 0 --paldron-exit 0 --annalist-bundle ./annalist-bundle
seal verify --bundle ./annalist-bundle receipt.json

stamp freezes one execution into a receipt (exit codes, bundle digest, verdict; exit 0/2/1 mirrors verdict). verify rechecks it, optionally re-hashing the bundle. CI action fails the job when committed seal-out/ drifted.