Open-source agent tooling by Kai Ase Siren. The recurring problem across these projects is that an agent is only as safe as the surface you hand it, so the surface gets declared in a config file and enforced at the call.

• agent-compose - eval driven agent roles and personas. A role is context, never permission: the composed bundle is plain files you can read and diff before a run, and it grants no credential, mount, or command. Installs as acompose, and Claude Code, Codex, Goose, and OpenCode take the same one.
• housecast - a YAML driven roster framework for agent context. One roster declares the roles, personalities, and boundaries, the engine emits an immutable bundle, and the behavior evals run against that same bundle, so the graded artifact and the shipped artifact are identical. acompose renders what housecast emits. On Forgejo only for now.
• umbra - a config driven occlusion framework. Declare what a tool may run, and arguments are validated before the process starts, each verb needs its own scope token, and every call lands in an append-only audit log. Its specgen driver builds the whole guarded CLI from that declaration, so there is no hand-written boundary code to get wrong.
• mcp-beaver - a MCP server generator with a natural flow. An operation you did not declare has no tool and no endpoint, so the blast radius of a write-capable MCP is one small file you can read end to end. One generic image serves every guardfile, mounted at deploy rather than baked in.

sirens-echo, the Discord community harness built on this stack, lives over in coilyco-gaming.

agent-compose, specgen, and aos install from a Forgejo-hosted tap or bucket, so the URL is spelled out once.

brew tap coilyco-flight-deck/tap https://forgejo.coilysiren.me/coilyco-flight-deck/homebrew-tap
brew install coilyco-flight-deck/tap/agent-compose

scoop bucket add coilyco-flight-deck https://forgejo.coilysiren.me/coilyco-flight-deck/scoop-bucket
scoop install coilyco-flight-deck/agent-compose

mcp-beaver is not a CLI. It ships as an image and Helm chart.

Small read-only adapters. Each states its exact tool inventory and what it refuses to do.

• bluesky-mcp - authenticated Bluesky, with no write tool at all.
• node-stats-mcp - node-local Linux and Kubernetes diagnostics.
• lunch-money-k8s - the Lunch Money API, with a Helm chart.

• ward - retired. The governed execution layer for coding agents that preceded this stack.
• reddit-mcp - retired. Private Reddit feeds and public subreddit RSS.
• agentic-os - the host layer the rest of this runs on: shell and terminal configuration, the aos launcher, and the aos-precommit hook suite. A reference implementation rather than something to adopt.
• agent-proxy - observability and trajectory data plane for agent work. In active transition, so its interfaces are unstable.
• website - the source for coilysiren.me, the personal site and technical blog.
• homebrew-tap and scoop-bucket - the distribution channels, bumped by each upstream release.

Retired work is archived here and removed from Forgejo, so GitHub carries the record. The full repository list has them.

Forgejo is canonical for development, issues, and releases. GitHub is a verified mirror and the right place to file a public bug.

• coilysiren.me - personal site and writing
• coilyco-gaming - games, mods, and server tooling
• coilyco-bridge - operational back-office