gensee-crate

Why Gensee Crate

• Keep attention on the work that needs you. The Review Queue groups supported background activity with its originating request and surfaces scope drift, blocked actions, approval requests, and failed verification. Routine activity stays in history.
• Set boundaries before risky actions. Local policy can allow, ask, or block supported tool actions and protect sensitive paths. Enforcement depends on the integration and execution environment.
• Reduce repeated interruptions. Remember explicitly approved actions within a session or project, or allow matching reads to a chosen file or folder. False-positive feedback is separate from permission: it does not silently grant access or weaken a rule.
• Review and recover changes. Personal creates recovery points for supported Git-workspace changes. Team provides disposable Linux workspace forks that you can inspect, merge, promote, or discard.
• Know what was observed. Review action evidence alongside policy decisions. Gensee reports monitoring gaps as its own coverage issues, separately from agent warnings.

Benchmark results

Preliminary AgentCanary results show Gensee Crate improving defense rate across memory-poisoning, long-horizon, and prompt-injection threat types with low runtime overhead.

Gensee Crate Personal

What it is

Gensee Crate Personal is a local-first macOS app and CLI for people working with AI agents. Current integrations include Codex, Claude Code, Cursor, GitHub Copilot, Antigravity, and Omnigent, plus a macOS endpoint-visibility pilot for Claude Cowork. Your policy, agent events, reviews, and feedback remain in your local Gensee store.

Coverage varies by integration. Cowork records supported host activity and VM boundaries; guest commands and cloud execution remain outside endpoint coverage. See the Cowork integration guide for setup and limits.

What it adds

• A Review Queue that groups work by request and shows what needs attention.
• Scope-drift detection that compares declared tool intent with file mutations independently observed by macOS Endpoint Security, while keeping routine workspace and temporary-file activity quiet.
• Smart recovery points before risky Git-workspace changes, with restore actions in the review.
• Configuration audit for instructions, skills, MCP servers, hooks, permissions, plugins, command rules, and other inputs that can change agent behavior.
• Scoped, revocable approvals for supported repeated actions, plus separate false-positive feedback for triage. See review and approval controls.
• Local policy enforcement, verification freshness, activity highlights, notifications, a menu-bar summary, and visible sensor health.

Download the macOS app

⬇️ Download Gensee Crate Personal for macOS

The signed app bundles the Gensee backend and SQLite support. It does not require Homebrew, Rust, Xcode, jq, or a separate SQLite installation. See the Gensee Crate Personal for macOS guide for installation, first-run setup, Apple approvals, harness protection, and local troubleshooting.

See it in use

Use the CLI instead

Install the CLI and initialize the local store:

curl -fsSL https://raw.githubusercontent.com/GenseeAI/gensee-crate/main/scripts/install_oss.sh | bash
export GENSEE_HOME="${GENSEE_HOME:-$HOME/.gensee}"

Configure the harnesses you use:

gensee setup codex --gensee-home "$GENSEE_HOME"
gensee setup claude-code --gensee-home "$GENSEE_HOME"

Run an agent through Gensee when you want an explicit managed session:

gensee run -- codex
# or
gensee run -- claude

Inspect the results:

gensee audit codex
gensee run list --json
gensee timeline --latest
gensee status --json

The desktop app is the recommended macOS experience. The CLI remains useful for automation, terminals, and Linux workstations. See Claude Code hook setup, policy, configuration audit, and run and sandbox modes for the complete command-line workflow.

Gensee Crate Team

What it is

Gensee Crate Team is the self-hosted path for small teams and businesses that want to operate their own Gensee deployment and agent environments. Agents run on a prepared remote Linux host. The team keeps control of its workspace, policy, credentials, runtime, evidence, and lifecycle decisions.

What it adds

The operating principle is simple:

intent
  → capability decision
  → lease, mediator, cell, or workspace fork
  → observed effects
  → merge, promote, or discard
  → revocation and cleanup

• Transactional workspace forks. tclone creates low-latency, whole-workspace forks for one or several approaches. Each fork can be inspected and tested before a human merges it, promotes it, or discards it.
• Bounded authority. Request-scoped capability decisions and short-lived leases limit filesystem, network, repository, workload-identity, database, and external-action authority.
• Credentials stay on the host. The capability broker owns credential material and gives cells opaque lease IDs, scoped handles, or trusted gateway endpoints instead of broad secrets.
• Independent evidence. Host observation, process lineage, effect manifests, replay plans, promotion receipts, and cleanup journals make it possible to explain what occurred and whether it stayed within the granted authority.
• Promotion is a policy decision. Manifest violations, incomplete evidence, failed cleanup, expired authority, or missing commit tokens can prevent work from becoming durable.

The strongest end-to-end enforcement today is in tclone capability cells and network mediation. Additional capability backends are under active development; see the roadmap for the current boundary.

Install on a Linux host

Install Gensee Crate:

curl -fsSL https://raw.githubusercontent.com/GenseeAI/gensee-crate/main/scripts/install_oss.sh | bash
export GENSEE_HOME="${GENSEE_HOME:-$HOME/.gensee}"

Then prepare the remote host with the tclone-enabled os4agent runtime, rootful Podman with btrfs, and a tclone image. Follow the tclone host setup rather than copying host-storage settings between machines.

After host preparation, define the wrapper used by the tclone workflow:

export GENSEE_TCLONE_PODMAN="$HOME/os4agent/podman-tfork.sh"
export GENSEE_TCLONE_IMAGE="${GENSEE_TCLONE_IMAGE:-localhost/gensee-tclone-webtop: