Home

KelvinClaw Wiki

KelvinClaw is a secure, stable, modular runtime for agentic workflows. The project is built around a small trusted core, a policy-gated SDK extension lane, a memory data plane, a secure gateway, and signed plugin distribution.

Use this wiki as the operator and contributor map for the system. For line-by-line protocol and ABI references, use the linked source docs in the main repository.

Start Here

• New users: Getting Started
• Operators: Gateway and Operator Guide
• Plugin authors: Plugin System
• Security reviewers: Security Model
• Contributors: Development and Contributing

System Overview

• Control plane: kelvin-host, kelvin-gateway, kelvin-brain, kelvin-sdk
• Data plane: kelvin-memory-controller plus kelvin-memory-api and kelvin-memory-client
• Execution sandbox: kelvin-wasm
• Plugin distribution: packaged plugins, trust policy, hosted registry, compatibility CI

KelvinClaw keeps trusted code in the host/runtime path and pushes installable extension behavior onto the SDK/plugin lane. That split is the core design choice for both security and maintainability.

Common Entry Points

Quick start:

scripts/quickstart.sh --mode local
scripts/quickstart.sh --mode docker

Local profile lifecycle:

scripts/kelvin-local-profile.sh start
scripts/kelvin-local-profile.sh status
scripts/kelvin-local-profile.sh doctor
scripts/kelvin-local-profile.sh stop

Gateway:

KELVIN_GATEWAY_TOKEN=change-me cargo run -p kelvin-gateway -- --bind 127.0.0.1:34617 --workspace "$PWD"

Hosted plugin registry:

cargo run -p kelvin-registry -- --index ./index.json --bind 127.0.0.1:34718

Wiki Map

• Getting Started
• Architecture
• Gateway and Operator Guide
• Plugin System
• Plugin Registry and Trust
• Memory System
• Security Model
• Operations and Runbooks
• Testing and Validation
• Development and Contributing
• Reference Map

Source References

• README
• Architecture doc
• Gateway protocol
• Getting started