Metadata, not content
The audit layer records decisions and context without copying the user’s source files.
All work01 02
Platform· Public repository
Orbit
A local safety and operations layer for coding agents
An open-source, self-hosted system that gives coding agents a clear permission boundary: routine actions pass, risky actions wait for approval, destructive actions are blocked, and decisions are recorded without storing file contents.
Role · Open-source product engineering
System anatomy
01Agent Safety
02Human Approval
03Policy Engine
04Agent Observability
The problem
Local agents can move faster than a human can supervise them. Orbit turns policy, approval, budget, and audit into an explicit control plane without centralizing the user’s private workspace content.
What the system does
Capability with an operating model.
Allow, ask, or deny policy engine
Phone-based approval workflow
Per-agent token budgets
Redacted activity log
In-browser policy playground
Gmail, Calendar, and Telegram integrations
Architecture
How it fits together.
01
TypeScript/React interface
02
Node.js policy and integration services
03
PostgreSQL state and audit
04
Self-hosted Docker deployment
Key decisions
Approval is contextual
Routine work stays quiet; material actions escalate to a human.