bitcd

A governed etcd on Starknet. Changes to infrastructure and agent configuration wait for sign-off under rules that live in a contract none of the actors can edit. Executors apply what was approved and cannot change the decision.

What it is

A key/value store with versions, leases, compare-and-set and an event stream. A write passes its namespace’s policy before it lands, so it carries the changes that need sign-off: an access grant, a cluster binding, a Terraform input, an agent’s tool allowlist.

The contract decides. Per namespace it holds who approves, how many, how many must be people and how many may come from one operator. After setup the owner renounces it. There is no admin key.
People sign the exact change. A human approval is a signed message bound to one proposal. Machines approve by transaction, and any eligible voter can pull a person into a decision.
Executors apply and report. They fetch the approved document, check it against its fingerprint on chain, apply it to Kubernetes, IAM, Terraform or a system of your own, and attest what they saw. A failed apply never rewrites the decision; a change made by hand shows up as drift.

Demo

demo video · soon

Try it

You need git and Docker, with ports 5051 and 4566 free. The run takes about fifteen minutes. The chain and the store run locally; the build downloads the toolchain.

Give this line to your coding agent:

Read https://raw.githubusercontent.com/bitcdorg/bitcd-core/main/skills/try-bitcd/SKILL.md and follow it.

Or run the same thing by hand:

git clone https://github.com/bitcdorg/bitcd-core.git && cd bitcd-core
docker compose run --rm builder
docker compose up -d devnet ministack
docker compose run --rm e2e

It deploys the contract on a local devnet, onboards an organization from e2e/bitcd.yaml and renounces ownership. Then it checks lock contention, document tampering, drift repair, executor agreement, signed human approval and escalation. The last line is demo complete. docker compose down -v removes the stack and its volumes.

The project

The core is open source under Apache-2.0: the Cairo contract, the @bitcd/core library and the bitcd CLI on npm, and the proof rig above. Connectors exist for Terraform, AWS IAM and Kubernetes; the connectors page shows how to build one for your own system, with a skill for your coding agent.

npm install @bitcd/core starknet

concept the contract connectors quickstart