Warden docs
Run Claude Code, Codex or your own models under a short rule file that a deterministic engine checks before every action, and carry work from idea to production in the Software Factory.
Warden is a desktop app for working with coding agents. You bring the agent you already use: Claude Code, Codex, Copilot, Devin, Kimi, an API key, or a local model. Warden checks every action the agent takes against your rules before it runs. The rules are a few lines of YAML, and a policy engine applies them, not a model. The same action under the same rules always gets the same answer, and every verdict names the rule behind it.
default: allow
rules:
- deny: { touches: dotenv }
reason: "Secrets stay out of agent context"
- ask: "git push"
when: { branch: [main, master] }
reason: "Pushing to main needs a person"
- deny: "terraform destroy"Under that file, the agent reads, edits and tests freely. Reading a .env file is BLOCKED, a push to main ASKS YOU, and everything else RUNS.
Start here#
Find your way around#
What Warden is, and isn't#
- It is a governed workspace: a chat with the agent, a real editor, diff and commit, a terminal and a browser in one window, with your rules on every tool call.
- It is local-first. Policy checks run on your Mac. Your code goes only to the model you choose, never to us on the free Developer edition.
- It isn't a model guessing whether something looks risky. Rules decide.
- It isn't a wrapper for your terminal. Only agents you run inside Warden are checked. See Known limitations.
Warden runs on Apple Silicon Macs (M1 or later). The Developer edition is free, including for commercial work. Warden Team adds company-wide rules, shared skills and an AI gateway.