umbra docs

Name every command, then prove it.

umbra sits between semi-trusted automation and the host system. What you did not declare does not get through. Policy lives in a KDL guardfile rather than in code, enforced across two surfaces: subprocess execution and outbound HTTP.

If you are still deciding whether any of that is your problem, the case for umbra is the better place to start. These pages assume you already decided.

Synced from umbra cb89700, 2026-08-31. A copy, so the repository is the source of truth if the two disagree.

Getting started

Guides

Reference

Concepts

Contributing