open core
The runtime is open. The authority is not.
The simulation-gated runtime, the operator terminal, the public contracts, and the read-only MCP surface are published under Apache-2.0. Hosted operator services and authenticated runtime authority stay commercial. This page states the boundary exactly, with the artifacts to prove it.
What is open
- DEED runtimeApache-2.0 · source release pending
Simulation-gated Python runtime. Local paper API with journaled decisions, replayable audit log, and idempotent execution. Live execution is disabled by default and gated behind explicit custody and kill-switch controls.
- DEED operator terminalApache-2.0 · source release pending
Operator terminal for self-custodial onchain operations, built against the local runtime contract.
- DEED installerApache-2.0 · source release pending
Installer shim for provisioning a local runtime. Pre-alpha.
- DEED runtime containerApache-2.0 · source release pending
Canonical DEED container release source release pending. Paper mode; the runtime environment refuses private-key material.
- public contractspublic · no key required
The versioned public proof API contract, response schemas, and runnable examples.
- public MCPpublic · read-only
A read-only MCP endpoint at /oss/mcp over streamable HTTP. It refuses order execution, session mutation, runtime mutation, secret access, and live account state — refusals are returned as typed records, not errors.
What stays commercial
- hosted operator servicesproprietary
Deployment provisioning, live leases, and the operator cockpit on usedeed.app. Authenticated, commercial, and separate from every surface listed above.
- authenticated runtime MCPproprietary
The operator MCP surface at /mcp carries runtime authority and is not part of the open core. The public endpoint at /oss/mcp is the only unauthenticated MCP surface.
- everything elseproprietary
The private monorepo is proprietary unless a subproject explicitly states otherwise. Public releases happen through an explicit carve-out, never by default.
artifacts
- sourcesource release pending
- python packagesource release pending
- rust cratesource release pending
- installer shimsource release pending
- container registrysource release pending
- public mcp endpointusedeed.app/oss/mcp
- machine indexusedeed.app/llms.txt
current runtime contract: engine-v0.1.6. Canonical package and container publication remain pending; retired distribution names are not advertised.
License boundary
The default is proprietary. The engine is the explicit carve-out: releases published under canonical DEED package names will carry Apache-2.0, pinned per release. The hosted product, control planes, and everything not named in the carve-out remain closed. This page declares its own boundary in a machine-readable license meta tag, as every public surface here does.
The open runtime is non-custodial by construction: execution is simulation-gated, its container contract refuses private-key material in the environment, and live execution requires an explicit operator lease that the open packages cannot grant themselves.
quickstart
# canonical DEED packages and container — source release pending
# public mcp (read-only, no key; available now)
curl -s https://usedeed.app/oss/mcp -X POST \
-H 'content-type: application/json' \
-d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'The public MCP endpoint answers without authentication and cannot place orders, mutate runtime state, or read account or secret material.
