Getting started What Constle is not

Docs Getting started

What Constle is not

Constle governs the environment an agent runs in. It does not decide how the agent thinks, and it is not a place to run it.

On this page

Not an agent frameworkLink to this section

It governs the environment, not the logic. Constle doesn't decide how an agent reasons or plans: LangGraph, CrewAI or hand-rolled code run inside it unchanged. The agent is an ordinary container image named in the Agentfile.

Not a cloud providerLink to this section

It installs on your infrastructure, any cloud or on-premise. constle is a single CLI that runs agents on the machine it is installed on, with Docker or Firecracker as the sandbox backend.

Not a monitoring overlayLink to this section

Isolation stops exfiltration even if the model is fully compromised, because enforcement sits below the agent rather than inside it. A prompt injection that convinces the model to send a document to an undeclared host does not fail because the model reconsiders: it fails at the network layer, and the attempt is written to the audit log as a network_blocked event. See Architecture.

Not finishedLink to this section

Constle is v0.5.0, pre-1.0, and early. The Known limitations are listed up front rather than discovered later, and the Field reference labels every field it parses but does not act on.

Not a closed platformLink to this section

Apache 2.0, and the Agentfile format is an open, independently auditable standard: the specification is in the repository next to the code that implements it.

Something wrong or unclear? Open an issue. The specifications on these pages are copies of spec/ in constle/constle.