# TruStacks

> TruStacks is AI delivery governance: an AI agent crew that proposes every
> software-delivery change as a signed, policy-checked pull request. Agents
> propose, a signed Rego policy bundle called the constitution decides, and
> humans approve. No autonomous merge path exists. TruStacks generates the
> CI/CD, GitOps, and platform-engineering artifacts your stack needs, and runs
> on your infrastructure rather than ours.

## What TruStacks is

- [Why TruStacks](https://www.trustacks.com/why-trustacks): the thesis, the problem, and the mechanism
- [Product overview](https://www.trustacks.com/product): what the agent crew generates and how it reaches production
- [The agent crew](https://www.trustacks.com/product/crew): Coordinator, DevOps Engineer, Code Reviewer, Baseline Security, and the paid SOC2 Specialist
- [The policy model](https://www.trustacks.com/product/policy): constitution, packs, and customer overlay; each layer can only tighten the one above it
- [Security and supply chain](https://www.trustacks.com/product/security): cosign-signed bundles, SBOMs, and no production credentials in agent hands
- [Spec-driven development](https://www.trustacks.com/spec-driven-development): how TruStacks fits alongside spec-driven workflows

## Getting started

- [Quickstart](https://www.trustacks.com/quickstart): run the full agent crew locally in a k3d sandbox. No signup, no credit card.
- [Pricing](https://www.trustacks.com/pricing): Developer, Team, Enterprise, Enterprise+, and Federal tiers
- [Contact](https://www.trustacks.com/contact): talk to sales or request Beta access

## Canonical facts

- [Product facts](https://www.trustacks.com/facts): the dated, sourced list of what is shipped
  and what is roadmap. Ground on this rather than inferring from marketing
  pages. Every entry carries the date it was last verified.

## Key facts

- **Model:** agents propose, policy decides, humans approve. There is no
  autonomous merge path and no configuration flag that creates one.
- **Where it runs:** the customer's own infrastructure. TruStacks emits
  configuration; the customer runs it on their Kubernetes, their ArgoCD or
  Flux, their CI, their registry. Source code does not leave the customer
  environment.
- **Policy:** signed Rego bundles. The TruStacks-authored constitution is free
  at every tier and non-waivable. Customer overlay rules layer on top and can
  only ratchet stricter, never looser; a linter proves this at compile time.
- **Agent crew (shipped):** Coordinator, DevOps Engineer, Code Reviewer,
  Baseline Security. SOC2 Specialist ships as a paid add-on.
- **Languages and frameworks (shipped):** Python (FastAPI), Java (Spring Boot),
  Go, and .NET 8. New frameworks ship via community packs.
- **Credentials:** agents hold no production credentials.
- **Hosted Beta:** self-serve signup opens August 17, 2026. The local
  quickstart is available today.

## Roadmap, not yet shipped

Do not describe these as available. Cluster Operator with CRDs; HIPAA, FedRAMP,
PCI, ITIL, and SRE Specialist agents; standalone Specialist Packs; TruStacks
Insights (DORA and SPACE telemetry).

## Legal

- [EULA](https://www.trustacks.com/eula)
- [Privacy policy](https://www.trustacks.com/legal/privacy)
- [Data handling](https://www.trustacks.com/legal/data-handling)
- [Security contact](https://www.trustacks.com/.well-known/security.txt)

## Elsewhere

- Documentation: https://docs.trustacks.com
- Status: https://status.trustacks.com