TruStacks

Local quickstart

Two minutes from curl to a working agent crew on your laptop.

One command pulls the install script, validates your local CLIs, spins up a k3d sandbox, and lands the TruStacks crew with four sample apps ready to analyze. Workshop and developer evaluation. No signup required.

Run this on your machine

$ curl -fsSL trustacks.com/install | bash

Requires Docker, k3d, kubectl, and helm. The install script checks for each before it touches your cluster. Cleanup is a single command: k3d cluster delete trustacks.

Read the quickstart READMEImage license (EULA Beta)

What you get

Three local surfaces and four sample apps.

After the install completes, three URLs print to your terminal. All resolve on localhost. Nothing leaves your machine until you choose to push.

TruStacks UI

http://ui.localtest.me:8080

The web app. Agent activity feed, /audit, /plan, /stack, Settings.

In-cluster Gitea

http://gitea.localtest.me:8080

Local Git host, pre-seeded with four polyglot sample repos. Real PRs land here.

ArgoCD

http://argocd.localtest.me:8080

Watches the platform repo and syncs Applications you merge from the proposals the crew opens.

Pre-seeded sample apps

  • fastapi-helloPython · FastAPI
  • spring-boot-helloJava · Spring Boot
  • dotnet-helloC# · ASP.NET Core
  • go-helloGo · stdlib HTTP

Each is a minimal hello-world service. Pick any one, run /plan, and watch a real PR open in the local Gitea with a CI workflow, Helm chart, and ArgoCD Application attached.

The 15-minute walkthrough

From install to a merged proposal in six steps.

  1. 1

    Install.

    Run curl -fsSL trustacks.com/install | bash. About two minutes on a recent MacBook. The script validates Docker, k3d, kubectl, and helm; creates a k3d cluster; installs the control-plane, runner, and UI; and seeds four sample apps into the local Gitea.
  2. 2

    Open the UI and add your Anthropic key.

    Visit http://ui.localtest.me:8080, go to Settings → LLM Provider, and paste your Anthropic or OpenRouter API key. The UI validates it with a live ping. BYO key during quickstart; you pay your provider directly.
  3. 3

    Run an audit.

    Navigate to /audit and click Run gap analysis. The Coordinator and Baseline Security agents narrate a gap report against the constitution inline.
  4. 4

    Promote a sample.

    Pick any sample service from the list. The Code Reviewer agent has already analyzed it. Click Promote to proposal.
  5. 5

    Watch a real PR open.

    The DevOps Engineer agent emits a CI workflow, Helm chart, and ArgoCD Application. The proposal opens as a PR in the local Gitea. The PR body cites the constitution rules it satisfies and the Profile entries it consumed.
  6. 6

    Merge and iterate.

    Approve the PR in Gitea. ArgoCD detects the merge and syncs the new Application. Edit the sample’s Profile, rerun /audit, watch the maturity score change.

That’s the loop. Real PRs, real policy gate, real signed artifacts. The full walkthrough lives in the quickstart README.

Local versus hosted

Try locally now. Sign up for hosted when you’re ready.

The local quickstart is the fastest path to seeing the product. It isn’t a free production tier. When you need managed infrastructure, the hosted SaaS opens self-serve signup on July 27, 2026.

Available now

Local quickstart

  • Runs on your laptop with k3d
  • Bring your own Anthropic or OpenRouter API key
  • No signup, no account, no credit card
  • Workshop attendees, design-partner evaluators, curious developers
  • Delete the cluster anytime; rerun whenever you like

Beta launch July 27, 2026

Hosted SaaS

  • Managed GKE; we operate the control plane
  • Managed Anthropic key on the Developer tier; bring your own on higher tiers
  • Self-serve signup with Stripe billing
  • Production-grade infrastructure with SLOs
  • Open to teams that have outgrown the laptop sandbox

License: the bright line

What’s open source, what’s not.

The quickstart is open source. The container images it pulls are governed by a Beta-period EULA. Three lines:

Quickstart scripts
install.sh, bootstrap.sh, Helm chart, samples. Apache License 2.0. Fork it, modify it, run it anywhere.
Container images
The control-plane, runner, and UI images at ghcr.io/trustacks/* are governed by the TruStacks EULA (Beta). Permitted use covers evaluation, workshop attendance, and local development on infrastructure you control.
Constitution and framework packs
The Rego bundle and framework packs are Apache 2.0 and live in the public trustacks-policy repository.

Bring a laptop. Leave with a working agent crew.

Run the quickstart, open the UI, paste your key, run an audit. Feedback shapes the July 27, 2026 hosted Beta directly.

Open the quickstart READMESee the tiers