internal/

Package app holds bootstrap wiring shared across CLI subcommands — building the provider registry, run manager, pricing table, and gateway from config.

Package approval implements the human-in-the-loop gate (CLAUDE.md headline feature).

Package audit builds an auditor-ready compliance export for a governed run.

Package config loads RiskKernel's daemon configuration from the environment and an optional .env file.

Package gateway implements Surface 1 — the zero-code on-ramp.

Package governor is RiskKernel's deterministic disposer — the headline feature.

Package httpapi hosts RiskKernel's HTTP surface: the public /v1 API, the OpenAI-compatible proxy, and the local admin/health endpoints.

Package httpx holds small HTTP helpers shared across the server and gateway — JSON responses in the api/v1 Error shape.

Package id generates identifiers.

Package mcp implements RiskKernel's MCP gateway: a JSON-RPC reverse proxy that sits in front of an upstream MCP server and governs tools/call.

Package memory implements RiskKernel's git-native memory layer: a user-owned directory of markdown/YAML/text files the agent reads.

Package otel implements Surface 3 — OpenTelemetry GenAI export.

Package policy loads declarative RiskKernel policy bundles from a riskkernel.yaml file — the "policy-as-code" form of the POST /v1/policies bundles, reviewable in PRs and applied on startup — and dry-runs a bundle against a recorded run so you can see what it WOULD have gated or halted before adopting it.

Package pricing prices token usage deterministically.

Package provider defines RiskKernel's LLM provider abstraction.

Package runs manages governed runs — the identity, budget, and lifecycle around a governor.Run.

Package storage is RiskKernel's durable state layer.

Package version exposes build identity.