Commercial software I built

CHIMERA

A local-first desktop app for building and running teams of AI agents. Every model call and every tool call passes a governor that can refuse it — and every decision, refusals included, is written down.

run.trace — competitor-brief.workflow
What it is

Agent teams you can actually leave running

Frameworks like LangChain and CrewAI are libraries you write code against. CHIMERA is an application you run. The canvas, the governor, the traces, the approval gates, the credential handling, the prompt-injection defences and the cost accounting already exist — so what you build is a workflow, not a program.

0
Models, one connection
0
Apps, scoped per agent
0
Agent roles built in
0
Local · no account

Model and app figures are published by OmniRoute and Composio, not my own measurements.

The canvas

Join agents on a canvas, then press run

Each agent holds only the tools its job needs. Nothing routes to a provider without crossing the Governor first — and that isn't a convention, it's a lint rule. A direct provider call fails the build.

Researcherbalanced · 12 Browser op.frontier · 20 THE GOVERNOR allowlist · caps · egress approval gates Summarisercheap · 4 Approvalwaits for you

Every packet above passes the Governor. Some of them do not come out the other side.

The governor

Limits you can prove

Prompt wording is the last layer of defence, not the first. Four mechanical layers sit above it, and each one writes down what it decided.

governor.allow

Capability allowlist

An agent cannot misuse a tool it was never granted. A Reviewer that cannot edit. An Assistant that writes notes but never rewrites memory.

governor.refuse

Egress allowlist

A tool reaches only the hosts on its role's list. Everything else comes back as host not on this role's list — and lands in the trace.

governor.hold

Approval gates

Anything irreversible — sending, deleting, paying — stops the run and waits for a person. The diff is shown before anything happens.

verify.challenge

Mechanical verification

An answer citing none of the identifiers its tools returned is challenged and sent round again. Nothing inside one model can disagree with that model.

Try the idea

Nothing irreversible happens unasked

This is a small reproduction of what a paused run looks like inside the app. Press either button.

run paused — awaiting a human
Send the outreach email
agent → gmail.send
governor.hold — irreversible
run paused · 214 recipients queued
What it connects to

Bring any model, keep every limit

Provider differences live in adapters and nowhere above them, so changing model is a dropdown rather than a rewrite.

OmniRoute gateway

An open-source gateway you run yourself. CHIMERA finds it on localhost and imports 1,200+ models — with prices, context windows and health — in one step. Around 1.51 billion free tokens a month across 90+ free tiers.

Composio apps

Gmail, Slack, Sheets, Notion, Linear and a thousand more. OAuth is handled upstream, so an App operator gets a live connection to the real account — scoped one agent at a time, enforced on CHIMERA's side.

Real browser, own profile

Drives sites that have no API — fills forms, clicks through, reads what came back. It never touches the session you're logged into, because an agent inside your bank tab is one prompt injection from using it.

Documents, sandboxed

Spreadsheets, Word, PDF, slides and archives — converted and read inside a child process with a time limit, because a parser reading a stranger's file is somebody else's code running on your machine.

Keys never leave the keychain

API keys go into the OS credential store and are never written to the database, the logs, the traces or an error message. Agents are handed a handle rather than a value.

Swarm debates

Put a question to a population of agents with different starting positions, give them a few rounds, and read where they landed — including who changed their mind, and what changed it.

Install

One line. No admin rights.

CHIMERA bundles its own runtime, database and browser engine. Nothing to install first, nothing outside your home directory.

Linux

glibc 2.31+ · x86-64 or arm64
Ubuntu 20.04+, Fedora 34+, Debian 11+
Two libraries first.

macOS

11 Big Sur or newer
Apple silicon and Intel
Nothing to install first.

Windows

10 (1809) or newer · x64
 
Nothing to install first.

Questions

The things people actually ask

No. There is no CHIMERA account and no CHIMERA server. Workflows, runs, traces and keys live on your machine, in one SQLite file you control, with credentials in the OS keychain. The only outbound traffic is the model and tool calls you configure yourself.

It holds only the tools its role needs; it reaches only hosts on its allowlist; anything irreversible stops for a person; every loop declares a bound the editor enforces at save time; and spend caps end a run that overruns. Prompt wording is the last layer, not the first.

Yes. Point it at Ollama or LM Studio and no traffic reaches a model vendor at all. There's a local-only workspace mode that enforces this, rather than relying on you to remember.

Nothing while it's in early access — everything that exists today runs on your own machine with your own keys. A commercial licence for running it inside a company, or building a product on top of it, is intended to follow under BUSL 1.1.

Put a team of agents on it, and read exactly what they did.

CHIMERA is free, needs no account, and runs on Linux, macOS and Windows.