Commercial software I built
A local-first desktop app for building and running teams of AI agents. Every model call and every tool call passes a governor that can refuse it — and every decision, refusals included, is written down.
Frameworks like LangChain and CrewAI are libraries you write code against. CHIMERA is an application you run. The canvas, the governor, the traces, the approval gates, the credential handling, the prompt-injection defences and the cost accounting already exist — so what you build is a workflow, not a program.
Model and app figures are published by OmniRoute and Composio, not my own measurements.
Each agent holds only the tools its job needs. Nothing routes to a provider without crossing the Governor first — and that isn't a convention, it's a lint rule. A direct provider call fails the build.
Every packet above passes the Governor. Some of them do not come out the other side.
Prompt wording is the last layer of defence, not the first. Four mechanical layers sit above it, and each one writes down what it decided.
An agent cannot misuse a tool it was never granted. A Reviewer that cannot edit. An Assistant that writes notes but never rewrites memory.
A tool reaches only the hosts on its role's list. Everything else comes back as host not on this role's list — and lands in the trace.
Anything irreversible — sending, deleting, paying — stops the run and waits for a person. The diff is shown before anything happens.
An answer citing none of the identifiers its tools returned is challenged and sent round again. Nothing inside one model can disagree with that model.
This is a small reproduction of what a paused run looks like inside the app. Press either button.
Provider differences live in adapters and nowhere above them, so changing model is a dropdown rather than a rewrite.
An open-source gateway you run yourself. CHIMERA finds it on localhost and imports 1,200+ models — with prices, context windows and health — in one step. Around 1.51 billion free tokens a month across 90+ free tiers.
Gmail, Slack, Sheets, Notion, Linear and a thousand more. OAuth is handled upstream, so an App operator gets a live connection to the real account — scoped one agent at a time, enforced on CHIMERA's side.
Drives sites that have no API — fills forms, clicks through, reads what came back. It never touches the session you're logged into, because an agent inside your bank tab is one prompt injection from using it.
Spreadsheets, Word, PDF, slides and archives — converted and read inside a child process with a time limit, because a parser reading a stranger's file is somebody else's code running on your machine.
API keys go into the OS credential store and are never written to the database, the logs, the traces or an error message. Agents are handed a handle rather than a value.
Put a question to a population of agents with different starting positions, give them a few rounds, and read where they landed — including who changed their mind, and what changed it.
CHIMERA bundles its own runtime, database and browser engine. Nothing to install first, nothing outside your home directory.
glibc 2.31+ · x86-64 or arm64
Ubuntu 20.04+, Fedora 34+, Debian 11+
Two libraries first.
11 Big Sur or newer
Apple silicon and Intel
Nothing to install first.
10 (1809) or newer · x64
Nothing to install first.
No. There is no CHIMERA account and no CHIMERA server. Workflows, runs, traces and keys live on your machine, in one SQLite file you control, with credentials in the OS keychain. The only outbound traffic is the model and tool calls you configure yourself.
It holds only the tools its role needs; it reaches only hosts on its allowlist; anything irreversible stops for a person; every loop declares a bound the editor enforces at save time; and spend caps end a run that overruns. Prompt wording is the last layer, not the first.
Yes. Point it at Ollama or LM Studio and no traffic reaches a model vendor at all. There's a local-only workspace mode that enforces this, rather than relying on you to remember.
Nothing while it's in early access — everything that exists today runs on your own machine with your own keys. A commercial licence for running it inside a company, or building a product on top of it, is intended to follow under BUSL 1.1.
CHIMERA is free, needs no account, and runs on Linux, macOS and Windows.