WACE
Self-hosted · bring your own key · open source

The governed AI command
environment.

WACE is an AI workspace you connect to your real tools — tickets, databases, mail, the web — and work alongside a governed AI. Read-only by default. Secrets masked before the model sees them. Every write you approve. Every action on a tamper-evident log.

Your Anthropic key, sealed at rest. Runs on your machine. Nothing goes through us.
Why "governed" is the point

Most AI tools ask you to trust a black box with your data and your systems. WACE is built the other way around.

🔑

Bring your own key

Your Anthropic key is sealed at rest with AES-256-GCM. Agent runs bill to your account — no middleman cloud, no shared model quota.

🛡️

Guarded before the model

SAIb masks PII, secrets, and API keys before a prompt ever reaches the LLM — with a live preview of exactly what gets redacted.

🔒

Read-only by default

Connectors read; they don't write. Any change — a ticket update, an email — is prepared for you and needs your approval. The AI never fires it alone.

Everything on the record

A tamper-evident (WORM) log captures every action. Scrub through any session and reconstruct exactly what was read, drafted, and approved.

From drop to done — governed the whole way
01 · DROP

Drop anything in

A ticket number, a file, a SQL query, a URL. WACE detects it and runs the governed, read-only fetch.

02 · ASSIST

A governed agent assists

Scrubbed of secrets, the data reaches your AI. It answers and cites the source lines it relied on.

03 · ACT

You approve the action

Want to update the ticket or send the note? WACE prepares it; you approve in one click. It's receipted.

Run it in two minutes.

Self-hosted, single user, SQLite out of the box. Bring your key and go.

git clone github.com/pamiray-m/wace-light && cd wace-light && ./dev.sh