Open Program
Autonomy under contract — agents spend only against Open IDs on a living program file.
Open Program RuntimeCoppergate
Autonomy under contract.
Only what's on the program ships.
Open Program Runtime binds spend, Survivor Arena, and Accept to a living program line — not a chat session. No Open ID, no spend; Accept writes Done plus a Ship Receipt you can audit.
What is Open Program Runtime? →
- MIT · Community $0
- Program-bound spend
- Accept → Ship Receipt
Your repos · your keys · your host
GitHubGitLabDocker ComposeOpenAIAnthropicBYOK / compatible APIs
Product pillars
Spend License
No Open ID, no spend. Caps, path policy, and kill-switch keep reserves fail-closed.
See controlsShip Receipt
Accept writes Done plus spend, fitness, CI, and writeback — accounting, not a chat log.
See receiptsYour infrastructure
Self-host or hosted at Community $0. BYOK. GitHub and GitLab delivery stays in your repos.
See stackThe Arena
Contenders compete. One survivor ships.
One task. Multiple contenders. Coppergate verifies results, prices spend, and promotes the strongest qualifying path — so “spend more” is not an automatic win.
Illustrative ArenaSample metrics — not a live run.
Task
Fix checkout race condition
acme / storefront
$35.40 of $50.00 · 18m 42s · Resolved
Comparison
How it works
From program line to Ship Receipt.
Contracted Autonomy: Open Program → Spend License → Survivor evidence → Accept + Receipt. You keep the kill-switch and merge control. Community stays $0.
- 01
Bind the Open Program
Point the workspace at a living program file. Agents may spend only against Open IDs — freestyle autonomy is refused when the program is bound.
- 02
License the spend
Each Arena reserve and fan-out carries an Open ID. Contenders race inside the budget; no Open ID means no spend.
- 03
Verify with evidence
Fitness, CI, and spend travel with the survivor path. Efficiency ranking selects among qualifying contenders.
- 04
Accept → Ship Receipt
You Accept once. Coppergate writes the program line Done and issues a Ship Receipt — spend, fitness, CI, writeback — not a chat log.
Ship Receipt
Accept leaves a receipt, not a chat log.
Open ID, spend, fitness, CI, and writeback travel with every Accept — accounting for Contracted Autonomy.
Ship Receipt
AG-011 · Fix checkout race condition
Open ID · Survivor Contender A · PR #128
CIPassing
Fitness0.91
Spend$35.40
Efficiency0.241
Selection reason
Selected because it passed all required checks and achieved the strongest efficiency-adjusted fitness.
Fitness & selection
Better solutions should win — not simply the agents that spend the most.
Coppergate evaluates validated output against execution cost to identify the most efficient qualifying result. An inexpensive attempt does not automatically win: it must pass the required checks first.
- Qualify — CI, tests, and policy gates filter invalid work.
- Score — Fitness reflects evaluation criteria and validation evidence for that Arena.
- Price — Spend is priced into selection so token burn is not a winning strategy.
Integrations
From signal to program-bound Arena.
Webhooks from tools you already run can arm a bounded Arena against an Open ID. Live PR/MR delivery is GitHub and GitLab today — always reviewable, never an unattended merge.
Sentry
Error detected → Open ID → Arena → reviewable PR
Inbound webhook arms a bounded fixer tournament when configured.
Jira
Engineering issue → Open ID → Arena → reviewable PR
Issue webhooks map to tasks; delivery is still PR/MR review.
GitHub CI
Failed workflow → Open ID → Arena → proposed repair
CI failure adapters can arm repair contests against the failing SHA.
Signal adapters in the current release — enable per workspace when configured. Bitbucket / Azure DevOps delivery clients exist but are deferred.
Quality & security
- SonarQuality
- CodeQLSAST
- SemgrepSAST
- DependabotDeps
- TrivySCA
- CodecovCoverage
- SonarQuality
- CodeQLSAST
- SemgrepSAST
Runtime & incident
- SentryErrors
- DatadogAPM
- PagerDutyIncident
- OpsgenieIncident
- SentryErrors
- DatadogAPM
- PagerDutyIncident
- OpsgenieIncident
Work tracking
- JiraIssues
- LinearIssues
- Azure BoardsWork items
- AsanaTasks
- ClickUpTasks
- JiraIssues
- LinearIssues
- Azure BoardsWork items
- AsanaTasks
- ClickUpTasks
CI & SCM (live delivery: GitHub · GitLab)
- GitHubActions + PR
- GitLabCI + MR
- CircleCICI signal
- BuildkiteCI signal
- JenkinsCI signal
- GitHubActions + PR
- GitLabCI + MR
- CircleCICI signal
- BuildkiteCI signal
- JenkinsCI signal
Notify
- SlackWebhook
- TeamsWebhook
- DiscordWebhook
- SlackWebhook
- TeamsWebhook
- DiscordWebhook
- SlackWebhook
- TeamsWebhook
- DiscordWebhook
Controls & safety
Autonomy with hard boundaries.
Controlled competition — not unbounded agent access. Spend caps, policies, and a kill-switch stay first-class. Security overview.
Repository boundaries
GitHub App and GitLab project installs are scoped to the orgs and repos you choose. Identity OAuth stays separate from repo access.
Budget enforcement
Project spend caps and reservations stop runaway work. Exhausted paths exit the pool instead of burning unlimited credits.
Execution policies
Forbidden paths, secrets, and production-write gates constrain what agents can touch while the Arena runs.
Evidence-based evaluation
CI, Sonar, coverage, e2e, and critic signals travel with runs so promotion decisions stay inspectable.
Kill-switch
Cooperative cancel and Arena-level stop are first-class. You can halt work without waiting for an agent to finish.
Signal ingress controls
Webhook secrets, fingerprint dedupe, and per-workspace storm quotas keep inbound floods from burning budget. Shipping in the current release.
Open pilots
Coppergate is built by Coppergate.
We dogfood Contracted Autonomy on our own repos — Open Program → spend license → Accept + Ship Receipt under a real cap — and ship adjacent open-source pilots like kprompt from the same shop.
CoppergateDogfood
Coppergate is built by Coppergate — Open Program lines, spend licenses, and Ship Receipts on our own MIT repos.
kprompt
The AI Runtime for Kubernetes — operate with intent, investigate with evidence.
FAQ
Straight answers.
Contracted Autonomy, Open Program spend licenses, and Ship Receipts — before you clone or try hosted.
Open Program Runtime: agents only spend against living Open Program lines. Contenders compete under a budget; fitness and CI decide; you Accept. Success is Done writeback plus a Ship Receipt — not a chat transcript.
Open source
Ready for autonomy
under contract.
Bind an Open Program, set a spend cap, and let survivors earn Accept — with a Ship Receipt, not a chat transcript. Community pricing stays $0.
Free forever to self-host. Pricing · Limitations · Coppergate is built by Coppergate · hello@coppergate.ai