{"slug": "clodex-open-source-agentic-ide-with-governed-execution-and-graph-memory", "title": "Clodex – Open-source agentic IDE with governed execution and graph memory", "summary": "Clodex, an open-source agentic integrated development environment (IDE) that treats AI model output as untrusted input and enforces governed execution through explicit policies, isolated runtimes, and user-controlled review, has been released as a technical preview. The Electron-based workspace combines persistent AI tasks, code editing, terminal, browser, Git, models, memory, and controlled execution into a single environment, with advanced execution lanes feature-gated pending further testing.", "body_md": "Clodex is an open-source agentic development environment that combines persistent AI tasks, code, terminal, browser, Git, models, memory, and controlled execution in one Electron workspace.\n\nIt is built around a simple principle:\n\nModel output is untrusted input. Authority comes from explicit policy, isolated runtimes, and user-controlled review.\n\n**Current release status:** Technical Preview. The architectural core is\nimplemented and tested locally. Advanced execution lanes remain feature-gated\nuntil their live promotion evidence and manual sign-off are complete.\n\n| Goal | Document |\n|---|---|\n| Understand the product in a few minutes |\n|\n\n[Developer handbook](/mereyabdenbekuly-ctrl/clodex-ide/blob/main/DEVELOPERS.md)[Full project documentation](/mereyabdenbekuly-ctrl/clodex-ide/blob/main/full_doc.md)[Developer documentation index](/mereyabdenbekuly-ctrl/clodex-ide/blob/main/docs/developer/README.md)[Architecture](/mereyabdenbekuly-ctrl/clodex-ide/blob/main/docs/developer/architecture.md)[Security and data](/mereyabdenbekuly-ctrl/clodex-ide/blob/main/docs/developer/security-and-data.md)·[Security policy](/mereyabdenbekuly-ctrl/clodex-ide/blob/main/SECURITY.md)[ide.clodex.xyz](https://ide.clodex.xyz)A conventional coding assistant produces the next answer or patch. Clodex models engineering work as a durable task with its own state, workspaces, processes, permissions, evidence, and review lifecycle.\n\nA task can:\n\n- retain context across long-running work and application restarts;\n- operate across files, Git, terminals, browser tabs, MCP tools, and runners;\n- route work between models without changing the surrounding workflow;\n- request approval before high-impact shell, network, browser, or remote actions;\n- execute locally or move to Docker, SSH, or cloud-backed environments;\n- return diffs, receipts, artifacts, and a self-contained final result.\n\n| Area | What Clodex provides |\n|---|---|\nPersistent tasks |\nSearchable task history, projects, workspaces, forks, goals, progress, token budgets, and time budgets. |\nAgent runtime |\nManaged turns, cancellation, recovery, collaboration modes, tool execution, and supervised lifecycle handling. |\nCode workspace |\nFile editing, pending edits, line-level diffs, Git operations, worktrees, pull-request review, and protected merge flows. |\nTerminal and browser |\nPersistent shell sessions, local ports, browser/CDP context, console output, screenshots, and visual verification. |\nEvidence-backed memory |\nScoped memory, append-only evidence records, retrieval, provenance, checkpoints, and bounded context injection. |\nModel Fabric |\nProvider-neutral model routing, endpoint health, fallbacks, budget controls, usage accounting, and policy publication. |\nExecution Fabric |\nLocal execution, SSH sessions, Docker runners, custom runner contracts, cloud-task foundations, and portable snapshots. |\nGuardian |\nIndependent authorization decisions for sensitive capabilities, fail-closed outcomes, approval escalation, and audit events. |\nNetwork Policy |\nDestination grants, DNS validation, controlled browser access, MCP egress enforcement, and an audit ledger. |\nExtensions |\nMCP servers, skills, signed plugins, private marketplaces, runner SDKs, and capability-bounded generated apps. |\nContinuity |\nSession checkpoints, crash recovery, memory synchronization, artifact capture, and experimental session teleportation. |\n\nClodex separates user interface, agent execution, tools, secrets, and policy into explicit process and trust boundaries.\n\n``` php\nflowchart TB\n    USER[\"Developer\"] --> UI[\"Electron renderer\"]\n    UI <--> IPC[\"Karton typed IPC\"]\n    IPC <--> MAIN[\"Electron main process\"]\n\n    MAIN <--> AGENT_HOST[\"Agent Host process\"]\n    MAIN <--> MCP_HOST[\"MCP Host process\"]\n    MAIN <--> SANDBOX[\"Sandbox workers\"]\n\n    AGENT_HOST --> CORE[\"Agent Core\"]\n    CORE --> TASKS[\"Task lifecycle and goals\"]\n    CORE --> MEMORY[\"Evidence memory and context ledger\"]\n    CORE --> FABRIC[\"Model Fabric\"]\n    CORE --> POLICY[\"Guardian and Zero-Trust policy\"]\n\n    POLICY --> EXECUTION[\"Local, SSH, Docker, or cloud execution\"]\n    EXECUTION --> ARTIFACTS[\"Artifacts, receipts, and checkpoints\"]\n    ARTIFACTS --> MEMORY\napps/browser/                 Electron desktop application\napps/website/                 Public project website\nagent/runtime-node/           Isolated Node.js agent runtime\npackages/agent-core/          Agent lifecycle, memory, routing, and policy\npackages/agent-shell/         Shell and execution contracts\npackages/mcp-runtime/         MCP transport and protocol runtime\npackages/runner-sdk/          External runner integration SDK\npackages/karton/              Typed state and RPC transport\npackages/stage-ui/            Shared interface components\n```\n\nFor a complete map, see\n[ docs/developer/repository-map.md](/mereyabdenbekuly-ctrl/clodex-ide/blob/main/docs/developer/repository-map.md).\n\nClodex does not rely on a prompt asking the model to behave safely. Sensitive operations pass through deterministic controls outside the model runtime.\n\n**Fail closed:** ambiguous or invalid authorization results do not execute.**Isolated hosts:** agent turns, MCP servers, and sandboxed workloads run outside the renderer.**Explicit capabilities:** possessing a tool does not automatically grant authority to use it.**Controlled egress:** network destinations are evaluated independently of model intent.**Protected storage:** credentials use OS-backed storage; sensitive task artifacts use context-bound authenticated encryption.**Human review:** pending edits, permission prompts, protected merge flows, and high-impact approvals keep final authority with the user.**Supply-chain checks:** extension identity, signatures, integrity, compatibility, rollback, and quarantine are verified before activation.**Privacy-aware audit:** operational events avoid storing prompts, source code, audio, credentials, or other unnecessary sensitive content.\n\nRead the detailed model in\n[ docs/developer/security-and-data.md](/mereyabdenbekuly-ctrl/clodex-ide/blob/main/docs/developer/security-and-data.md).\nReport vulnerabilities through\n\n[, not through a public issue.](/mereyabdenbekuly-ctrl/clodex-ide/blob/main/SECURITY.md)\n\n`SECURITY.md`\n\n| Capability | Status |\n|---|---|\n| Desktop workspace, files, Git, terminal, and browser | Available for local testing |\n| Task lifecycle, goals, scoped memory, and recovery | Available for local testing |\n| MCP runtime and isolated Agent Host | Available for local testing |\n| Local and SSH execution | Available for local testing |\n| Docker and external runner control plane | Preview |\n| Guardian and managed network egress | Preview |\n| Signed extensions and generated apps | Preview |\n| Cloud Tasks and Session Teleport | Labs / promotion-gated |\n| Stable cross-platform distribution | Pending promotion evidence |\n\nThe status labels are deliberate: implemented foundations are not presented as stable production capabilities until real installation evidence, monitoring, rollback, and manual promotion checks are complete.\n\n- Node.js\n`22.23.1`\n\n- pnpm\n`10.30.3`\n\n- Git\n- macOS, Linux, or Windows for development\n- macOS for DMG packaging and notarization\n\n```\ngit clone https://github.com/mereyabdenbekuly-ctrl/clodex-ide.git\ncd clodex-ide\n\ncorepack enable\ncorepack prepare pnpm@10.30.3 --activate\n\ncp .env.example .env\ncp .env.example .env.dev\n\npnpm install --frozen-lockfile\npnpm build:packages\npnpm --dir apps/browser start:fast\n```\n\nUse the checked development command when you want type checking to run in parallel with Electron:\n\n```\npnpm --dir apps/browser start\n```\n\nEnvironment and provider configuration are documented in\n[ docs/developer/local-development.md](/mereyabdenbekuly-ctrl/clodex-ide/blob/main/docs/developer/local-development.md).\nNever commit\n\n`.env`\n\n, credentials, signing keys, or local runtime state.Run the complete local validation suite before opening a pull request:\n\n```\npnpm check\npnpm typecheck\npnpm test\npnpm security:secrets\n```\n\nValidated baseline on **July 12, 2026**:\n\n| Gate | Result |\n|---|---|\n| Package builds | `7 / 7` |\n| Typecheck tasks | `14 / 14` |\n| Test tasks | `16 / 16` |\n| Automated tests | `3,322 passed` |\n| Working-tree secret scan | `0 findings` |\n| Website production build | `passed` |\n| Desktop startup smoke | `passed` |\n| Main-plan readiness | `ready=true` |\n| Stable promotion | `evidence-gated` |\n\nCI and signed release evidence remain the source of truth for a published\nartifact. See\n[ docs/developer/testing-and-release.md](/mereyabdenbekuly-ctrl/clodex-ide/blob/main/docs/developer/testing-and-release.md)\nand\n\n[.](/mereyabdenbekuly-ctrl/clodex-ide/blob/main/VERSIONING.md)\n\n`VERSIONING.md`\n\nClodex exposes several integration surfaces:\n\n**MCP:** connect local stdio or remote Streamable HTTP/SSE servers;**Skills:** package reusable agent instructions and workflows;**Plugins:** distribute signed capabilities and optional executable runtimes;**Runner SDK:** integrate Docker, SSH, cluster, or custom execution backends;**Generated Apps:** create task-owned interactive tools with explicit grants;**Automations:** schedule bounded tasks with declared capabilities.\n\nStart with\n[ docs/developer/extensions-and-integrations.md](/mereyabdenbekuly-ctrl/clodex-ide/blob/main/docs/developer/extensions-and-integrations.md).\n\nContributions should be scoped, testable, and reviewable.\n\n- Read\n.`CONTRIBUTING.md`\n\n- Follow the commit and versioning rules in\n.`VERSIONING.md`\n\n- Sign commits according to the repository\n.`DCO`\n\n- Run formatting, type checking, tests, and secret scanning.\n- Include focused tests for changed behavior.\n\nUse the repository issue templates for bugs, feature proposals, documentation, and agent-runtime problems.\n\nSolo scientist building Zero-Trust AI infrastructure. Open to core engineering and research engineering roles at frontier AI labs, including Google DeepMind, xAI, OpenAI, Anthropic, Meta, and NVIDIA.\n\nFollow the project on [X · @CLODEx_lab](https://x.com/CLODEx_lab).\n\nIf Clodex is useful to you, you can support independent development with USDT. Send funds only through the network shown for the selected address.\n\n| Network | USDT address |\n|---|---|\n| BNB Chain | `0xecE224461627a13118982Fa28202Eb9768678AFD` |\n| TRON | `TAM5uVRpQexgn7gzAhWR7DZyHmyLgRRakP` |\n| Ethereum | `0xecE224461627a13118982Fa28202Eb9768678AFD` |\n| Avalanche C-Chain | `0xecE224461627a13118982Fa28202Eb9768678AFD` |\n| Polygon | `0xecE224461627a13118982Fa28202Eb9768678AFD` |\n| TON | `UQBE4RXHqPAY8Xft2G9kP_6bbfXbY-gRwR0NVvx-_qWsIeD3` |\n| Solana | `DNhzLgaFMZgLynwPxNyh6Znp9evRozbNprFm9BUXr94Z` |\n\nThe same network-aware donation interface with copy buttons is available on\nthe [Clodex website](https://ide.clodex.xyz/#support). Blockchain transfers\nare irreversible, so verify both the network and address before sending.\n\nClodex is distributed under the\n[GNU Affero General Public License v3.0](/mereyabdenbekuly-ctrl/clodex-ide/blob/main/LICENSE).\nThird-party components and notices are listed in\n[ THIRD-PARTY-NOTICES.md](/mereyabdenbekuly-ctrl/clodex-ide/blob/main/THIRD-PARTY-NOTICES.md).", "url": "https://wpnews.pro/news/clodex-open-source-agentic-ide-with-governed-execution-and-graph-memory", "canonical_source": "https://github.com/mereyabdenbekuly-ctrl/clodex-ide", "published_at": "2026-07-12 10:45:56+00:00", "updated_at": "2026-07-12 11:05:22.946012+00:00", "lang": "en", "topics": ["developer-tools", "ai-agents", "ai-safety", "ai-products", "ai-tools"], "entities": ["Clodex", "Electron"], "alternates": {"html": "https://wpnews.pro/news/clodex-open-source-agentic-ide-with-governed-execution-and-graph-memory", "markdown": "https://wpnews.pro/news/clodex-open-source-agentic-ide-with-governed-execution-and-graph-memory.md", "text": "https://wpnews.pro/news/clodex-open-source-agentic-ide-with-governed-execution-and-graph-memory.txt", "jsonld": "https://wpnews.pro/news/clodex-open-source-agentic-ide-with-governed-execution-and-graph-memory.jsonld"}}