{"slug": "show-hn-rbek-governed-execution-for-ai-agent", "title": "Show HN: RBEK – governed execution for AI agent", "summary": "RBEK 0.2.0, a governed execution platform for AI agents, has been released as an open-source developer CLI that separates agent intent from authorized execution, enforcing policy admission before external actions and generating deterministic evidence. The platform, distributed via releases.rbekplatform.com, includes a zero-key offline demo and a live mode integrating with OpenAI agents and Open-Meteo, with commercial Team and Enterprise access handled separately.", "body_md": "**Governed execution for AI agents, workflows and software.**\n\nRBEK separates what an agent **wants to do** from what it is **authorized to execute**.\n\n```\ncurl -fsSL https://raw.githubusercontent.com/rbekplatform/rbek/main/examples/real-governed-agent/demo.sh | bash\n```\n\n**No API key. No prior RBEK installation. No configuration.**\n\nThe demo installs and validates the public RBEK CLI when needed, then runs an offline governed proof:\n\n``` php\nAgent requests an action\n        |\n        +-- unauthorized -> DENY  -> executed: NO\n        |\n        +-- authorized   -> ALLOW -> governed dry-run -> AUTHORIZED\n                                                |\n                                                +-- evidence\n```\n\nWhat you see in the terminal:\n\n```\nUnauthorized action ............ DENIED\nDenied action executed ......... NO\nAuthorized action .............. ALLOWED\nGoverned dry-run ............... PASS\nGate authorization ............. AUTHORIZED\nRBEK policy enforcement ........ REAL\nRBEK evidence .................. REAL\n```\n\nThe default proof performs **no external network action**. Policy enforcement\nand evidence generation are real RBEK behavior.\n\nThe public GitHub Actions workflow executes the proof twice and verifies that the deterministic evidence summary is identical across both runs.\n\nUse **Open in GitHub Codespaces** above, then run:\n\n```\ncd examples/real-governed-agent\n./demo.sh\ncd examples/real-governed-agent\nexport OPENAI_API_KEY=\"your-key\"\n./demo.sh --live\n```\n\nLive mode performs real model inference and a real Open-Meteo external action through the RBEK governed execution boundary.\n\nAI agents can decide what they want to do. Production systems still need a controlled boundary for what is actually allowed to execute.\n\nRBEK puts that boundary between application logic and real external actions:\n\n```\nagent / workflow\n      ↓\nexecution request\n      ↓\nRBEK policy admission\n   ↙             ↘\n DENY            ALLOW\n                   ↓\n               execute\n                   ↓\n               evidence\n```\n\nThis keeps execution governance separate from the agent framework, model provider or workflow engine.\n\n```\ncurl -fsSL https://releases.rbekplatform.com/cli/stable/install.sh | bash\n```\n\nVerify:\n\n```\nrbek-cli --version\n```\n\nCurrent public stable:\n\n```\nRBEK 0.2.0\n```\n\nCreate and run a minimal local RBEK project:\n\n```\nrbek-cli init ./rbek-demo\nrbek-cli run ./rbek-demo\n```\n\nOr run the repository example:\n\n```\nbash examples/5-minute-quickstart/run.sh\n```\n\nThe goal of the first five minutes is simple: install RBEK, create a governed local project and execute it through the RBEK CLI.\n\nSee [QUICKSTART.md](/rbekplatform/rbek/blob/main/QUICKSTART.md) for the complete first-run walkthrough.\n\nAfter the zero-key proof, you can run the real agent path:\n\n```\ncd examples/real-governed-agent\nexport OPENAI_API_KEY=\"your-key\"\n./demo.sh --live\n```\n\nIn live mode:\n\n```\nOpenAI agent\n     ↓\nweather.current\n     ↓\nRBEK policy admission\n     ↓\ncontrolled external execution\n     ↓\nOpen-Meteo\n     ↓\nreceipt + certification\n```\n\nThe agent does not call Open-Meteo directly. The external action goes through the RBEK governed execution boundary.\n\nSee\n[examples/real-governed-agent/README.md](/rbekplatform/rbek/blob/main/examples/real-governed-agent/README.md)\nfor details.\n\nDeveloper is the public CLI entry point for local development, evaluation and integration.\n\nIt does not require a paid commercial entitlement.\n\nTeam and Enterprise commercial access are handled separately.\n\nThis repository contains Developer documentation, examples and installation guidance.\n\nThe RBEK runtime is distributed through the official release host:\n\n`https://releases.rbekplatform.com`\n\nThe complete runtime source is not published in this repository.\n\n`https://rbekplatform.com`\n\nSee [SECURITY.md](/rbekplatform/rbek/blob/main/SECURITY.md).", "url": "https://wpnews.pro/news/show-hn-rbek-governed-execution-for-ai-agent", "canonical_source": "https://github.com/rbekplatform/rbek", "published_at": "2026-08-13 12:24:38+00:00", "updated_at": "2026-08-13 12:43:19.607477+00:00", "lang": "en", "topics": ["ai-agents", "ai-policy", "ai-safety", "developer-tools"], "entities": ["RBEK", "OpenAI", "Open-Meteo", "GitHub"], "alternates": {"html": "https://wpnews.pro/news/show-hn-rbek-governed-execution-for-ai-agent", "markdown": "https://wpnews.pro/news/show-hn-rbek-governed-execution-for-ai-agent.md", "text": "https://wpnews.pro/news/show-hn-rbek-governed-execution-for-ai-agent.txt", "jsonld": "https://wpnews.pro/news/show-hn-rbek-governed-execution-for-ai-agent.jsonld"}}