Artificial Intelligence1 min read

Bernstein – open-source governance layer for AI agents

By · Published by Everything Blog

In short

Bernstein provides verifiable compliance logs by storing HMAC-chained JSONL event entries on disk where any record alteration invalidates subsequent verification. External reviewers can audit operational integrity by evaluating these hash chains with the original key or inspecting offline Ed25519-signed receipts. The framework also offers experimental cloud capabilities hosted on Cloudflare infrastructure, including Workers, Durable Objects, R2, and D1. Recent version 3.14.159 updates incorporate a Muse Code adapter, Agent Plugins v1.0.0 manifests, and a dedicated diagnostic audit command.

Key points

  • Operational plans can replay byte-identically across supported agents including Codex, Cl…: Operational plans can replay byte-identically across supported agents including Codex, Claude Code, and Gemini CLI.
  • Experimental cloud deployment options are supported on Cloudflare utilizing Workers, Dura…: Experimental cloud deployment options are supported on Cloudflare utilizing Workers, Durable Objects, D1, and R2.
  • The release of version 3.14.159 marks the software as beta while introducing named setup…: The release of version 3.14.159 marks the software as beta while introducing named setup error handling and Muse Code support.

Sources checked by our analysis pipeline: 1

several ai agents. one governance layer. every run provable.

bernstein is the open-source governance layer for ai agents: a deterministic python scheduler runs them in parallel, with no model in the coordination loop, so the same plan replays byte-identically. it runs on policy as code: you write the policy, bernstein enforces it, and produces the verifiable record.

ask anything.

one run, four stages.

from the blog

3 pieces, hand-picked.

field notes from the orchestra pit: what the newest release fixed and what it did not, what running this in the cloud looks like, and how it started.

bernstein 3.14.159: the stranger's ninety minutes

A first-use report described ninety minutes of setup that ended in nothing. v3.14.159 answers it: the plan loader raises named errors instead of swallowing malformed fields, five commands are removed and the rest fold with deprecation windows, the reference docs are CI-gated against the registered CLI, and the README says beta. Also new: a Muse Code adapter, Agent Plugins v1.0.0 manifests, a signed run receipt that verifies offline, and bernstein audit diagnose.

agents on cloudflare: workers, durable…

Artificial Intelligence