Cadora · getting started

Ship agent-built software
you can prove.

Coding agents build fast. Cadora is the audit-grade conductor that proves what they built, checks nobody faked it, and tells you what it cost — on Claude Code, Codex, and more.

deterministic gates tamper detection portable evidence per-node cost
01 · the problem

The agent says the tests pass.
Do they?

prove

"Tests pass" means whatever the agent decided it means. A suite that runs zero tests still exits green.

trust

Agents have been caught faking test runs and swapping in stub tools. Who checks the checker?

price

You ran it on Claude and Codex. Which was cheaper for this build? Every vendor's dashboard stops at its own fence.

Every agent vendor ships a way to run agents. None neutrally proves what its own agent did, sees across vendors, or hands you evidence you can forward.

02 · what it is

A conductor that sits above the agents.

it audits output

Cadora re-runs your build and tests itself, reads exit codes and test counts, scans the toolchain for tampering, and captures every run. It never takes the agent's word.

it is not the agent

The agent loop belongs to the backend CLI (claude -p, codex exec). Cadora drives it, gates it, prices it — which is exactly what makes its verdicts neutral and its cost ledger cross-vendor.

One class per backend. The same workflow runs on Claude or Codex and A/B-compares directly — design on one, code on another, measured to the node.

03 · the five commands

From vision to proof in five steps.

1cadora doctorcheck your backend CLIs are on a tested version — offline, no model calls
2cadora run <topology> --vision vision.md --cwd ./demodrive the gated workflow autonomously on your chosen backend
3cadora report <run-id>package the run as a portable, checksummed evidence pack
4cadora eval <run-id>a deterministic pass/fail verdict with a CI-friendly exit code
5cadora compare <run-a> <run-b>the measured A/B — outcome, model, and cost, per node
04 · the evidence pack

One run, one portable proof.

cadora report <run-id>

A self-contained report.html + report.json + a SHA-256 checksums.txt over every archived file. Mail it, print it, attach it to an invoice — verify it anywhere with shasum -a 256 -c.

what it states

Gate verdicts (incl. a suite that ran zero tests), tamper findings, the human-review trail, and per-node cost by backend. It claims exactly what the archive recorded — and that it is checksummed, not signed.

The evidence isn't a summary Cadora writes about the run. The evidence is the run — captured, hashed, and handed over.

05 · the measured A/B

Stop guessing which model to use.

Claude Sonnet 5  ·  $5.74
same spec
same gates
Codex $1.98

A real cadora compare on one topology: both backends passed, and the cost came in at $1.98 vs $5.74 — measured, reproducible, per node. The old "model X is always cheaper" heuristics don't survive contact with a run archive.

06 · the crown jewels

Gates and integrity — the checks testers ask for.

deterministic gates

Cadora re-runs the build/tests itself. A runner that executes zero tests is vacuous and blocks the run — it verified nothing. A missing toolchain is blocked_prerequisite, not a fake failure.

tamper detection

cadora integrity catches generated packages that impersonate real tools, unrecognized build substitutions, and tests run against a swapped environment — the documented ways agents game their own checks.

The point is simple: Cadora verifies the boring facts itself. Modes: audit (record), enforce (block), repair (one constrained fix, then re-verify).

07 · cost, honestly

One ledger, three billing models.

Claude

Reports dollars directly. Subscription-funded by default; metered API is an explicit opt-in.

Codex

Reports tokens; Cadora prices them from the public rate table and flags the figure est.

Kiro

Reports subscription credits — shown as credits, never pretended into dollars.

cadora usage and the dashboard's FinOps panel split cost by model, backend, and funding — the same total everywhere, even when design ran on Claude and code ran on Codex.

08 · security model

It audits output. It does not sandbox execution.

An autonomous run drives the agent with --dangerously-skip-permissions inside the --cwd you give it — it can read, write, and run commands there with your permissions.

point it safely

A fresh directory, a git worktree, or a container — not your home dir, not a repo with secrets.

it tells you

Every run prints a blast-radius banner and asks once; CI bypasses with --yes.

local by default

Dashboard and MCP bind localhost only, no auth; Cadora refuses a public bind without an explicit flag.

09 · get started

Three minutes to your first evidence pack.

$
pip install cadora · Python 3.10+, plus an authenticated claude or codex CLI
$
cadora doctor · confirm at least one backend is ready
$
cadora run examples/aidlc.topology.yaml --vision examples/hackathon-hello.vision.md --cwd ./demo · a fun build in ~2 minutes
$
cadora report <run-id> · open the pack, then cadora compare a second backend

Full walkthrough: docs/hackathon-quickstart.md · presenter's script: docs/demo-script-5min.md · docs/getting-started.md · github.com/yeychenne/cadora. Bring a throwaway repo and a backend login — you'll have a checked, priced build before the demo ends.

1 / 10
← → navigate · ⌘P print