Stack
v1.4.0 · Open source · MIT

A deterministic contract around stochastic model execution

DAX is a governed execution workstation. It puts policy, approvals, replay and audit around the model, so a coding agent can propose anything and change only what passes.

Local-firstHITL requiredRust proof ladderBun

What DAX changes in the run

Govern what changes, keep the trail, and leave evidence, without turning the run into a chat log you have to dig through later.

01

Pause what matters

Risky actions resolve to allow / ask / deny before mutation.

02

See the run

Canonical events and replayable state, not chat archaeology.

03

Prove trust

Audit posture plus tamper-evident ledger checks.

RAO: intent, run, audit, override

A scripted walkthrough of how DAX pauses risky writes, records a verification receipt, and branches on approve or deny. It runs in your browser; nothing is sent to a server.

Product tour · Scripted demoBeat 0 / 4
Beat 0 · Intent

Task locked before the model moves

write-scope: src/**Forbidden: package.json

Task: Add an isEven helper with tests.

Write-scope is limited to src/**. package.json is forbidden. Policy vocabulary stays exact: allow / ask / deny.

Rust decides deterministic facts

Five crates form the ladder from replay to ledger. Orchestration stays in TypeScript; proofs stay offline and local.

CrateRole
dax-coreReplays canonical run events; deterministic proof reports
dax-policyallow / ask / deny without a model call
dax-auditTrust posture from six structured signals
dax-ledgerTamper-evident append-only chain
dax-indexerDeterministic local structure index
Boundary: TypeScript orchestrates. Rust decides deterministic facts.

Peg note: pinned to commit 494354dc814377be2994292caf4dc577ede0b0b3 (v1.4.0)

Where DAX sits among peers

Same class of tools, different posture on pausing, evidence and replay. As of v1.4.0.

Cursor

  • Strong IDE agent UX
  • Approvals in the editor flow
  • Session-centric trail
  • Less formal audit export

Claude Code

  • Capable terminal agent
  • Permission prompts in-run
  • Transcript-forward history
  • Proof ladder not primary

Codex

  • Cloud / CLI agent loops
  • Policy via product controls
  • Run logs as product surface
  • Local ledger optional

DAX

  • Pause / approval (allow · ask · deny)
  • Evidence-forward diffs
  • Replayable run state
  • Audit readiness + ledger

Get DAX on the machine

Install paths and a local proof-ladder demo. Blocks are copyable; paste into your terminal when ready.

curl
curl -fsSL https://raw.githubusercontent.com/ShaileshRawat1403/dax/main/script/install.sh | DAX_REPO=ShaileshRawat1403/dax bash
brew
brew install ShaileshRawat1403/tap/dax
winget
winget install DaxAi.DAX
demo
bun run demo:proof-ladder

Prefer a release asset? Download v1.4.0.

What the workstation looks like

Screens from the product: the home screen, an approval, and a diff before approval.

The DAX home screen, where a run starts
Home: where a run starts
A DAX approval prompt pausing a risky action
Approval: a risky action, paused
A diff shown for review before approval
The diff, shown before approval

MIT. Session data and keys stay local unless you connect a provider. Always review critical actions. HITL required.