limbs.dev

Agents have
brains.
They still need
hands.

Opinionated CLI tools that give an agent a body: a grip for secrets, hands that refuse to treat silence as safety. Not a framework. Not plugins.

Small black figure on a stool, no real arms, staring at a key and an empty work glove on the table.
Plate I A model can think. It still cannot pick up the key.

csec

moving here

The grip.

A per-machine encrypted secret store. Master key in the OS vault, AES-256-GCM at rest, age-encrypted sync over SSH. The value never appears in argv, a URL, or a log.

curl -fsSL https://csec.pwan0.com/install | bash

Currently at csec.pwan0.com. Moving to csec.limbs.dev.

Keys hanging from a nail fall to the floor. The black figure presses a keyring into its own body.
Plate II Hung on a nail, a secret falls. Gripped, it stays.

ahh

beta

The hands.

One Go binary: scan untrusted text, mail, telegram, watch, doctor. SAFE means every required scanner covered the bytes. A missing model is UNKNOWN, never a quiet pass.

curl -fsSL https://staging.ahh.limbs.dev/install | bash

Staging until the first signed stable release. Origin: ahh.limbs.dev.

Black figure holding a spiked envelope at a distance with wooden tongs, writing unknown on a tag, unused safety stamp under the desk.
Plate III Do not shake hands with a stranger's letter.

The origin is not the trust anchor.

The installer is trust-on-first-use over TLS. It checks a checksum from the same host, which catches a corrupt download, not a compromised origin.

Every later update is verified against an ed25519 public key compiled into the binary you already have. A tool never accepts a manifest signed by another channel’s key, and never accepts a version below the one it last saw.

Not for you if you want a plugin marketplace, fifty integrations, or to empower your AI.