Documentation

0trace Docs

Everything you need to deploy, configure, and extend 0trace — the secure-by-default automation runtime with deny-first capability enforcement and tamper-evident audit logs.

Quick Start

Run 0trace in seconds with Docker — no installation required.

docker run --rm -it ghcr.io/0trace-ai/zt:latest help

Ready to go deeper? Read the CLI reference →

⌘

CLI Reference

Every zt command: run, install, sign, verify, audit, serve, and more. Includes install instructions for Linux, macOS, and Docker.

⚙

Writing Skills

Skill format specification, DSL syntax, all 14 capability types, and the sign-and-publish workflow for the 0trace registry.

⇌

Channels

Connect agents to Slack, Telegram, Discord, WhatsApp, Signal, and WebChat through the unified multi-channel gateway.

◎

Intent Monitoring

Sealed intents lock agent goals at runtime. Drift detection scores every LLM response and halts or escalates when behaviour deviates.

⬡

Secret Management

Opaque credential handles, XChaCha20-Poly1305 vault, HashiCorp Vault and AWS Secrets Manager integrations, and automatic key rotation.

Installation

Docker Recommended

Zero-install evaluation. No build tools required.

docker run --rm -it \
  ghcr.io/0trace-ai/zt:latest help

Docker Compose

Persistent server with HTTP API on port 8743.

git clone https://github.com/0trace-ai/zt.git
cd zt
docker compose up zt-serve

Build from Source

Requires Zig 0.13.0. Produces a single static binary.

git clone https://github.com/0trace-ai/zt.git
cd zt
zig build -Doptimize=ReleaseSafe
./zig-out/bin/zt help