Why Cendor

The difference between an AI demo and an AI product is control.

Cendor is open-source governance your engineers embed in code — seven small libraries and a governed agent SDK beneath any agent framework. Spend capped before it happens. Attacks blocked before the model sees them. A receipt behind every action.

Not the one who installs things? Send this page to your engineering lead →

Plain answers

The questions everyone asks first.

What is Cendor?

Production plumbing for LLM applications — the unglamorous layer beneath your agent framework that controls cost, gates unsafe inputs and outputs, makes agents testable, and keeps an audit trail. Python and TypeScript. Free, open source, Apache-2.0.

What do the seven libraries do?

One problem each: pack the prompt honestly (contextkit), shrink history reversibly (squeeze), cap spend pre-flight (tokenguard), gate attacks (guardrails), record & replay runs (cassette), keep tamper-evident receipts (acttrace), and give every tool one seam (core). Use one, or all seven — under the framework you already have.

What does the SDK do?

It's the second door: start governed instead of retrofitting. Your team builds the agent on cendor-sdk and every run is budgeted, gated, audited, and replayable by construction — a working governed agent in about 10 lines, built from the same seven libraries.

How does it help my business?

It removes the four blockers between an AI demo and an AI product: unforecastable spend, injection risk, no audit evidence, untestable behavior. Your feature ships with the answers finance, security, and compliance will ask for — built in, not bolted on.

Two ways in

One stack. Two doors.

Both doors are the same seven libraries underneath — starting through either never locks you out of the other.

Door one · You already have an agent

The libraries — keep your stack, add the governance.

Your team keeps its framework and its code. Engineers add small libraries underneath — no rewrite, no migration, no new platform to run.

  • Spend capped before a call runs · exact, per-feature cost attribution
  • Attacks gated at $0.00 · before the model sees them
  • Tamper-evident receipts · one changed byte fails verification
  • Deterministic replay · tests stop hitting paid APIs

Door two · You're starting fresh

The SDK — start governed, a working agent in ~10 lines.

Don't retrofit governance later — begin with it as the foundation. cendor-sdk is a provider-agnostic agent loop where every run is budgeted, gated, audited, and replayable by construction, and it grows with you: memory, retrieval, multi-agent, ten provider paths.

  • Governed from the first line · not a plugin added under deadline
  • Faster to production · the compliance questions are pre-answered
  • No lock-in · the SDK's primitives ARE the seven libraries
  • Drop the governance, keep the agent · it's opt-in, never a cage

Which door? Have an agent → libraries. Building one → SDK. Either way your engineers decide in an afternoon — both install with one command.

Measured, not promised

Every number reproduces on your laptop.

0%token-count error vs the real tokenizer (OpenAI, with tiktoken)
97%smaller logs — compressed reversibly, restored byte-for-byte
~15 µsinstrument() overhead per call — bus emit, usage, Decimal pricing
1 bytea single edited byte breaks the audit chain — verify() fails

Honest by design. Cendor produces evidence to support EU AI Act, ISO 42001, GDPR, and NIST AI RMF processes — never a compliance guarantee, never legal advice. Costs are labeled reported vs estimated, in exact decimals. Cendor is a community-maintained open-source project (Apache-2.0), local-first, with no server and no data collection — your prompts and spend never leave your stack.

Created by Raghav Mishra (PowerAI Labs). See About and Privacy.

Watch

These normally open in a popup player. With JavaScript off, they play inline below.

What is Cendor? — the 2-minute brief
What is Cendor? — the 2-minute brief
The seven libraries — video tour
The seven libraries — video tour
cendor-sdk: start governed
cendor-sdk: start governed
The invoice nobody can explain
The invoice nobody can explain
One message away from a bad day
One message away from a bad day
The day the regulator asks
The day the regulator asks
Shipping without gambling
Shipping without gambling