Skip to content

Commit 4f75adb

Browse files
committed
chore: modernize README — clean, professional, matches website
1 parent eb9419b commit 4f75adb

1 file changed

Lines changed: 53 additions & 72 deletions

File tree

README.md

Lines changed: 53 additions & 72 deletions
Original file line numberDiff line numberDiff line change
@@ -6,95 +6,85 @@ Local-first. Zero-trust. Auditable by design.
66

77
---
88

9-
## The problem nobody talks about
9+
## The problem
1010

11-
Every AI coding agent on the market does the same thing: it takes your code, sends it to a cloud API, and hopes for the best. No sandbox. No audit trail. No cryptographic guarantees. You are trusting an external server with your proprietary source code, your API keys, your infrastructure.
11+
Every AI coding agent sends your code to the cloud. No sandbox. No audit trail. No cryptographic guarantees. You are trusting strangers with your proprietary code.
1212

13-
Kilo Code raised $8 million and has 1.5 million users. Cline has 5 million installations. Cursor raised at a $9 billion valuation. They are all built on the same foundation: send your code to the cloud and pray.
13+
Kilo Code raised $8M. Cline has 5M installs. Cursor is worth $9B. They all do the same thing: send your code to a server you don't control.
1414

15-
WRAP NEBULA is built on the opposite foundation: **never trust, always verify**.
15+
WRAP NEBULA does the opposite.
1616

17-
## What makes this different
17+
## What makes it different
1818

1919
| | Kilo | Cline | Cursor | **WRAP** |
2020
|---|---|---|---|---|
21-
| Code sandbox | no | no | no | **V8 isolate** |
21+
| Sandbox | no | no | no | **V8 isolate** |
2222
| Audit trail | no | no | no | **Ed25519** |
23-
| PII protection | no | no | no | **Auto-redact** |
23+
| PII redaction | no | no | no | **Automatic** |
2424
| Local-first | partial | partial | no | **Default** |
25-
| Zero API keys | no | no | no | **Ollama** |
25+
| Free forever | no | no | no | **Yes** |
2626
| Telegram | no | no | no | **Built-in** |
27-
| Open source | yes | yes | no | **MIT** |
28-
29-
## How it works
30-
31-
Every message flows through a pipeline where compromising one layer does not compromise the others:
32-
33-
1. **Input** - Telegram, CLI, VS Code, or web
34-
2. **Input Sanitizer** - blocks prompt injection (10 patterns), SQL injection (6), XSS (5). PII redacted automatically
35-
3. **Rust Governor** - separate process. Binary-level audit signing. Policy enforcement
36-
4. **SOUL.md** - agent personality, skills, and rules in simple markdown
37-
5. **LLM** - Ollama (local, free), Claude, or GPT-4. Auto-detected
38-
6. **Skills** - 14 sandboxed executors
39-
7. **Memory** - SQLite, local only, never transmitted
40-
8. **Response** - signed, audited, delivered
41-
42-
## The 14 skills
43-
44-
- web.search - DuckDuckGo scraping, no API key
45-
- files.read/write/list - path-restricted filesystem ops
46-
- code.run - V8 sandboxed execution
47-
- code.edit - diff-based editing with backup
48-
- code.search - grep, find, symbol search
49-
- terminal.run - shell commands with safety checks
50-
- reminder.set/list - natural language dates, SQLite storage
51-
- git.status - structured git output
52-
- calendar.read - local .ics reader
53-
- email.summary - local .mbox reader
54-
- project.context - smart file inclusion for LLM
55-
56-
Every skill is hash-verified before loading. Sandbox blocks dangerous patterns.
5727

5828
## Install
5929

6030
```
31+
# Authenticate
32+
nebula auth login anthropic
33+
34+
# Install
6135
curl -fsSL https://raw.githubusercontent.com/Vitalcheffe/Wrap/main/install.sh | bash
62-
nebula init
63-
nebula start
36+
37+
# Start (Ollama must be running)
38+
ollama serve && ollama pull llama3 && nebula start
6439
```
6540

66-
Requires Ollama running locally. No API keys needed.
41+
## How it works
6742

68-
## CLI
43+
Every message flows through a pipeline where compromising one layer does not compromise the others:
6944

70-
- nebula init - setup wizard
71-
- nebula start - start the agent
72-
- nebula stop - stop the agent
73-
- nebula status - show config
74-
- nebula doctor - health check
75-
- nebula skill - manage skills
76-
- nebula agents - multi-agent info
45+
1. Input — Telegram, CLI, VS Code
46+
2. Sanitizer — blocks injection, redacts PII
47+
3. Rust Governor — separate process, policy enforcement
48+
4. SOUL.md — agent personality in markdown
49+
5. LLM — Ollama / Claude / GPT-4
50+
6. Skills — 14 sandboxed executors
51+
7. Memory — SQLite, local only
52+
8. Response — signed, audited
53+
54+
## Skills
55+
56+
- web.search — DuckDuckGo scraping, no API key
57+
- files.read/write/list — path-restricted filesystem
58+
- code.run — V8 sandboxed execution
59+
- code.edit — diff-based editing with backup
60+
- code.search — grep, find, symbol search
61+
- terminal.run — shell with safety checks
62+
- reminder.set/list — natural language dates
63+
- git.status — structured git output
64+
- calendar.read — local .ics reader
65+
- email.summary — local .mbox reader
66+
- project.context — smart file inclusion
7767

78-
## VS Code Extension
68+
## CLI
7969

80-
- Chat panel - talk to your agent in VS Code
81-
- Right-click actions - select code, explain/fix/review
82-
- Audit trail tree - every signed action in real-time
83-
- Status bar - agent online/offline
70+
- nebula init — setup wizard
71+
- nebula start — start the agent
72+
- nebula stop — stop the agent
73+
- nebula status — show status
74+
- nebula doctor — health check
75+
- nebula auth login — authenticate
76+
- nebula auth list — show credentials
77+
- nebula skill create — create a skill
8478

8579
## Security
8680

87-
### Input Sanitizer
88-
10 prompt injection patterns, 6 SQL patterns, 5 XSS patterns. PII auto-redacted: SSN, credit cards, emails, phones.
81+
Input Sanitizer: 10 prompt injection, 6 SQL, 5 XSS patterns. PII redacted.
8982

90-
### V8 Sandbox
91-
Temp HOME, minimal PATH, no network, 128MB memory, 30s timeout. Dangerous patterns blocked.
83+
V8 Sandbox: temp dir, no network, 128MB, 30s timeout.
9284

93-
### Ed25519 Audit Trail
94-
Every action signed. Hash-chained. Verify all with one function call. Immutable.
85+
Ed25519 Audit Trail: every action signed. Hash-chained. Verify all.
9586

96-
### SQLite Memory
97-
Local only. Never transmitted. Never synced.
87+
SQLite Memory: local only. Never transmitted.
9888

9989
## Testing
10090

@@ -105,19 +95,10 @@ npx vitest run # 46/46 passing
10595
npx tsc --noEmit # 0 errors
10696
```
10797

108-
## Roadmap
109-
110-
- v8 Core agent, sandbox, audit, Telegram, CLI - Shipped
111-
- v9 VS Code extension - Shipped
112-
- v10 Plugin system - Shipped
113-
- v11 Multi-agent - Shipped
114-
- v12 Published extension, community - Active
115-
- v13 Enterprise, SSO, compliance - Planned
116-
11798
## License
11899

119100
MIT
120101

121102
---
122103

123-
Built by VitalCheffe - 16, Casablanca, Morocco
104+
Built by VitalCheffe 16, Casablanca, Morocco

0 commit comments

Comments
 (0)