Skip to content

Ways to Use Engineering Runtime

The same runtime binary serves three consumers. Behaviour is identical — Bootstrap → Context → Policy → Auth → Execution → Audit — only the caller changes.

┌─────────────┐   ┌─────────────┐   ┌──────────────────┐
│   Human     │   │   CI/CD     │   │  AI / Runtime    │
│  engineer   │   │  pipeline   │   │     Agent        │
└──────┬──────┘   └──────┬──────┘   └────────┬─────────┘
       │                 │                   │
       └────────────┬────┴───────────────────┘
                    ▼
              runtime binary
                    ▼
           Engineering platforms
Mode Who drives Typical entry Guide
Local (human) You, in a terminal runtime github …, runtime capability execute … Local setup
CI/CD A pipeline job Composite action → runtime capability execute … CI/CD
AI agent Claude / Cursor / any agent under the Runtime Agent contract Agent may only invoke runtime … AI agent

What every mode shares

  1. One binary. Install from engineering-runtime-releases (or build from source). No daemon, no language runtime.
  2. One Runtime Home. Config, policy, context, specs, commands, audit — see Runtime Home.
  3. Two execution surfaces.
  4. Provider operations: runtime github …, runtime files …
  5. Command Engine: runtime command run <binary> …
  6. Capabilities. Markdown workflows that compose the surfaces above — runtime capability validate|execute ….
  7. Governance before work. Policy can deny before auth or execution; every outcome (including denial) is audited.

Pick a path

  1. Install
  2. Quick Start
  3. Deeper local notes: Local setup
  1. Add the setup-runtime action
  2. Set RUNTIME_GITHUB_TOKEN (and optional org)
  3. Call runtime capability execute … or provider commands
  4. Full contract: CI/CD
  1. Install runtime and bootstrap
  2. Open the engineering-runtime-ai-agent repo (or apply the same hooks/rules)
  3. Ask in natural language — the agent may only call runtime
  4. Full contract: AI agent

Identity on the audit trail

Set ENGINEERING_RUNTIME_CONSUMER so audit records show who drove the binary:

Value Use when
human Interactive terminal (default when unset and not CI)
ci Pipelines — samples set this explicitly
ai Runtime Agent sessions 
export ENGINEERING_RUNTIME_CONSUMER=ai
runtime github user get
runtime audit tail -n 1
Repository Role
engineering-runtime-releases Versioned binaries + checksums
engineering-runtime-capabilities Shared / company capability store
engineering-runtime-samples Working CI workflows + setup-runtime action
engineering-runtime-ai-agent Runtime Agent contract + shell hooks
Engineering Runtime site Vision and architecture essays