sipyourdrink-ltd/bernstein

Deterministic orchestrator for CLI coding agents (Claude Code, Codex, Gemini CLI, +40 more). No model in the coordination loop, so parallel runs in per-task git worktrees replay byte-identically. Signed lineage plus an opt-in HMAC audit chain a reviewer checks offline, without rerunning it. Cluster mode, air-gap deploy. https://bernstein.run

What it solves

Bernstein is a deterministic orchestrator for CLI coding agents. It solves the problem of non-determinism and lack of accountability in multi-agent AI workflows by removing the LLM from the coordination loop and replacing it with a reproducible, Python-based scheduler. It ensures that agent tasks are isolated from one another and that every action is cryptographically verifiable.

How it works

Bernstein uses a plain Python scheduler to decide which agents run, their budgets, and their task graphs, ensuring that replaying a plan produces the same results. It isolates every task in its own git worktree and enforces lint, type, and test gates before merging. To ensure accountability, it maintains an always-on lineage spine and replay journal using Merkle-chains and HMAC-SHA256 audit logs, allowing users to verify the provenance of artifacts and the exact steps of a run offline.

Who it’s for

Developers and teams who require high-assurance, reproducible, and audited AI-driven coding workflows, particularly those operating in air-gapped environments or those needing strict cryptographic proof of how code was produced.

Highlights

  • Deterministic Scheduling: No LLM in the coordination loop; runs are reproducible end-to-end.
  • Cryptographic Verifiability: Uses HMAC-chained audit logs, Merkle-chained event journals, and signed agent cards to ensure tamper-evident records.
  • Agent Isolation: Each task runs in a separate git worktree with mandatory merge gates.
  • Broad Compatibility: Supports over 40 CLI agent adapters (e.g., Claude Code, Codex, Gemini CLI) and includes an air-gap install profile.
  • Cost Control: Enforces USD budgets per task or run using a hash-pinned price table without network lookups during scheduling.
  • Verifiable Governance: RBAC and budget checks are deterministic projections of the signed lineage spine.