Cermet: A Local Authority Broker
Cermet fundamentally redefines access control within applications by focusing on granular authorization of actions rather than mere credential management. It empowers agents to request specific effects, such as refunds or deployments, while systematically recording authority decisions in a secure, hash-chained local receipt log.

Key Features:

• Typed Permissions: Cermet operates under a clear principle: you grant permissions based on the specific actions rather than general access to credentials.

  allow github.fetch  where owner = "you" and name = "your-repo"
  allow github.push   where owner = "you" and name = "your-repo"
  allow stripe.refund where charge = "ch_3TyX" and amount <= 5000
  allow vercel.deploy where project = "your-site" and target = "preview"
  

• Transparent Decision Log: Every authorization decision, whether approved or denied, is recorded with all relevant details, ensuring traceability and accountability.

  $ cermet log
  2026-08-11T22:45:36Z  ALLOW vercel.deploy req_62366a4587cd9c0f — allowed by: allow vercel.deploy
      where project = "your-site" and target = "preview" — "Deploying the landing-page fix for review"
  2026-08-11T23:18:55Z  DENIED stripe.refund req_3e047e679794bf0b: no sentence admits it — amount=9000
  

• Deny by Default Security Model: Cermet follows a zero-trust approach, rejecting any requests that do not explicitly match predefined permissions, thereby reducing the attack surface.

How It Works:
Cermet’s architecture includes a multicall executable and defining roles to manage permissions effectively:

• cermetd (daemon): Runs as a trusted service managing the encrypted vault and executing authorized actions.
• cermet (operator CLI): Provides operators with a command-line interface to manage rules, verify audits, and oversee the system status.
• git-remote-cermet: Allows for seamless integration with Git, ensuring that only authorized actions are performed directly through Git commands.

Guarantees of Integrity and Security:
Cermet ensures that all access decisions are made based on explicit authority granted through clearly defined permissions. The agent operates without key exposure, and all sensitive actions are handled within the secured environment of the daemon. Furthermore, authority adjustments necessitate direct human intervention, thus enhancing security.

Deployment:
Cermet is designed for both Linux and macOS environments, seamlessly integrating with popular platforms like GitHub, Stripe, and Vercel.

For more information, including a quickstart guide and advanced features, visit the official website at cermet.dev. Explore how Cermet can transform your application’s authorization process, providing clarity, security, and efficiency.