Acceptance verification
cursor 184 · acknowledged
Runne is a local-first Rust runtime for AI coding agents. Execution state is durable, completion requires verification evidence, and every dangerous action needs a capability grant. The chat window is a view. The runtime is the truth.
Rust · 40 crates · ~3,400 tests · 25 documented subsystems · one local process · no telemetry

RUNTIME AUTHORITY · CONFIRMED PROJECTIONS ONLY
CLIENTS
Event Journal
ORDERED · DURABLE · REPLAYABLE
cursor 184 · acknowledged
cursor 185 · explicit state
ISOLATED WORKSPACES
RUNNE FIELD NOTES · ISSUE 001
Follow Runne through the moment a request becomes durable, controlled, and provably complete.


01 · THE REQUEST
Runne turns the prompt into a TaskRun with an identity, a timeline, and a budget.


02 · THE INTERRUPTION
The UI can close. The provider can stall. The authoritative run keeps its place.


03 · THE RECOVERY
Runne replays the journal and resumes from confirmed state—not from a hopeful guess.


04 · THE BOUNDARY
Files, shells, networks, and secrets stay behind explicit capability grants.


05 · THE PROOF
Tests, checks, and artifacts become verification evidence attached to the run.


06 · THE OUTCOME
You get a completed task with chronology, evidence, and an audit trail clients can trust.
Durable execution · capability security · verification evidence
THE THREE GUARANTEES
The run survives its window.
Every dangerous action needs a grant.
Completion carries evidence.
THE STORY GETS BIGGER · ISSUE 002
The same runtime boundary keeps working as clients, providers, budgets, and histories multiply.


07 · MANY CLIENTS
Desktop, CLI, and API clients read confirmed runtime projections instead of inventing their own state.


09 · BOUNDED WORK
Token, time, and tool limits are enforced while accounting remains visible and attributable.
LIVE RUNTIME
Every step is backed by the journal: state, permissions, budget, and verification evidence live in one place.
TR-0184 · RUNNING
RUN STATE
runne task inspect TR-0184
UNDER THE PANELS
Clients request work. The runtime decides what is allowed, records what actually happened, and publishes only confirmed state.
DESKTOP · CLI · API
AUTHORITATIVE RUST RUNTIME
SQLITE · ORDERED · REPLAYABLE
Runne is local-first and designed to be inspected.