Fishhawk

fishhawk

The governed, auditable workflow for agent-driven software development.

Fishhawk is an opinionated workflow engine for agent-driven software changes: it defines the stages a change moves through (plan → implement → review), enforces policy on what an agent can and cannot do, gates the work behind human approvals, and keeps an immutable, signed audit trail of every plan, approval, and outcome. It is tool-agnostic and agent-agnostic — it is **not** a coding agent, a CI/CD platform, or a general-purpose workflow engine.

Fishhawk develops itself through Fishhawk: since Day 22 of the v0 build (2026-05-21), substantive changes flow through a workflow run defined by [`.fishhawk/workflows.yaml`](.fishhawk/workflows.yaml), and the audit log behind that development is published in [`docs/compliance/`](docs/compliance/).

**Status: alpha.** The v0 control plane, runner, CLI, MCP server, and Web UI have landed. See [Documentation](#documentation) for the full component map. Feature PRs are not yet being accepted while the v0 abstractions settle — see [`CONTRIBUTING.md`](CONTRIBUTING.md).

Quickstart

Local setup brings up the backend against a Postgres + MinIO stack and validates a workflow.

**Prerequisites:** [Go 1.25+](https://go.dev/dl/), [Docker](https://www.docker.com/), and — only for the Web UI — [Node 22+](https://nodejs.org/) with [pnpm 10+](https://pnpm.io/).

The [`Makefile`](Makefile) wraps the common loops (`make help` lists every target):

cp .env.example .env        # optional: populate later for GitHub App / OAuth / trace storage
make up                     # docker compose: Postgres :5432, MinIO :9000/:9001
make migrate                # apply backend migrations
make dev-backend            # run fishhawkd on :8080 — http://localhost:8080/healthz
make validate               # validate .fishhawk/workflows.yaml with the CLI

The Web UI (plan review, approvals, per-run audit log) is optional:

make dev-frontend           # in anot