Software production infrastructure for engineering teams working with AI agents.
Máquina is a portable operating layer between organizational intent and software execution. It gives teams a shared, executable definition of how agent-assisted work may happen, then connects that definition to existing development workflows.
Máquina does not replace coding agents, IDEs, Git providers, or CI systems. It provides a common contract that can operate across them.
The core project primitive is the Factory Contract: a versioned, human-readable and machine-readable definition of how software work must proceed.
| Layer | Defines |
|---|---|
| Context | Which product, architecture, repository, and task sources are authoritative |
| Capabilities and permissions | Which tools, paths, data, environments, and actions are allowed |
| Process and approvals | Which stages, checks, decisions, and escalation paths are required |
| Evidence | What must be observed or produced before work advances |
Factory Contracts live with the customer, are reviewed like other production policy, and remain independent of any single agent or model provider.
Máquina currently provides a portable Go CLI and GitHub workflow components for:
- validating repository-owned Factory Contracts;
- generating a contract from a detected repository toolchain;
- linking work to explicit, scoped intent;
- evaluating pull requests against deterministic contract rules;
- distinguishing verified facts, actor assertions, and unobserved conditions;
- running contract-declared bounded actions;
- exposing a native MCP server for tool adapters;
- producing local evidence and allowlisted, shareable evidence records;
- exporting evidence mappings for SOC 2 and ISO 27001 workflows.
The pull request is the first integration point because intent, code, checks, approvals, and reviewer judgment already meet there. The operational advisory is an SDLC briefing, not a code review or an autonomous merge decision.
Install with Homebrew:
brew install maquina-la/tap/maquinaOr with Chocolatey:
choco install maquinaCreate a Factory Contract from an existing repository and validate it:
maquina init --vibe
maquina contract validateMáquina can be evaluated locally without connecting a hosted service or providing GitHub credentials.
- Customer-owned contracts and evidence. Organizational operating rules should not be trapped inside an IDE or model vendor.
- Tool-neutral execution. Adapters may change; the contract remains stable.
- Deterministic checks first. Model commentary is optional, labeled, and never silently promoted into verified evidence.
- Explicit uncertainty. Missing or unobservable information is not treated as success.
- Least privilege. Capabilities, protected resources, and publication boundaries are declared and reviewable.
- Outcomes over activity. The useful measures are delivery flow, evidence completeness, quality, and reviewer trust—not tokens or lines of code.
maquina-actions— precompiled GitHub Actions for governed delivery workflowsskills— portable skills for agent-assisted software deliverymaquina-releases— versioned CLI binarieshomebrew-tap— official Homebrew packageschocolatey-packages— official Chocolatey package sources
Questions about the project: hola@maquina.la