behold
BEHOLD
A live control plane on chant
See every substrate of an estate in one graph that drift colours. Act through the gated Ops you already committed.
What are you pointing behold at?
Works
behold serve ./estatereads the member list throughchant workspace ls --json- A box per member: resources for chant and Terraform members, instances for choudoufu
- A member chant cannot read draws as one card that names the reason code
behold doctor ./estate --fixturns a.behold.jsonmember list into achant.workspace.json
First step
To try it first, npx @intentius/behold demo argo-estate serves a declared workspace without Docker.
npx @intentius/behold serve ./estateServe a chant workspaceSee behold on a chant workspace for the rest.
See it live
Watch behold follow real terragucci pipelines in a loop. The demo is read-only and needs no install.
Open the live demoBy tool
Show the whole prompt
Clone https://github.com/INTENTIUS/behold and get me looking at a live
infrastructure graph in my browser.
I want the bundled demo. It needs Docker and no cloud account. Install what
it needs and start it, then tell me the URL.
Walk me through what I am looking at: what the colours mean, and how I make a
resource change colour while I watch.
When Docker is not running, say so. Show me the source graph on its own
instead.
For anything past the demo, read https://intentius.io/behold/llms.txt and
https://intentius.io/behold/using/agents/.
Never deploy with the Deploy button, `POST /api/apply` or `POST /api/ci/dispatch`. Gate approvals stay mine as well (`/api/ops/:name/signal/:gate`, `/api/workspace/gates/approve`, `/api/operator/approve/:op/:gate`). Op runs (`/api/ops/:name/run`) and rollbacks (`/api/rollback`) are mine too. Leave `--auto-sync` off, and keep a `behold preview` or `--public` serve read-only.The same demo from npm, no clone, with Docker: npx @intentius/behold demo
- One graph, every substrate
- Coloured by what the estate holds
- A zoom dial down to single fields
- Field ownership on Kubernetes
- Writes start the Ops you committed
- Unobserved reads as a hole
- A static snapshot anyone can open
- Every pane as JSON for an agent
Where it sits
Section titled “Where it sits”chant source ──build/lint──▶ graph IR ──behold──▶ live graph + drift + (delegated) actions (deterministic) (server + browser)behold reads what chant compiled and what the cloud reports, and shows you the difference. As a viewer over a compiler, it can say plainly which parts it could not read.
What the colours say
Section titled “What the colours say”Green means managed and amber means foreign. Blue is declared but not yet observed. The colours come from reading the live estate, and behold hosts no state file. A resource behold could not read shows as unobserved, which is a separate claim from absent. Reading the graph has every colour and zoom tier.
Where writes run
Section titled “Where writes run”Sync starts the ApplyOp you committed, and Adopt starts your ReconcileOp, which opens a pull request a person merges. Deploy runs chant with the credentials behold was started with. A terragucci or SQL Yodeler repo leaves every write to its pipeline. What behold is covers the rest.