Every change is a diff a named human approved, and you can verify the history instead of trusting it.

werknario is an open-source tool for office paperwork. An agent reads your documents in a Git repo, drafts a change, and hands it to a person to approve before anything is final. An agent here is software that carries a task through to the end, not just answers.

vertraege/split-sheet.mdproposed by agent:assistant

why this and not another agent

The gap is what stands between the model and a merged change.

reviewable diff: The agent proposes; a human reads the exact lines and approves. Nothing merges on its own.
citation gate: A claim that cites a file or line the agent never read blocks the merge request before it exists.
approver enforced: The merge is refused unless an authorised, authenticated human approves it. The name comes from the token, not a label.
tamper-evident log: Every step is a hash-chained entry. verify exits non-zero if the chain is edited, reordered, or truncated.
EU data residency: Enforced before the first model call. A route with no verified EU residency is blocked by default.
git-native: Your files stay in the GitLab or GitHub repo you already run. Self-hostable end to end.

an honest line

What runs today, and what does not.

Runs today

CLI: read → propose → approve → merge/PR → revert
GitLab, GitHub, and an offline mock backend
Grounding gate and enforced approver policy
Hash-chained audit log and offline verify
Multi-model registry with EU-residency enforcement

Designed, not built

Hosted browser demo (extension is built)
Sigstore-signed log for court-grade evidence
One SSO identity across every surface
CI-verify with automatic rollback

try it

The whole flow, offline, in one command.

No account, no key, no server. It runs against an in-memory repo with a scripted model, so you see the shape of it.

      npm install
      npm run build
      npm run demo
    

Works the same on Windows, macOS, and Linux. Apache-2.0, all of it, forever.