What Constle is not
Constle governs the environment an agent runs in. It does not decide how the agent thinks, and it is not a place to run it.
On this page
Not an agent frameworkLink to this section
It governs the environment, not the logic. Constle doesn't decide how an agent reasons or plans: LangGraph, CrewAI or hand-rolled code run inside it unchanged. The agent is an ordinary container image named in the Agentfile.
Not a cloud providerLink to this section
It installs on your infrastructure, any cloud or on-premise. constle is a single CLI that runs agents on the machine it is installed on, with Docker or Firecracker as the sandbox backend.
Not a monitoring overlayLink to this section
Isolation stops exfiltration even if the model is fully compromised, because enforcement sits below the agent rather than inside it. A prompt injection that convinces the model to send a document to an undeclared host does not fail because the model reconsiders: it fails at the network layer, and the attempt is written to the audit log as a network_blocked event. See Architecture.
Not finishedLink to this section
Constle is v0.5.0, pre-1.0, and early. The Known limitations are listed up front rather than discovered later, and the Field reference labels every field it parses but does not act on.
Not a closed platformLink to this section
Apache 2.0, and the Agentfile format is an open, independently auditable standard: the specification is in the repository next to the code that implements it.