// authorized security research

Hovel

A Go-hosted framework for authorized red-team emulation, controlled lab exercises, defensive validation, and operator workflow automation.

Quickstart pipx or uvx

$ pipx install hovel
$ hovel cli

# or run the latest release directly
$ uvx hovel@latest cli

Choose your path

// operator workflow

From chain to session

01 of 07

Hovel CLI demo creating a mock survey and exploit chain. — **Step 1** Create the operation chain

Use ← → or choose a step. Scroll down for the platform paths.

// one engine, typed contracts

Choose your path

Operate third-party capabilities safely, build compatible modules, or understand the platform beneath both.

Operate Run Hovel safely Run Hovel, throw a saved chain, build a chain interactively, inspect results, and operate sessions with generated demos. Extend Build a compatible module Author and test modules with the Python, Go, or Rust SDK while preserving the shared runtime contract. Understand Learn the platform Understand Hovel's scope, architecture, safety model, daemon, providers, Mesh, PKI, and operator interfaces.

hoveld owns operations, chains, providers, Mesh, PKI, payloads, artifacts, sessions, and audit events. CLI, one-shot, and MCP clients use the same application services and compatibility contracts.

Connect an AI harness

// agent-native operations

Bring your AI harness

Install Hovel's official skills and typed MCP integration for Claude Code, Codex, or OpenCode. Agents learn the Hovel workflow while operating through the same daemon services, safety gates, and audit trail as human operators.

Install your harnessskills + MCP

$ hovel agent install codex
$ hovel agent install claude
$ hovel agent install opencode

Install and operate the integration → Read the MCP contract →

01Codex

02Claude Code

03OpenCode

+Any MCP client

Hovel MCP server, CLI, and an AI agent operating the same throw workflow with structured tool calls and live logs. — Live MCP workflowAgent and human interfaces share one daemon-owned operation.

Shared stateCLI and agents see the same operations, chains, artifacts, and sessions. Typed authorityPlanning, confirmation, dangerous-module gates, and policy remain enforced. Auditable parityAgent actions produce the same structured events and durable evidence.

Explore contracts and evidence

// contracts and proof

Reference and evidence

Move from the product overview to exact interfaces, integrated modules, and generated compatibility evidence.

BookAll documentationBrowse every chapter by part and reading order. ModulesModule catalogueIntegrated modules, guides, build notes, tests, and references. API SDK reference Generated Python, Go, and Rust SDK reference from source docs. Evidence Compatibility and test report Coverage, operator parity, suites, targets, logs, XML, and artifacts.

Build it One entry point through Aspect CLI.

aspect help
aspect hovel-check
aspect hovel status