Skip to content

Welcome to gosec 🚀

gosec.io banner
Antigravity-Native
Zero-CGo Static Go
Pure-Go SQLite DAG
$0.00 Local LLM Tier
Cloudflare Pages Edge

🌟 What is gosec?

gosec (github.com/gosecio/gosec, domain: gosec.io) is the modern Go Starter Boilerplate & Scaffolding Engine engineered specifically for Antigravity-First AI pair programming, deterministic SQLite task management, and zero-CGo static binary distribution.

Whether generating a high-throughput CLI tool, a production REST API, a multiplexed Model Context Protocol (MCP) server, or an Astro full-stack web portal on Cloudflare Pages, gosec provides hardened developer defaults and progressive disclosure agent tooling.

🌐 The AI Engineering Ecosystem

gosec is designed to work in synergy with the flagship open-source platforms developed by emaik:

🛸 gosec.io

The foundational Go starter chassis and modular scaffolding engine. Provides zero-CGo static binaries, pure-Go SQLite DAG task coordination, local LLM tiering ($0.00), and stdio MCP tooling for Antigravity AI agents.

Explore gosec.io →

🛡️ ctxsec.io

The declarative context security plane and hardware-enforced in-kernel hypervisor for AI agents. Enforces sub-5µs Google CEL security policies and zero-overhead Linux kernel sandboxing for applications built with gosec.

Explore ctxsec.io →

💖 emaik.io

The digital innovation studio and laboratory engineering autonomous AI developer platforms, cognitive agent architectures, and resilient cloud systems.

Visit emaik.io →

🏛️ System Architecture at a Glance

The following diagram illustrates how Antigravity AI agents interact with the gosec core engine, local Ollama runtime, SQLite task store, and the ctxsec.io security plane:

flowchart TD
    subgraph AntigravityFleet["🛸 Google Antigravity & AI Agent Fleet"]
        IDE["Antigravity IDE & agy CLI"]
        Skills[".agents/skills/ (Progressive Disclosure)"]
        Rules[".agents/rules/ (Invariants)"]
    end

    subgraph SecurityPlane["🛡️ ctxsec.io Security Plane"]
        CELHypervisor["Google CEL Policy Gate (< 5µs)"]
        KernelSandbox["0ms OS In-Kernel Sandbox"]
    end

    subgraph CoreEngine["⚡ gosec Core Engine (Zero-CGo)"]
        CLI["cmd/gosec (Developer CLI)"]
        MCP["cmd/mcp-server (stdio JSON-RPC)"]
        Backlog["pkg/backlog (Pure-Go SQLite DAG)"]
        Ollama["pkg/ollama (Local LLM Tiering)"]
        Doctor["pkg/doctor (Diagnostics)"]
        Scaffold["pkg/scaffold (Archetypes Engine)"]
    end

    subgraph WebEdge["🌐 Web & Docs Edge (Cloudflare Pages)"]
        Portal["gosec.io (Astro Landing Portal)"]
        Docs["gosec.io/docs/ (Material for MkDocs)"]
    end

    IDE -->|stdio JSON-RPC| MCP
    MCP --> SecurityPlane
    SecurityPlane --> Backlog
    SecurityPlane --> Ollama
    SecurityPlane --> Doctor
    SecurityPlane --> Scaffold
    CLI --> Backlog
    CLI --> Ollama
    CLI --> Doctor
    CLI --> Scaffold
    Scaffold -.-> WebEdge
Hold "Alt" / "Option" to enable pan & zoom

⚡ Core Value Propositions

  • Progressive Disclosure Skills (.agents/skills/): On-demand domain expertise (go-developer, backlog-manager, feature-lifecycle, local-llm, doc-standards).
  • Authoritative Invariants: Hierarchical enforcement via AGENTS.md and GEMINI.md.
  • Multiplexed MCP Server: Strongly typed stdio tools connecting Antigravity directly to local workspace operations.
  • Pure Go SQLite (modernc.org/sqlite): 100% CGo-free embedded database running on Darwin, Linux, and Windows.
  • Instant Cross-Compilation: Sub-second compilation to bin/gosec and bin/mcp-server with CGO_ENABLED=0.
  • Minimal Footprint: Stripped static binaries (-ldflags="-s -w") with zero runtime shared library dependencies.
  • Tier 0/1 Ollama: Zero-cost inference on http://127.0.0.1:11434 with qwen3-coder:30b and deepseek-r1:14b.
  • Graceful Fallback: Transparent, non-blocking failover to Gemini 3.8 Flash if Ollama is offline or saturated.
  • Token FinOps: Real-time token accounting and budget enforcement.
  • Interactive Wizard (gosec init): Rapid project generation with selective feature flags.
  • 5 Archetypes: CLI tool, REST microservice, MCP server, pure Go library, and full-stack Astro portal.
  • Production Defaults: Bundled GitHub Actions CI/CD, Gemini failure triage, devcontainers, and MkDocs manuals.

🚀 Quick Navigation

Guide Description Link
Getting Started Prerequisites, compilation, diagnostics, and CLI tour Read Guide →
Architecture 6-Phase Lifecycle, SQLite DAG, and invariant rules Deep Dive →
Scaffolding Engine Generating CLI, REST, MCP, and Astro projects View Scaffolding →
MCP Tools Catalog Complete JSON-RPC tool schemas for AI agents Browse Tools →
Local LLM Tiering Configuring Ollama for $0.00 zero-cost inference Configure Ollama →