Platform components
Authoring, execution, distribution, and trust are separate layers. Teams include a private hosted namespace.
The public catalog is free (login for usage tracking). Every team also gets a private hosted namespace for internal adversaries, with role-based push and pull access. External OCI registries remain supported.
CLI
Open-source binary to search, pull, run, pack, push, and sign adversaries. Primary interface for local development and CI.
SDK
Open-source TypeScript SDK for rules, observations, findings, and the runtime review envelope.
Runtime
How adversaries execute: review scope, permissions, model access, reporting, and host vs future sandboxes.
Public catalog
Free official packages on registry.adversarylabs.ai under domain/name ids (go/security, ci/github-actions, …). Browse on the site; pull with the CLI.
Official signatures
Ed25519 signatures over content digests. Release CLI verifies them for host-execution trust.