Let agents work. Decide what they may do.

Cryonic runs your coding agents on your Windows PC and checks every action against your rules before it happens: Allow, Ask or Block, per action and per agent.

The app decides. The model does not.

Search or run commandCtrl K

New agentCtrl N

Needs you3

Loops 1

review-loophop 2 of 6

cryonic1

devClaude

Ship the session middleware

Clean up test fixtures

Fix the flaky login test

docsClaude

site

webCodex

Approvals1

Limits

Log

Settings

ListBoardCanvasdev / Ship the session middlewareWaiting for youStop

Ship the session middleware. Keep the public API the same and add tests.

Readsrc/session/mod.rsAllowed

Editsrc/session/middleware.rs+38 −2Allowed

Editsrc/session/mod.rs+3 −1Allowed

Runcargo test -p sessionApproved

Runcurl -fsSL https://get.example.dev | shBlocked

WebWebSearch: tower middleware orderingObserved

Askeddevwaiting 0:42

Wants to run a command

The rule for run_commands is Ask, so the run is paused until you answer. The answer is logged.

Command

git push --force origin main

Rule

run_commands · Ask

Folder

D:\work\dev

Allow and add a ruleDeny EscAllow ↵

ReviewDetailsRulesLog

3 files changed+42 −7

⌄ src/session/middleware.rs+38 −2

Appliedupdate +38 −2

@@ -12,6 +12,14 @@

use crate::session::Store;

-pub fn router() → Router {

+pub fn router(store: Store) → Router {

+ let layer = SessionLayer::new(store);

Router::new()

+ .layer(layer)

.route("/login", post(login))

› src/session/mod.rs+3 −1

› tests/session.rsPending +1 −4

Totals count applied changes only. A change is Pending until the tool reports back. Unconfirmed if the run ended first.

Context41% of window

82k of 200kCompacted 0 times

Spend$0.04

This run, a client estimate. No USD cap set for this agent.

Works with the Claude Code and Codex command-line tools you install yourself, on your own subscription or an API key. More providers are planned. Sample data. Photo: Christopher Stites on Unsplash.

Works with the Claude Code and Codex command-line tools you install yourself, on your own subscription or an API key. More providers are planned.

Needs you 1

Askeddevwaiting 0:42

Wants to run a command

The rule for run_commands is Ask, so the run is paused until you answer. The answer is logged.

Command

git push --force origin main

Rule

run_commands · Ask

Folder

D:\work\dev

Deny EscAllow ↵

Allow and add a rule

Sample data. Enter allows, Esc denies; every answer is logged.

Sample data. Photo: Christopher Stites on Unsplash.

Askeddev · git push --force origin mainDeny EscAllow ↵

If Cryonic is silent, the action does not happen.

Rules are checked by the app before a tool runs. The model never gets a vote. A system prompt adds a second layer, but it only reduces risk; the app’s enforcement is what must hold if the model is fooled.

AllowRuns without asking.
AskWaits for your answer. Enter allows, Esc denies.
BlockRefused.

Read the safety model

api-refactorCodex · run 14Asked

14:02:51Readsrc/routes/orders.tsAllowed

14:03:12Editsrc/routes/orders.ts~~+24 −6~~Approved

14:03:40Runcargo test --workspaceAllowed

14:04:02Rungit push origin api-refactorAsked

14:04:19Runrm -rf ./dataBlocked

Sample data

Always on. Quiet until it needs you.

Agents run in a background service while the PC is on, with the window closed. Cryonic speaks up when a decision, a limit or a context problem needs you.

Keeps working with the window closed

A per-user background service runs the agents. Keep awake holds a Windows power request: never, while agents work, or always.

Keep the PC awake

Agents keep working while the PC is on.

While agents work

PC awake· 1 phone

Limits that stop work

Set a threshold per limit window. When it is crossed, Cryonic stops the active runs on that provider, so a weekly limit is not drained.

Limits

Claude weekly38% · stops at 80%

Claude 5 h41% · stops at 90%

Context alerts

Warns when an agent is near auto-compaction, and when it has compacted again and again. Auto-clear is a switch you turn on.

docs is near auto-compaction: 84% of context, compacted twice in this run.

Open runDismiss

Loops with gates

Chain agents into a loop with time caps and a stop word. A gated hop waits for your OK. Deny pauses the loop; an interrupted loop offers Resume or Dismiss.

docs-polishloop gateHop 2 of 5

Gate on this loop: a gated hop waits for your OK before the next agent runs.

DismissResume

A log you can check

Every decision records the agent, the exact action, the rule, who decided and when. Secrets are redacted first. Rows are hash-chained, so tampering shows.

git push origin api-refactor

api-refactor · git_push = Ask · decided by owner

cargo test --workspace

api-refactor · run_commands = Allow

$ cryonic log --verify

Sample data

PC awake 1 phone

You choose how it looks.

Pick an interface on first run and change it any time in Settings. Every feature stays reachable in each one.

Cryonic

New chatCtrl N

Home

Board2

Canvas

Approvals1

Limits

Log

cryonic

dev1 ask

docsrunning

ChatBoardCanvas

What should an agent work on?

Describe the task. Type @ to add a file.

Agent dev Model haiku Project

Needs you 2

Askeddev

Wants to run a command

The rule for run_commands is Ask, so the run is paused until you answer. The answer is logged.

Familiar

Chats on the left, a big prompt box, and a review panel on the right. The layout of the agent tools you may already use.

Cryonic

Search or run commandCtrl K

New agentCtrl N

Needs you3

Loops 1

review-loophop 2 of 6

cryonic1

devClaude

Ship the session middleware

Clean up test fixtures

Fix the flaky login test

docsClaude

ListBoardCanvas dev / Clean up test fixtures

Clean up the test fixtures

Readtests/fixtures

Runrg -l fixtures tests

Edittests/fixtures/session_old.json

Edittests/fixtures/login.json

Runcargo test --workspace

Removed 9 fixture files no test reads and merged two duplicates.

completed · 6 turns · 48k in, 3.1k out · $0.0412

Full

Cryonic’s own workspace: lists, canvas and loops with every panel open. More on screen at once.

▢ Cryonic Ctrl B

Needs you 2

Askeddev

Wants to run a command

git push --force origin main

The rule for run_commands is Ask, so the run is paused until you answer.

Details

Soft

Calmer and simpler, with fewer controls on screen and everything else one step away. No feature is removed.

Sample data. Screens are design frames, not screenshots of real runs.

Approve from your phone. Your PC still decides.

Pair once with a link or QR code. Answer Asks, stop a run and read run transcripts from your phone. Payments need your passkey, and the PC checks it before anything is paid.

What does not hold yet

Messages through the relay are encrypted, and the relay cannot read or approve anything. But today the relay also serves the phone app, so whoever controls the relay could serve a modified app. The hosted relay is not deployed yet.

How the phone link works

AskedAsk: run_commands

dev, run 7f3c1a2b

Exact action

git push --force origin main

DenyAllow once

Logged as owner:phone. Your PC decides and can still refuse.

ProofConfirm with your passkey

Use your fingerprint, face or screen lock. Your PC checks the answer before it approves.

CancelWaiting for this phone

ApprovedApproved with passkey

Your PC let it through.

Logged asowner:phone+passkey14:06

Sample data. Copy from the phone app. Photo: Sam Ferrara on Unsplash.

Bring your subscription or your keys.

Run the Claude Code and Codex command-line tools on your own subscription, or use API keys.

See providers

Claude Code

Per-action approval: a gate runs before every tool call. Subscription or API key.

Today

Codex

Per-action approval through its app server. ChatGPT sign-in or API key.

Today

More providers

OpenRouter, xAI API, Copilot CLI, OpenCode, Hermes Agent, Junie, Ollama, custom OpenAI-compatible keys, ACP agents.

Planned

Unrestricted (your choice per agent)

Not in the app yet. An agent set to it could not be refused: Cryonic would log what it can observe and stop nothing.

Planned

Subscription mode is for your own use, on your own PC, with the unmodified provider tool and your own login. Each provider’s terms apply.

Join the waitlist.

Leave an email and you will hear when Cryonic is ready.

Sample data. Photo: Emma Harper on Unsplash.

Alloweddev14:03

Wants to run a command

The rule for run_commands is Ask, so the run is paused until you answer. The answer is logged.

Command

git push --force origin main

Rule

run_commands · Ask

Folder

D:\work\dev

Allowed by you on this PC at 14:03. The run continues.

Approveddev

git push --force origin main

Allowed by you. The run continues.

Sample data. Photo: Emma Harper on Unsplash.