No. Trustabl works on top of your existing tools. It analyzes your code, documentation, and behavior, then generates enriched metadata and optional policy files without modifying your source code.
Yes. OpenShell secures the runtime environment. Trustabl hardens the tools the agents call inside that environment. TAA automatically generates least-privilege policies, egress rules, binary requirements, and sandbox compatibility metadata that OpenShell can consume directly. Together they deliver defense-in-depth: secure runtime + production-hardened tools.
Yes. Trustabl generates audit-ready metadata, including structured logging schemas, data lineage, retention policies, and SLSA attestations that make compliance evidence much easier to produce.
We're focused on the free remediation experience: GitHub Actions integration, expanded Skill.md support, and skills file scanning. Team governance and compliance features are planned for later.
