Witbitz docs Get access
Documentation

Build, verify, and operate apps on Witbitz.

Witbitz is a trusted runtime for collaborative AI apps built around Spaces. Start with what a Space is, build against the runtime, verify the trust claims, then choose hosted, on-prem, air-gap, or Bridge.

Start with the overview Developer quickstart Verify it yourself
Start

Understand the product before the protocol.

These pages orient the reader around Spaces, the runtime underneath, and the exact shipped status.

Read first

Overview

What a Space is, how static apps use Witbitz, and where the deeper docs fit.

 Reality map

Status

Live, private beta, built-not-production, and designed work in one table.

 Architecture

Platform

The three layers, runtime services, topologies, and relationship to Kibitz.
Build

The practical developer path.

The current path is a reference browser client plus the `/space` runtime and invite-only `/v1` API. The docs say that plainly.

QuickstartOpen the reference app, discover the endpoint, create a Space, post a turn, and poll. Create a SpaceRoom key, commitment, sealed config, gated marker, key models, and owner-governed create. Run an agent turnThe decrypt-once render, identity checks, tool loop, re-seal, and readback. Tools and widgetsHow tools produce shared room state, files, blobs, widgets, or proposals. Embed a SpaceDrop a content-blind room into any page in one line — isolated iframe, origin-checked bridge, owner-governed.
Deep dive

Async Spaces

The agent-as-function architecture and content-blind poll model.

 Actions

Delegated authority

Propose, approve, execute, and audit.

 Contract

Platform API

The tenant-keyed `/v1` surface and OpenAPI links.
Trust

Check the claims, including the limits.

Witbitz docs separate what is protected today from what is preview, attested, or designed.

ClaimStatusStart here
Gated reads/writes refuse unauthorized usersLiveVerify it yourself
Stored ledger is ciphertext with no operator recipientLivePrivacy model
Human approval gates high-stakes agent actionsLiveDelegated authority
Owner-governed admission tiersBuilt opt-inOwner-governed rooms
Server render unobservable in useNot production trafficAttested server tier
Overview

Trust model

The two guarantees, what is protected, and what is not hidden.

 Admission

Identity and admission

Key possession, signed entries, gated Spaces, OIDC, agent keys, owner policy.

 Lifecycle

Member lifecycle

Removal, history vs future content, key rotation, compromised identities.

 Recovery

Recovery

No operator recovery key; user-held recovery and device/key roadmap.

 Different model

Live call security

The WebRTC/Kibitz path and why it is not the same as an async Space.

 Canonical deep dive

Verified Room

The complete identity, admission, and lifecycle model.
Operate

Choose the right boundary.

Hosted gets you started; on-prem and air-gap move the runtime into infrastructure you control; Bridge connects sovereign spaces.

Mode selector

Deployment options

Hosted private beta, enterprise VPC/on-prem, air-gap, and Bridge in one map.

 Hosted

Hosted private beta

Access, tenant keys, public OpenAPI, hosted evidence, and operational boundaries.

 Customer boundary

Enterprise and on-prem

Run the runtime with your model, storage, records, secrets, IdP, and ops.

 Zero egress

Air-gap mode

What `AIRGAP=1` changes, what still works, and what needs local replacement.

 Interop

Bridge protocol

Governed collaboration between sovereign Spaces or external parties.

 Optional runtime

Companion

The native/device-side helper path and why it is optional.

 Contract

The issuer

Credit without accounts — an issuer holds the customer and the payment relationship; Witbitz validates and meters and knows neither.
Machine-readable

Raw docs and API specs.

Markdown remains canonical for language models and source review. Rendered pages are for humans.

/llms.txt /llms-full.txt · every doc on one HTML page Platform OpenAPI Full design OpenAPI Bridge protocol Bridge OpenAPI YAML