Philosophy
Why Boring Infra Co. builds local-first, inspectable infrastructure tools.
Infrastructure is boring. Reliability is not.
We build tools for the parts of software nobody wants to think about — package management, cloud sandboxes, stack context, agent security, work continuity, shared workspaces, and verification state. The boring part should just work.
Inspectable
Every tool should explain what it did and why. No hidden side effects, no opaque background processes, no “trust us” configuration.
- Root snapshots before every mutation and writes an append-only event ledger
- Combie only records relationships it can prove with evidence
- Pico maps attack paths with explicit evidence chains
- Harnie separates observed events from derived claims with provenance
- Meno binds evidence to a subject hash and will not let unknown masquerade as proven
- Campfire keeps the goal, the work, and the decisions in one place so the next person or agent can see them
Dependable
We prefer battle-tested patterns over experiments. When something breaks, you should be able to undo it or destroy it cleanly.
- Root:
root rollback --last - Sandman:
sandman destroy <env>with TTL auto-reap - Combie: local SQLite you can inspect directly
- Pico: local security graph, no cloud upload
Understandable
Plain documentation, clear CLI interfaces, and predictable behavior. If you need a workshop to use a dev tool, we have failed.
Boring by design
Predictable beats clever. Our tools do one job well:
| Product | One job |
|---|---|
| Root | Install CLI tools deterministically |
| Sandman | Create and destroy cloud environments |
| Combie | Connect engineering providers into context |
| Pico | Observe agent security paths |
| Harnie | Carry work-state across agents |
| Meno | Bind evidence to the current subject |
| Campfire | Give humans and agents a shared place to work |
Local-first
State stays on your machine. There is no Boring Infra Co. hosted control plane.
| Product | State location |
|---|---|
| Root | ~/.root/ |
| Sandman | ~/.sandman/config.json |
| Combie | .combie/ or $HOME/.combie |
| Pico | .pico/pico.db |
| Harnie | $HARNIE_HOME/harnie.db |
| Meno | .meno/ |
| Campfire | workspace state on your machine |
Sandman uses your cloud accounts — we never hold your credentials in a hosted service.
Independent products
Products share philosophy, not a platform. You can use Root without Sandman, Combie without Pico, and so on. Each has its own install path, its own state, and its own GitHub repository.