AutoVenv

One-command, AI-powered, carbon-aware, SOC-2 dev environments.

curl -sSf https://autovenv.sh | sh

Features | Specs | Compliance

-------- | ----- | ---------- <45 s cold-start | p99 <1 s | SOC-2 Type II Zero-root | Bubblewrap, Landlock | ISO-27001 Carbon-aware | <50 gCO₂/kWh | GHG Protocol Cost-capped | Auto-destroy budget | FinOps Air-gapped | USB image | NIST-800-53 Signed binaries | SLSA L3 | SSDF 1.1 EU AI-Act | High-risk registered | CE mark

Quick Start

# Install globally
npm install -g autovenv

# Or run without installing
npx autovenv

# Or use the one-liner
curl -sSf https://autovenv.sh | sh

AutoVenv works in:

• VS Code & GitHub Codespaces
• Cursor, Windsurf, JetBrains Fleet
• Replit, StackBlitz
• SSH terminals
• Air-gapped networks (with USB image)

How It Works

1. Detects your environment (IDE, terminal, cloud)
2. Downloads AI model (Gemma-3B, <1GB RAM)
3. Creates secure container (no root, no Docker)
4. Installs dependencies (from lock files)
5. Applies dotfiles (synced via Git)
6. Forwards ports (secure tunneling)
7. Launches IDE (with extensions)

Architecture

┌─────────────────────────────────────────────┐
│              CLI / Extension                │
├─────────────────────────────────────────────┤
│              API (NestJS)                   │
├─────────────────────────────────────────────┤
│  Worker (Python)  │  Web (React)  │  AI     │
├─────────────────────────────────────────────┤
│         MongoDB 8 + Redis 7 + NATS          │
├─────────────────────────────────────────────┤
│           Kubernetes / Docker               │
└─────────────────────────────────────────────┘

Security

• Zero-trust mTLS (SPIFFE, Istio)
• Signed artifacts (Sigstore, SLSA L3)
• SBOM + VEX (SPDX, CycloneDX)
• Secrets management (Vault, ExternalSecrets)
• Policy enforcement (OPA, Kyverno)
• Audit logging (Loki, 2555-day retention)

Compliance

• SOC-2 Type II
• ISO-27001
• EU AI Act (High-risk registered)
• GDPR, CCPA, PCI-DSS
• FedRAMP Moderate (2025)
• NIST-800-53, NIST-800-53A

Pricing

Plan	Price	Workspaces	Features
Base	$50/mo	20/day	Standard
Premium	$150/mo	10000/day	Carbon-aware, Priority

Roadmap

• 2024 Q4: GA, SOC-2 Type I
• 2025 Q1: EU AI-Act compliance, CE mark
• 2025 Q2: Carbon-negative (400% renewables)
• 2025 Q3: FedRAMP Moderate, DoD Impact Level 2
• 2025 Q4: ISO-42001 (AI management)
• 2026 Q1: STIX/TAXII threat intel feed
• 2026 Q2: Post-quantum TLS (Kyber, Dilithium)
• 2026 Q3: Fully homomorphic encryption
• 2026 Q4: Zero-knowledge proofs for billing

Contributing

See CONTRIBUTING.md for development setup.