Shamrock — An LLM-Agnostic Harness for Real Work

Keep the project. Change the model.

Shamrock is a local-first desktop harness for coding, documents, and agentic work. It lets you move between OpenAI, Anthropic, DeepSeek, Qwen, Kimi, Gemini, and local models without rebuilding the workflow around each provider.

WHY SHAMROCK EXISTS

Most AI work disappears into isolated chats. The conversation, files, approvals, tool history, and decisions become difficult to reconstruct—and switching models often means starting over.

Shamrock organizes work around the project instead. Chats, documents, skills, connected tools, working memory, and provider configuration remain together while the model becomes a replaceable execution component.

THREE MODES, ONE PROJECT

WORK
Use connected tools for research and operational tasks through the same governed agent loop.

DOCUMENTS
Create versioned deliverables from reusable format targets. Reports and exports are saved into the project library instead of being stranded in chat.

CODE
Plan and execute repository changes with confined shell access, file-level approvals, git-backed recovery, automatic documentation, and independent quality, DRY, structure, and security review.

A GLASS BOX, NOT A BLACK BOX

Shamrock exposes the machinery that most agent systems hide. The interface shows the active plan, tool activity, context-window occupancy, token usage, captured working memory, review findings, and the routing decisions behind each turn.

Prompts, tool calls, reasoning configuration, approvals, routes, and outcomes are appended to a reconstructable execution record. When something goes wrong, the system leaves evidence instead of mystery.

PROVIDER-SPECIFIC AT THE EDGE, AGNOSTIC AT THE CORE

Shamrock uses adapters where provider wire behavior genuinely differs. DeepSeek reasoning replay and thinking controls stay inside the DeepSeek adapter. Anthropic and OpenAI-compatible behavior stay inside theirs.

Above that boundary, the planner, tools, approvals, documents, memory, reviews, and agent loop remain provider-neutral. Supporting a provider does not mean coupling the product to it.

BUILT FOR GOVERNED EXECUTION

• Commands run through native process confinement: Seatbelt on macOS and bubblewrap or Landlock on Linux.

• File and shell tools are jailed to the project workspace and reject symlink escapes.

• Secrets are encrypted through the operating system and never exposed to the renderer.

• Durable subagents retain explicit lineage, bounded authority, cancellation, and cold-resume state.

• Code Mode can compose several governed tool calls inside one bounded program, reducing round trips without granting ambient process or network authority.

DOCUMENTATION IS PART OF THE SYSTEM

Every Shamrock project maintains canonical specification, design, pseudocode, and knowledge documents on disk. The planner reads them as the source of truth before acting, and the pipeline updates them after mutating work.

Generated reports, uploads, and Mermaid diagrams are versioned in the project library and remain accessible from both Documents and the chat that created them.

PUBLIC DEVELOPMENT PREVIEW

Shamrock is an Electron application for macOS today, built as source-available software under the Functional Source License 1.1 with an Apache 2.0 future grant.

The preview is intended for developers and operators who want model choice without surrendering control of execution, evidence, or project history.