Portable Runs (Capsules)

Capsules is an experimental portable-run format. A capsule is a ZIP-compatible bundle containing a redacted run record, events, environment metadata, verification results, referenced artifacts, optional contract or policy, and checksums.

Credentials are not exported. Secret-like values are represented by redaction categories.

Enable Capsules

odinn experimental enable capsules --confirm-impact

Export and verify

odinn experimental capsules export \
  <run-id> \
  --output run.odinn

odinn experimental capsules inspect run.odinn
odinn experimental capsules verify run.odinn

Extraction rejects absolute paths and parent traversal. Verification checks internal content hashes.

Replay modes

Verification only validates the capsule without executing tools:

odinn experimental capsules replay \
  run.odinn \
  --mode verification-only

Tool mocked records captured tool boundaries without invoking the real tools:

odinn experimental capsules replay \
  run.odinn \
  --mode tool-mocked

Advanced: full replay

Full replay requires a disposable workspace and uses the audited executor. Redacted inputs fail closed. Network, credential, irreversible, and external-state effects require explicit approval.

Approval does not make a remote action deterministic or reversible.

Treat capsules as untrusted

A valid checksum proves internal consistency, not that the capsule’s instructions, outputs, or imported content are safe. Inspect before replaying and keep exports within the configured workspace or capsule store.

See Known limits for the replay boundary.