Wraith is the WireGuard or Tailscale overlay that puts every operator-only surface behind a single shared identity. Listed here for honesty about what the suite includes.
Not for sale. Listed here for honesty.
Wraith does one job for one operator. It fronts admin panels, MCP servers, and database connections that no public visitor ever needs. There is no useful version of Wraith that a separate customer would buy, install, and operate; selling it would be selling someone else's infrastructure pattern back to them. Documenting it on the public site is honesty about the shape of the suite, nothing more.
The agent runtime control plane. Run history, prompt versions, approval queue, model and provider switches.
Tenant management, KEK rotation control, audit log review. Never reachable over the public internet.
rosecraft-git and other operator tools that talk to private GitLab and similar. Same overlay, same access pattern.
Direct Postgres connections for migrations and incident response. SSH and psql traffic ride the same overlay.
Nothing on the public marketing site, the customer-facing dashboards for Prospector and Vault, or the documentation site requires Wraith. Public surfaces stay public; admin surfaces stay operator-only.
