# Conduit

> Secure, self-hosted observability for AI agents: traces, logs and metrics over mTLS, stored in ClickHouse and VictoriaMetrics, with a server-rendered UI. Go services, Go and Python SDKs.

Each link below is the page's raw Markdown. The same pages are browsable as HTML at https://tjscanlan.github.io/conduit/. Source of truth: the docs/ directory of https://github.com/tjscanlan/conduit.

## Guides

- [Overview](https://tjscanlan.github.io/conduit/index.md): What Conduit is, its highlights, and where to start.
- [Architecture](https://tjscanlan.github.io/conduit/architecture.md): Components, data flow, delivery and failure guarantees, storage schema (spans, logs, metrics), schema migrations, sensitive data.
- [Deployment](https://tjscanlan.github.io/conduit/deployment.md): Docker Compose and Kubernetes setup, health checks, upgrades, and the configuration reference (every environment variable).
- [conduitctl](https://tjscanlan.github.io/conduit/cli.md): The conduitctl CLI: one-command local quickstart, agent certificates, and a doctor that diagnoses a stack that isn't working.
- [Security](https://tjscanlan.github.io/conduit/security.md): Threat model, mTLS agent identity, ingestion rate limiting, UI authentication (login form or GCP IAP), browser hardening.

## SDKs

- [Examples](https://tjscanlan.github.io/conduit/examples.md): Runnable Go and Python agents (hello-trace, tool calling, asyncio, Claude, OpenAI) that send traces to a local quickstart in one command.
- [Go SDK](https://tjscanlan.github.io/conduit/sdk-go.md): Instrument a Go agent: spans, status, LLM calls, logs, gauges and counters; API table and limits.
- [Python SDK](https://tjscanlan.github.io/conduit/sdk-python.md): Instrument a Python agent: context-manager spans (thread- and asyncio-safe), logs, metrics; API table and limits.

## Reference

- [API reference](https://tjscanlan.github.io/conduit/api.md): The gRPC ingestion API (IngestSpan, IngestBatch): every message, field and enum, authentication, partial-acceptance errors, and the exact validation limits the gateway enforces. Generated from the .proto files and the source.

## Project

- [Roadmap](https://tjscanlan.github.io/conduit/roadmap.md): What has shipped, what is Now / Next / Later, and open decisions awaiting a maintainer.
- [Releasing](https://tjscanlan.github.io/conduit/releasing.md): Versioning policy, verifying signed images (cosign, SBOM, provenance), upgrading, and how to cut a release.
- [Contributing](https://tjscanlan.github.io/conduit/contributing.md): Development setup, required checks, code generation, schema migrations, conventions, and the PR process.
- [Brand](https://tjscanlan.github.io/conduit/brand.md): Logo usage, color palette, and WCAG contrast rules for the UI.

## Optional

- [Full documentation](https://tjscanlan.github.io/conduit/llms-full.txt): every page above concatenated into one file
- [AGENTS.md](https://github.com/tjscanlan/conduit/blob/main/AGENTS.md): how to build, test, and change the codebase (for coding agents)