INSTALL LOCI

Five ways to install.
One execution guardian.

Install as a Claude Code plugin, a cross-agent skill, a GitHub Action, via AWS Marketplace, or self-hosted. Same five signals. Same human-on-the-loop verdict. Same binary-level analysis.

Under 5 minutes. No instrumentation. No runtime overhead.

Five ways in. Same guardian agent, same execution signals. Here's each surface.

CHOOSE YOUR SURFACE

Same guardian.
Pick your surface.

LOCI ships as a plugin, a cross-agent skill, a GitHub Action, an AWS Marketplace SaaS, and a self-hosted option for enterprise CI. Every install path runs the same LCLM model and produces the same five signals, the difference is where the guardian fires and who sees the output.
PATH 01 — CLAUDE CODE PLUGIN
For developers using Claude Code.

/plugin install loci@claude-code-marketplace

WHAT YOU GET

SUPPORTED WORKFLOWS

Preflight during planning (Step 01)
Post-edit on every PR (Step 02)
Human-on-the-loop gate at merge (Step 03)

PATH 02 — CROSS-AGENT SKILL
For teams using Cursor, Codex, Copilot, Windsurf, and more.

npx skills add auroralabs-loci/loci-claude

WHAT YOU GET
SUPPORTED AGENTS

Claude Code · Cursor · Codex · GitHub Copilot · Windsurf · Gemini · Goose · AMP · Antigravity · Cline · Droid · Kilo · Kiro CLI · OpenCode · Roo · Trae · VSCode · ClawdBot

PATH 03 — GITHUB ACTION
For teams that want the gate in CI.

- uses: auroralabs/loci-action@v1
  with:
   gate: post-edit
   fail-on-regression: true

WHAT YOU GET

EXAMPLE PR COMMENT

LOCI Gate — Post-Edit Review

⚠️ Timing regression: +3.4ms in AES_encrypt() (p95, TLS handshake path)

⚠️ Throughput regression: BLE throughput −8% in ble_ll_tx()

✓ Stack budget: within 2KB limit

✓ Power: no regression detected

Approve or block below.

PATH 04 — SELF-HOSTED
For enterprise CI/CD and air-gapped environments.

curl -X POST https://api.loci.dev/v1/gate \
  -H "Authorization: Bearer $LOCI_API_KEY" \
  -F "binary=@./build/output.elf" \
  -F "baseline=@./build/baseline.elf" \
  -F "gate=post-edit"

WHAT YOU GET
BRST FOR

Enterprise teams with strict CI/data requirements
Safety-critical systems (MISRA, AUTOSAR, ISO 26262)
Platforms that aren’t GitHub-native

PATH 05 — AWS MARKETPLACE
For teams purchasing through AWS.
Subscribe via AWS Marketplace → LOCI SaaS
WHAT YOU GET
BEST FOR

Enterprise teams with AWS procurement workflows
Organizations consolidating vendor billing through AWS
Teams requiring cloud-native deployment options

Five install paths — but when do the execution signals actually fire in your pipeline?

SIGNAL LAYER

Plug in at one stage.
Or the full pipeline.

The guardian can fire at any stage of your development workflow, as you type, after build, during test, or at PR merge. Each stage is independently useful. Run all four for continuous coverage.

Code

Incremental .so compile

Function-level signal as you type

Build

Full binary pass

All 5 signals, whole program

Test

Tail & edge case prediction

Paths your suite never reaches

Merge

PR gate

Blocks if signals exceed baseline

Each stage is independently useful, or run the full layer for continuous coverage.

Four pipeline stages, each independently useful. Here's how fast you can get started.

GET STARTED

Install in under 5 minutes.

A minimal working install looks like this:

1

Install the plugin or skill.

/plugin install loci or npx skills add auroralabs-loci/loci-claude

2

Authenticate.

Run loci auth and log in with your Aurora Labs account. Free tier available.

3

Point it at your repo.

LOCI auto-detects compiled artifacts (.elf, .so, .wasm). No config required for most projects.

4

Run preflight on a change.

/loci:preflight or open a PR — LOCI analyzes automatically.

5

Review and approve.

Human-on-the-loop. You decide what ships.

No code changes. No instrumentation. No new build steps. No long onboarding.

Five minutes to install. But what if your compiled binary can't leave your network?

FOR ENTERPRISE

Built for
regulated environments.

LOCI is deployed in safety-critical systems across automotive, industrial, and infrastructure. Enterprise installs support on-prem deployment, SSO, audit logging, and strict data residency controls.

On-Prem Deployment

Full air-gapped option. No binary artifacts leave your environment. LCLM runs entirely inside your VPC.

SSO & RBAC

SAML, OIDC, and custom IdP integration. Role-based access control for gate approvers and policy admins.

Audit Logging

Every gate decision logged, who approved, what signals fired, which baseline was compared. Exportable for compliance audits (SOC 2, ISO 27001, MISRA traceability).

Data Residency

No customer binaries in LCLM training. Gate analysis runs on your binaries in your region. No cross-tenant data exposure.

ISO 27001 Certified

SaaS or on-prem — same execution signals, same compiled binary analysis. Ready to start.

Install the execution guardian.

Under 5 minutes. Free to try. No instrumentation.

Skip to content