ACME

Install in minutes

Deterministic install. No surprises.

The ACME install helper prepares your runtime with idempotent, read-safe steps. Start with visibility. Add protection when ready.

Quickstart
Step 0 — Download the installer
curl -fsSL https://raw.githubusercontent.com/acmeagentsupply/acme-ops/main/scripts/install/acme_install.sh -o acme_install.sh && chmod +x acme_install.sh
Step 1 — Preview (recommended)
./acme_install.sh --dry-run
Step 2 — Apply
./acme_install.sh --apply
Step 3 — Verify
./acme_install.sh --verify
Expected time: ~2 minutes
What gets installed
  • • RadCheck (free)
  • • Lazarus Lite (free)
  • • Optional modules you select
Notes
  • • No gateway restarts
  • • openclaw.json untouched
  • • Idempotent — safe to re-run
  • • Append-only telemetry
Install Safety

The installer is designed for operator confidence:

  • • dry-run shows planned changes
  • • lockfile prevents drift
  • • verify mode confirms runtime state
  • • repeated runs are NO-OP when current
After install
  1. 1. Run RadCheck
  2. 2. Review your risk posture
  3. 3. Enable Sentinel if continuous protection is needed
ACME install is observational and additive. It does not modify existing control plane configuration.