bowline · the intelligence layer · open source · Apache-2.0
$ bowline serve --config bowline.yaml

The open-source intelligence layer for enterprise AI.

Routers move requests; they don't examine them. Bowline is the layer above — open source, in your environment — turning task distribution into an evidenced decision: which class of work runs on which supply, at what modeled cost, with what measured quality. It watches in shadow mode first, changes nothing, and takes authority only when you grant it — one exact workload at a time.

bowline serve · shadow mode
req 041 POST /v1/chat/completions app=support-triage · task=heavy-lifting
→ forwarded unchanged upstream: vpc-frontier-a
● recorded would-allocate vpc-open-weights · modeled Δ −$0.0041/req · confidence: medium
req 042 POST /v1/embeddings app=search-index · task=mechanical
→ forwarded unchanged upstream: public-api-b
● recorded would-allocate owned-supply · modeled Δ −$0.0007/req · confidence: high
req 043 POST /v1/responses app=contract-review · task=judgment
→ forwarded unchanged upstream: vpc-frontier-a
● recorded quality floor 0.85 unmet by candidates · keep upstream · Δ $0.0000 · confidence: high
— shadow mode · changes made to traffic: 0 · decisions recorded: 3 · evidence: ledger + report
$ cat ./where-it-sits

Routers move requests. Bowline decides where work belongs.

Bowline is not a router and doesn't replace yours. It sits in-path as an OpenAI-compatible process — or entirely off the request path, importing bounded, content-free records from routers you already run (LiteLLM and Envoy profiles ship in-repo). Either way, the decision layer stays yours.

Value layer
your agents & workflows
the work itself
Intelligence layer
Bowline
task distribution — decides where work belongs, on the record
Transport
your router or gateway — LiteLLM · Envoy · or Bowline's own OpenAI-compatible listener
moves requests
Supply
owned hardware · open weights in your VPC · VPC frontier · public APIs
one schema, no favorites

The unit is the task, not the request.

Distribution starts by naming the work. Every request maps to a task class, and every class carries a quality floor a candidate supply must clear — before cost even gets a vote. The floors, ratings, and formulas are published, not proprietary sauce.

mechanical0.30

rote transforms, extraction, formatting

heavy-lifting0.55

coding, synthesis, longer knowledge work

taste-sensitive0.70

copy, design, brand-adjacent output

judgment0.85

decisions where weak reasoning is costly

quality floors a candidate supply must clear per task class — published defaults, tunable per policy

$ cat ./three-tenets

Three tenets. One gateway.

Enterprise AI keeps ending up rented: someone else's meter, someone else's rules, someone else's custody of your traffic. Bowline is built for the opposite — evidence that makes cost, control, and data sovereignty yours to hold.

Cost
Economics you can act on.

Import your real billing exports, reconcile them against what Bowline observed on the wire, and model the counterfactual: what identical traffic would have cost on supply you own or rent — open weights in your VPC included. Every delta carries a confidence label and a published methodology. Opportunities are counterfactual modeled evidence, not realized savings — which is exactly what makes them decision-grade.

Control
Authority you grant — never authority it takes.

Shadow mode is the default: Bowline forwards traffic unchanged and records every decision it would have made. Controlled enforcement is a separate, explicit step, limited to one exact allowlisted workload with fresh verified economics and quality evidence behind it. A kill switch and fail-closed fallbacks stay in your hands. Startup never arms authority automatically.

Data sovereignty
Your traffic, your evidence, your security domain.

Bowline deploys where you decide — your VPC, your metal — and policy binds to what a workload is (key, route, app, tags), never to what a prompt says. Persisted evidence is content-free by design: outcomes and integrity-bound reports, not prompts or responses. One deployment is one enterprise security domain.

Supply-agnostic by design: owned hardware, open weights in your VPC, VPC frontier endpoints, and public APIs share one registry schema, one policy shape, and one set of published formulas — floors, ratings, confidence labels, TCO, and the sovereignty ratio.

$ ls ./evidence

Four kinds of evidence.

Everything Bowline produces is evidence an operator can verify — rendered from a local, integrity-bound ledger, never from a dashboard you have to trust.

$ bowline report
Decision evidence

Every request is accounted: the policy and allocation decision Bowline would have made, recorded in an append-only local ledger and rendered as an integrity-aware report.

$ bowline canary run
Customer-quality canaries

Bounded offline runs of your own cases against candidate supply, scored by evaluators you configure. Persisted outcomes are content-free; verdicts are advisory evidence for one exact dataset and configuration — not a universal quality score.

$ bowline economics report
Actionable economics

Canonical billing import, reconciliation against one named observation window, and counterfactual opportunity arithmetic — sealed as a deterministic, static, private bundle.

$ bowline kill arm
Controlled enforcement

An explicit route mode for one exact allowlisted workload, backed by a fresh verified grant. Each request dispatches to zero or one target; fallback is bypass or fail-closed, configured by you.

$ cat ./evidence-before-authority

Evidence before authority.

The operating loop is a ladder you climb deliberately. Each rung produces evidence; only the last one touches traffic — and only after you seal and arm it.

  1. $ bowline preflight

    validate the config against the environment

  2. $ bowline serve

    shadow mode — forward unchanged, record every decision

  3. $ bowline report

    render integrity-bound decision evidence

  4. $ bowline canary run

    quality evidence on your own cases, offline and bounded

  5. $ bowline economics report

    reconciled billing, counterfactual modeled deltas

  6. $ bowline promotion seal

    bind the exact evidence to one exact workload

  7. $ bowline kill arm

    you, explicitly, grant authority — and can take it back

Start with the public evidence.

Inspect the source, reproduce the bounded synthetic path, and read the operating contract. Enterprises helping shape the method can join the research and design conversation.

Apache-2.0 · shadow-first · Enterprise-owned AI infrastructure →