Everything is a capsule.

Ato gives apps, tools, and services the same safe execution handle. A repository declares what it needs in capsule.toml; Ato materializes that declaration into a reproducible environment and runs it within a consistent boundary.

Start here

Use the Getting started guide to install Ato and run a repository.

ato run github.com/owner/repository

The execution model

1. Declare the capsule, its entrypoint, dependencies, and permissions.
2. Resolve the declaration into a lock file.
3. Materialize the required runtime environment.
4. Run through the same boundary and policy model as every other capsule.

Execution is not installation. Ato keeps declarations, resolved state, and local machine state separate so that each layer remains understandable and auditable.