Installation

Install the latest release on macOS or Linux, on ARM64 or x86-64:

curl -fsSL https://tenet-contracts.com/install.sh | bash
tenet --version

To pin a release, use its path, such as /v0.13.0/install.sh. Archives and SHA-256 checksums are also available on GitHub Releases.

To build from a source checkout:

cargo install --path crates/tenet --locked

Provider

export OPENROUTER_API_KEY='your-key'
tenet check

To use TypeSafe directly:

export TYPESAFE_API_KEY='your-key'
tenet check --provider typesafe

Tenet uses the same provider adapter as ev-grep. Supported model IDs are pinned:

ProviderModel
openroutertypesafe/jev-1.13-20260917
typesafejev-1.13.0

--provider and --model override TENET_PROVIDER and TENET_MODEL, then the defaults. Credentials come from the provider's environment variable. File contents are sent to that provider.

Provider proxy

Use --endpoint URL or TENET_ENDPOINT for a trusted proxy that implements the selected provider protocol. Requests and the provider credential go to that URL. Use HTTPS for remote services; HTTP is supported for local development. Redirects are disabled.