Solo free local

Power-user path. For a single developer: console, policy, approvals, agents, sessions, and API keys on localhost. Cost is $0 paid SaaS (Java, Postgres, optional Ollama are free/open).

Prefer ~15 minutes without cloning this monorepo? Start with light install.

Prerequisites

• Java 25
• Docker (or local Postgres 16)
• This repo + Maven wrapper

Ollama is optional. Policy and approvals work without a local LLM.

Day-1 commands

docker run -d --name sa-pg \
  -e POSTGRES_USER=shieldagent \
  -e POSTGRES_PASSWORD=shieldagent \
  -e POSTGRES_DB=shieldagent \
  -p 5432:5432 postgres:16

export SHIELDAGENT_MASTER_KEY='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA='
export SHIELDAGENT_DB_URL=jdbc:postgresql://localhost:5432/shieldagent
export SHIELDAGENT_DB_USER=shieldagent
export SHIELDAGENT_DB_PASSWORD=shieldagent

./mvnw -pl app -am install -DskipTests -Djacoco.skip=true
./mvnw -pl app spring-boot:run -Dspring-boot.run.arguments='--server.port=8090'

Open /login with [email protected] / demo-only-change-me (seeded on non-prod boot). Do not generate a new master key every shell. That breaks encrypted user rows and shows "Sign-in failed".

What you can skip

• Stripe Billing
• Processor / commerce OAuth grids
• Optional edge / OPA sidecars / paid cloud LLMs

Repo guide with troubleshooting: docs/guides/kya-local-free.md.