# Control — Nucleic
Control is where the work runs — repos Nucleic manages end to end, agents sandboxed and observed, and the right machine summoned for every job. It unlocks Autoship, Orchestra, and nvrsion.

Control · the system layer

# Where the work
actually runs.

Control is the fleet’s brain — the sandboxes, the machines, and the ground Nucleic owns. Agents work sealed off from your Mac, every move they make is accounted for, and a whole Linux box or a whole Mac is on call when a job needs one.

Scroll
Control projects

## Contained.
And accounted for.

Hand Nucleic a repo and it takes the whole thing off your hands. From then on you get two things you can’t get by pointing an agent at a folder: agents work sealed off from your Mac, so nothing they run can reach your machine — and you know exactly what they did to your code, commit by commit, as it happens rather than after the fact. No firewall prompts, no open ports, no trust required.

managed · sandboxed · observed
The right machine

## A machine per job,
summoned on demand.

Most work belongs in a fast, disposable Linux sandbox that starts in seconds. Some needs more: a full Linux VM with its own kernel, or an entire Mac an agent can build on, look at, and click through. Control picks the lightest thing that can do the job — and throws it away when the job is done. See the machines →

What it unlocks

## The launchpad for
hands-off work.

Because a Control project is contained and its work is observed for certain, Nucleic can safely automate what would otherwise be reckless — Autoship merging finished branches, Orchestra fanning one request out into a fleet, and nvrsion putting many agents on one shared trunk. Point an agent at an ordinary folder and you get none of it.

autoship · orchestra · nvrsion
Why it matters

## Why unattended work
needs Control.

### Sandboxed

Each session’s work happens inside an isolated machine, not loose on yours.

### Known, not guessed

You get the real record of what an agent did — not an after-the-fact reading of its transcript.

### Nothing exposed

Agents reach Nucleic without ever touching the network — nothing to firewall, nothing to leak.

### Automation-ready

The one path where Autoship, Orchestra, and nvrsion can safely run.

Keep exploring
Setup guide: What is Nucleic Control?→ Covalence — running it anywhere on your mesh→
Open beta

## Let Nucleic hold the repo.

Nucleic is in open beta. All it asks is macOS 27 on Apple Silicon.

Download for Apple Silicon All technologies
No account required · private by design · runs offline