Develop locally with the real Rust engine

Start with the distribution boundary

This guide describes the unmerged native toolkit review candidate, not an installer you can run from a public registry. Access requires a separately supplied, approved Linux x64 artifact and its exact provenance. macOS and Windows distributions are not qualified here.

The website is static documentation. It does not run Rust, create files, read credentials, or attach anything to your AWS account.

Inspect the plan before writing files

Run inside an existing application directory with the approved binary on your PATH. init is read-only until --write. generate --check detects drift rather than repairing it silently.

The lab supplies synthetic storage observations and explicit fences. It exercises real Rust decisions, not AWS transactions, a cloud emulator, or an agent execution.

# Review candidate only. Use an approved Linux x64 artifact.
# No public installer is available. These commands run locally.
kam init --template deployment-agent
kam init --template deployment-agent --write
kam doctor --json
kam generate --check
kam dev --json
kam replay --scenario invalidated --json
kam atlas --scenario corrected --json
kam qualify --json

One namespace, explicit effects

1. 1

   Configure

   init · config · generate · doctor · env. Plan-first local files and diagnostics. kam doctor is not the remote kam-history doctor.

2. 2

   Exercise

   dev · state · replay · atlas · preview · qualify. Synthetic observations and the actual Rust engine. No live source calls, agent replay, or token estimates.

3. 3

   Inspect & explain

   inspect · docs · skills · mcp · capabilities. Private local reports and read-only agent tools. No hosted console or public share link.

4. 4

   Plan integration

   connect agentcore · promote · rollback. Reviewable connection and local channel plans only. No Gateway attachment or remote rollout.

Local, preview, and production are not interchangeable

The strict static kam.config.json compiles into a normalized, fingerprinted manifest. Profiles contain environment-variable names rather than secret values. Preview and production cannot fall back to synthetic local execution.

kam doctor checks local config, SDK declarations, and generated-file drift. kam-history doctor is the separate existing SDK command for remote account/onboarding metadata and requires explicitly supplied credentials. Neither is proof of effective deployed IAM.

Connection and channel commands are plans, not deployment

connect agentcore emits a bounded History read-tool plan with authentication, tenant mapping, schema acceptance, and IAM work still to qualify. AgentCore tooling remains responsible for integration infrastructure.

promote and rollback record local review-channel changes. They do not deploy a policy, restore deleted evidence, or restore revoked permissions. qualify reports local fixture checks, not source-package or live AWS release qualification.