The Part of Your App You Can Hand to Something You Don't Trust
AI agents are already editing app state directly. Most formats have no defense when they do. Here's where Stof actually fits.
Stof Blog
AI agents are already editing app state directly. Most formats have no defense when they do. Here's where Stof actually fits.
Most systems solve "let an agent gain new tools" and "stop an agent from doing damage" with two separate systems — a registry plus an approval workflow. In Stof, they're the same mechanism.
JSON Schema validates a separate copy of your data's shape, in a separate file, that has to be kept in sync by hand. Stof attaches the validation rule directly to the field it protects, so it can't drift.
A data runtime executes data directly, the way a JavaScript runtime executes JavaScript — documents that carry their own logic instead of waiting for a separate program to interpret them.
Stof didn't start as a product. It came out of a decade spent building parametric and geometry formats for CAD and graphics systems, and one architectural insight that turned out to generalize.
Every team ends up bolting a DSL onto JSON, YAML, or TOML eventually. The problem was never the format — it's asking data to carry logic it was never designed to hold.