A lite, API-first PM tool your own agent drives — like the aws or supabase CLIs, but for project governance. Immutable audit, scoped tokens, and four-eyes approval are enforced in the data layer, not bolted onto the UI. It sits beside the tools you already run, Jira, Slack, Teams, and adds what they do not enforce: an immutable audit trail, change control, and four-eyes approval.
$ nopm tasks rm task_8f3a \
--reason "superseded by revised cutover plan"
⏸ delete requested — pending a checker's
approval (four-eyes)
$ nopm approve req_2c91
✓ approved & committed
# a different token: task:delete:approve
# one immutable audit row written
$ nopm audit --limit 1
created_at actor_label action target
2026-06-08T… checker (agent) task.delete task_8f3aThe same surface a human uses: 82 documented endpoints, OpenAPI, llms.txt, scoped Bearer tokens.
15 runtime dependencies, 0-dependency CLI.
resource:action tokens, OpenAPI, an llms.txt index, a nopm CLI. Any agent drives it over plain HTTP, identical to the console.CHECK constraint. Even a service key can't rewrite history.