Hotkey Runbook

Local operator’s field kit · v0.1

Turn careful procedures into one safe keystroke.

Collect YAML runbooks locally, fill typed parameters, inspect the exact process arguments, then run—with secrets redacted and rollback notes at hand.

Download for your computer See the method

Detecting your platform…

A pressed fern arranged like a branching command tree on an open botanical field guide
Every runbook is a specimen: named, sourced, inspected, and handled with care.

No accountWorks offline after install

No shell stringsDirect program + argv only

No telemetryYour runbooks stay local

The handling method

Three deliberate steps. Zero copy/paste.

Safety is part of the interaction, not a settings checkbox.

  1. 01

    Collect a trusted folder

    Choose an owned directory of reviewed YAML files. Hotkey Runbook signs its exact digest with a device-local key. A change breaks trust until you review it again.

  2. 02

    Prepare typed parameters

    Choices, integers, paths, booleans, and secrets are validated before use. Programs are fixed by the runbook; values become direct arguments, never shell interpolation.

  3. 03

    Review, name, and run

    See every exact argument and the rollback note. Type the runbook name for consent. Output and local history redact declared secrets and patterns.

A legible local format

The procedure remains reviewable.

A runbook is plain YAML in your repository or operations folder. It specifies programs and argument arrays—not an opaque shell script assembled at runtime.

Browse working examples →
specimen / restart-worker.yamlv1
id: restart-worker
name: Restart worker
risk: medium
parameters:
  - name: service
    type: choice
    choices: [indexer, mailer]
steps:
  - program: systemctl
    args: [restart, "{{service}}"]
rollback: Start the previous unit.

Built-in field discipline

Small enough to audit. Strict where it matters.

No hidden shell

Commands launch as a fixed executable and argument vector. Parameter values cannot turn into pipes, redirects, or second commands.

Trust expires on change

A local HMAC signature binds the reviewed directory path and content digest to this device. Changed YAML is blocked.

Redaction at capture

Secret parameters and declared patterns are replaced before results enter the local history file.

Rollback stays visible

The author’s recovery note appears at review time, after completion, and beside historical output.

One-time field license

Own the utility. Keep the data.

The free field kit handles 3 runbooks and a 10-entry history. A $29 one-time license unlocks unlimited local runbooks and the full 100-entry logbook. Safety, redaction, accessibility, and export are never paywalled.

No subscription or account. Sociobot/Dodo is the merchant of record; refunds are handled there and revoke the license.

$29 onceBuy the field license

Take it into the field

Install in one obvious step.

Unsigned preview builds are produced in public GitHub Actions. On macOS, right-click the app and choose Open on first launch. Windows may show a SmartScreen notice.

macOS

Download .dmgcurl -fsSL https://hotkey-runbook.sociobot.in/install.sh | sh

Windows

Download .msiirm https://hotkey-runbook.sociobot.in/install.ps1 | iex

Verify SHA-256 checksums · Read the source