AI agents now write code, send emails, move money, touch customers. When one of them does something wrong — who explains it, and with what evidence?

g8s is the checkpoint system that stands between your AI agents and your systems. Every action authorized in advance. Every refusal explained in machine-readable language. Every outcome provable after the fact. Not a policy document — a working gate.

I run or build agents — open the console ↓ I lead the business — what this buys me ↓

An operator console for agents that refuse to be trusted blindly.

Every action behind a receipt. Every refusal carries a typed code. Every landing carries its lineage. The panes here run real captures from the harness that built itself — type into it.

install in 30s:

terminal — for the engineers · real capturesinteractive

$

try: help · doctor · submit · receipt · fence · verify · chaos · whoami

queue — every task recordedSQLite WAL

task	state	lane	receipt
4ed2017f	WORKER_COMPLETED	cursor/composer-2.5	9636f68d
dba40b29	WORKER_COMPLETED	cursor/composer-2.5	e9574675
656d8e02	WORKER_COMPLETED	cursor/composer-2.5	5a41fd02
98c88b6d	WORKER_COMPLETED	cursor/composer-2.5	8e7edea3
…6,255 more rows in the dogfood ledger — every row carries its lineage

gate feed — the refusals, as engineers see themstreaming

containment — packets gated in flightADR-0032

ledger — measured on its own supplydogfood

gate classes in CI

FSMs documented

6261

ledger rows

runtime deps

for the business — what this buys youno terminal required

An audit trail that writes itself.Every agent action — what ran, where, who allowed it — recorded as it happens. Compliance stops being a scramble.

Policy enforced by code, not by promise.Your rules (what agents may touch, when, how far) execute as gates. An agent that breaks them is stopped and told why — in the moment.

Failures that explain themselves.When something goes wrong you get a typed, specific reason — not a mystery. Your engineers fix causes, not symptoms.

Built the way it asks you to build.This harness released itself: attested builds, signed artifacts, and a public ledger of its own quality. The proof habit is the product.

why it exists — the doctrinesthe doctrines

COMPLIANCE-IN-CODEevery claim is a check; deviations are typed trailers, counted — adr-0040

FAIL LOUDevery ok=false carries an E_* reason an agent can parse — never silent

TRANSPARENT REGISTRIESa claim a check cannot verify is deleted from the registry

the artifact — a receipt, made tangibledrag to tilt · click to seal

Write receiptsingle-use

receipt_id9636f68d-625e-4345-826d-272bae7e2561

allowed_pathsinternal/worker/**

issued_totask 4ed2017f · cursor/composer-2.5

ttl3300s · expires +55m

consumedfalse

sha256: 9f2a7c41be04d8c6f31a55b0e7d92c48aa61f013b8c7e2d54f90a613c7eb42d1

unsealed

This is the whole idea, as an object.

Before an agent touches anything, g8s mints one of these. It names the exact paths the agent may change, expires in minutes, and is consumed by exactly one attempt. Inside your systems it is an authorization; on this page it is a promise you can read.

tilt with your cursor · the fields above are real, from today's session

session replay — 60 seconds of a real gated run

watch it run — 36s, one real task, gate to gatereel

muted by design — the transcript is the sound. full-quality version on github releases.

CONSOLE g8s v0.23.0 zero-CGO · zero deps · SLSA L2 attested · receipts since 2026 provenance: every number on this page binds to a source releases ↗