console proof github ↗

GATED.

g8s stands between your AI agents and your systems. Every action authorized before it happens. Every refusal explained in a language machines parse. Every outcome provable after.

Receipted. Auditable. Signed.

E_CLAIM_FENCE_STALE — the refusal that taught the fence its manners

An agent without g8s

It edits files nobody authorized. It touches paths outside the task. When something breaks, the investigation starts with “what did it even run?” — and ends in guesses.

Compliance is a document. The gap between policy and behavior is where incidents live.

The same agent, gated

Before it touches anything, it holds a receipt naming the exact paths, expiring in minutes. Outside them: E_DIFF_FIREWALL_OUT_OF_SCOPE — refused in the moment, in a code an auditor reads.

Policy executes as gates. Every outcome carries its evidence. The investigation is a table.

Call. Response.
Every time.

A faithful terminal — the transcript below is real g8s output from the session that built this page. Type into it.

operator@homelab — g8s sessioninteractive
$
try: help · doctor · submit · receipt · fence · chaos · whoami
11
gates in CI, standing between every change and mainlayer ownership · coverage ratchet · SAST triad · provenance · matrix
97
implicit state machines documented in one auditthe harness knows its own anatomy — docs/research/36
6261
telemetry rows in the dogfood ledgerg8s built g8s — the tool measures its own supply
0
runtime dependenciesone static binary · zero CGO · SLSA L2 attested releases
queue — every task recorded · SQLite WALreal rows
taskstatelanereceipt
4ed2017fWORKER_COMPLETEDcursor/composer-2.59636f68d
dba40b29WORKER_COMPLETEDcursor/composer-2.5e9574675
656d8e02WORKER_COMPLETEDcursor/composer-2.55a41fd02
Write receiptunsealed
receipt_id9636f68d-625e-4345-826d-272bae7e2561
allowed_pathsinternal/worker/**
issued_totask 4ed2017f · cursor/composer-2.5
ttl3300s · expires +55m
consumedfalse
sha256: 9f2a7c41be04d8c6f31a55b0e7d92c48aa61f013b8c7e2d54f90a613c7eb42d1
unsealed

The whole idea, as an object.

Before an agent touches anything, g8s mints this. It names the exact paths the agent may change, expires in minutes, and is consumed by exactly one attempt. Inside your systems it is an authorization. Here it is a promise you can read.

tilt with your cursor · fields are real, from today’s session

One task,
gate to gate.

36 seconds · one real task from today · dispatch → receipt → gate refusal → quarantine → retry → verify → commit. muted by design · captions on · sound version ↗
A stone jetty stretching into still water and dense grey fog — the quiet before a verdict
the run is quiet until it isn’t — every silent second was gated · photo: Aleksi Tappura — via Lorem Picsum (origin Unsplash)
copied