Deadlatch is an open stack of three primitives. Purse enforces what an agent can do, blackbox proves what it did, Tripwire watches for what slipped through.
Press a button, a real broker decides, and you get a receipt like this. No sign-up. Try it live ↗
Each is a small, open package you can adopt on its own.
Route every spend or tool call through Purse. It checks the action against live policy at the moment it happens, and a hijacked agent still cannot move money outside the rules.
Every decision is written to a tamper‑evident log. Edit, insert, or reorder a single record and the chain breaks. verify() names the exact record that was touched.
Tripwire watches an agent run and flags the action that shouldn't have happened. It changes nothing, so you can put it beside a live system today.
Purse decides it, blackbox records it, Tripwire watches the outcome.
Every primitive is source you can read and run. The thing enforcing your policy is not itself a mystery box.
The audit chain checks out with plain SHA‑256, on your machine, without Deadlatch in the loop. Proof you hold, not proof we assert.
Start with the one primitive you need this week. Grow into the full loop when you're ready. No rip‑and‑replace.
Independent security guidance and a US Senate draft point at the same loop.
"Your AI agent is an easily confused deputy. Cloud security needs a credential broker."
enforce · a credential broker is PurseCalls for scope-limited delegation credentials, real-time revocation, and auditable records.
enforce + prove · grants, revocation, receiptsThe Senate text is a discussion draft, not law. Both sources are named so you can weigh them yourself.
Human oversight, record-keeping, and monitoring. Deadlatch gives you the actual controls, open, and evidence an auditor can check without trusting us.
Pick the primitive that solves today's problem. Each runs on its own, zero dependencies.