Deadlatch is an open stack of three primitives. Purse enforces what an agent can do, blackbox proves what it did, Tripwire watches for what slipped through. Install one from npm, or run all three.
Each is a small, open package you can adopt on its own. Together they close the loop around every action an agent takes.
Route every spend or tool call through Purse. It checks the action against live policy at the moment it happens, and a hijacked agent still cannot move money outside the rules.
Every decision is written to a tamper‑evident log. Edit, insert, or reorder a single record and the chain breaks. verify() names the exact record that was touched.
Tripwire watches an agent run and flags the action that shouldn't have happened. It changes nothing, so you can put it beside a live system today.
Every primitive is source you can read and run. The thing enforcing your policy is not itself a mystery box.
The audit chain checks out with plain SHA‑256, on your machine, without Deadlatch in the loop. Proof you hold, not proof we assert.
Start with the one primitive you need this week. Grow into the full loop when you're ready. No rip‑and‑replace.
Human oversight, record-keeping, and monitoring. Deadlatch gives you the actual controls, open, and evidence an auditor can check without trusting us.
Pick the primitive that solves today's problem. Each runs on its own, zero dependencies.