Deadlatch is an open stack of three primitives. Purse enforces what an agent can do, blackbox proves what it did, Tripwire watches for what slipped through. Install one from npm, or run all three.
Each is a small, open package you can adopt on its own. Together they close the loop around every action an agent takes.
Route every spend or tool call through Purse. It checks the action against live policy at the moment it happens, and a hijacked agent still cannot move money outside the rules.
Every decision is written to a tamper‑evident log. Edit, insert, or reorder a single record and the chain breaks. verify() names the exact record that was touched.
Tripwire watches an agent run and flags the action that shouldn't have happened. It changes nothing, so you can put it beside a live system today.
Every primitive is source you can read and run. The thing enforcing your policy is not itself a mystery box.
The audit chain checks out with plain SHA‑256, on your machine, without Deadlatch in the loop. Proof you hold, not proof we assert.
Start with the one primitive you need this week. Grow into the full loop when you're ready. No rip‑and‑replace.
This is not our claim. Independent security guidance, a US Senate draft, and this year's incident data all point at one loop. Enforce what an agent can do, prove what it did, watch for what slipped through. The sources are named so you can check them.
"Your AI agent is an easily confused deputy. Cloud security needs a credential broker."
enforce · a credential broker is PurseCalls for scope-limited delegation credentials, real-time revocation, and auditable records.
enforce + prove · grants, revocation, receiptsProposes binding an agent's permissions to human-declared intent, not a coarse scope.
intent-binding · Purse binds the exact actionA majority of organizations running AI agents reported an agent-caused security incident this year.
why now · the failures are already happeningHonest about the receipts. The AI AGENT Act is a discussion draft, not law, and the incident figures are vendor-reported. We link and name them so you can weigh them yourself, the same standard the audit chain below holds itself to.
Human oversight, record-keeping, and monitoring. Deadlatch gives you the actual controls, open, and evidence an auditor can check without trusting us.
Pick the primitive that solves today's problem. Each runs on its own, zero dependencies.