gate.cat

Your AI coding agent doesn't have to be malicious to end your week — just shell access and one confident mistake. gate.cat is a deterministic, fail-closed veto that inspects the tool call at the boundary and refuses the irreversible class (rm -rf, DROP TABLE, terraform destroy) before it runs. Claude Code hook, gated shell, or OpenAI-API proxy. Free forever, Apache 2.0. We replayed 826,644 real agent commands (re-counted 28 Jul, lower bound): 0 real misses — and we publish our own bypass map.