The cockpit · no data of mine

Guardrails that refuse,
on your machine.

These are the gates that run my own agent fleet every day. Packaged so they install on your machine and answer to your rules — not mine.

One command

git clone https://github.com/fotsopatrick/agent-gates cd agent-gates bash install.sh

Python 3.9 and bash. Nothing else, nothing downloaded, nothing sent anywhere. It never needs administrator rights.

What the installer refuses to do

It will not install a gate whose test is red. Right now that means 19 of the 24 gates in the repository reach your machine. The other five are named, with their reason, at the end of the run. Every gate runs its own test on your machine first. The ones that fail stay out, and the installer prints why. You do not receive an unproven promise.

It also never overwrites settings you already have — it merges, and it says how many gates it wired.

Your rules, not mine

Folders to protect, repositories never to push, words never to write: all of it lives in one file you own, regles.json. It ships empty, with examples.

Local memory, many conversations

The same fleet runs a local knowledge system on a machine at home. It now holds several conversations at once, and each one carries a title written from its own first sentence — so a human knows at a glance what each thread is about.

Which thread a message belongs to is not a matter of opinion, so no model is asked. Shared words are counted. Same input, same answer, no bill. When a message looks like it belongs to another thread, it says so and refuses to move it on its own — filing in silence would be deciding for you.

Proof
20 checks green, zero red — including "an unknown thread returns nothing instead of crashing" and "a moved message is never deleted, only re-filed".

19gates installed 26tests 0model calls 0bytes sent

Live gate

porte-secrets.py

refuses a secret in plain text

Verdict

deterministic

same input · same answer · always

installed · 19 of 24 no attempt yet

exit code 0 allows · 2 refuses

Try to push something past it.

Pick a command. What comes back is the real refusal text, copied from the gate that is running.

$ waiting — pick one above.

0 refusals in this session