gate.cat 0.4.16 is live — local vetoes before agent actions run

[BGMLAI]

gate.cat 0.4.16 is live: a free, local veto layer that separates an AI agent’s decision to propose a command from the system’s decision to allow it.

What ships

• 71 default policy walls and 73 presets covering destructive shell, cloud, database, identity, billing and secret-handling actions.
• Enforcement options for Claude Code hooks, gated shells and OpenAI-compatible tool-call proxies.
• A secret-exfiltration wall for secret/private-key material flowing into network or mail sinks.
• PEP 668-friendly Linux and Windows installers.
• Optional zero-knowledge Cloud evidence; the local gate remains free and works without an account.

Install

Download first, inspect if desired, then run. The installer creates a private venv and works on PEP 668 systems.

curl -fsSL https://raw.githubusercontent.com/BGMLAI/gate.cat/master/install.sh -o /tmp/gatecat-install.sh
sh /tmp/gatecat-install.sh

Reproducible release evidence

• 1,863 tests pass locally; CI is green on Python 3.11, 3.12 and 3.13.
• The known-danger recall script neutralizes 43/43 catalog classes, with 0/13 benign twins hard-blocked.
• The bypass suite catches 178/178 danger shapes it claims and explicitly prints one runtime-assembly gap and one benign false-block in 129 benign cases.
• A clean, no-cache install from public PyPI returned runtime/distribution 0.4.16, 71 defaults and 73 presets.

Honest boundary

The gate is certain only about what it blocks. An unmatched action is unchecked, not verified safe. Regex and policy walls cannot prove arbitrary programs harmless, and in-process adapters are a weaker enforcement class than an out-of-process hook.

The most useful contribution right now is a concrete bypass or false positive from a real agent session. Please redact credentials before sharing it: https://github.com/BGMLAI/gate.cat/issues/new?template=veto-story.yml

Release: https://github.com/BGMLAI/gate.cat/releases/tag/v0.4.16
Method: https://gate.cat/blog/1m-agent-commands.html
Coverage snapshot and known limits: https://gate.cat/coverage.html

[BGMLAI]

Launch follow-up: the local gate is free, open source, and works without an account. Paid layers are optional and fund signed policy sync, fleet evidence, and broader stack-specific policy coverage.

• Founding Solo: €9/month, then €19/month
• Team: €149/month flat
• Business: €399/month
• Fintech, PaaS, and HTTP-API policy packs: €29 one-time each

Offer details and the inspect-before-run installer: https://gate.cat/?utm_source=github&utm_medium=discussion&utm_campaign=launch_20260714

If the free gate blocks a legitimate command or misses a destructive shape, please report the exact redacted command first. That feedback is more useful than a purchase.