0.13.0

Maker-checker for AI agents: two people sign off, and nobody waits forever

• Two-person approval (required_approvals: 2): a rule can need two different people to approve before an action runs. The same person can't count twice, a key never approves its own request, and one rejection stops it. The queue shows "1 of 2 approvals"; each approval is in the audit trail, and verify.py checks passkey-signed ones offline.
• Escalation (escalate_after_seconds: + escalate_to:): if nobody decides in time, more people may decide, and the notification goes out again marked Escalated.
• Rules history: every version of rules.yaml that decided something, what changed since, and Put back for admins (only if it still loads, with a backup of today's file, in the audit trail).
• Notes reach every agent: Cursor, Codex, Gemini CLI, VS Code and Antigravity now get a person's note too (their next action is refused once with the note in it, and runs when the agent tries again).
• Python client: gw.ask("Staging or prod?") asks a person and returns their answer; Gateway(on_note=...) passes notes to your own agent.

- id: big-payouts
  action: review
  required_approvals: 2
  escalate_after_seconds: 600
  escalate_to: [cfo]
  reason: Money out over 5,000
  match: { name: "*payout*", input: { amount: { gt: 5000 } } }

Docs: rules.md: Human approval. Reported-bypass suite: 20 of 20 stopped.

Install this version (0.13.0)

Windows (PowerShell):

$env:SQUIDBRAKE_VERSION="0.13.0"; irm https://pilots.squidbrake.com/install.ps1 | iex

macOS / Linux:

curl -fsSL https://pilots.squidbrake.com/install.sh | SQUIDBRAKE_VERSION=0.13.0 sh

With pip: pip install squidbrake==0.13.0. Docker: docker pull ghcr.io/batrapulkit/squidbrake:0.13.0

Running the line again without SQUIDBRAKE_VERSION goes back to the newest. Every version:
https://github.com/batrapulkit/squidbrake/releases