Wagate v0.1.1 — Copilot request guard

Wagate v0.1.1 adds a request guard to the AI Copilot, so people messaging your WhatsApp account cannot turn your OpenRouter key into a general-purpose assistant.

Copilot request guard

Keep Copilot to chat replies is on by default, in AI Copilot settings. Before any request reaches OpenRouter, the incoming message is screened locally and skipped when it:

• asks for programming help — writing, fixing, or debugging code, scripts, SQL, and the like,
• asks for essays, homework, articles, or other long-form writing, or bulk translation and summarising,
• tries to override or expose Copilot's instructions ("ignore all previous instructions", "what is your system prompt", persona and jailbreak attempts), or
• exceeds 2,000 characters, which is a pasted document rather than a chat message.

A skipped message produces no draft and no API spend; the reason appears in the app's alerts and you reply yourself. Screening happens before the message is queued, so a flood of such requests cannot crowd out real ones.

Two further layers back it up: fixed scope instructions are prepended ahead of your own prompt, where the conversation cannot rewrite them, and a generated reply that comes back as code is discarded rather than offered as a draft.

Matching is pattern-based, running locally at no cost, and is deliberately conservative — ordinary messages such as "send me the OTP code" pass through. English and Malay phrasing are both covered. Clearing the checkbox removes all three layers and restores v0.1.0 behaviour.

Install

Download Wagate_0.1.1_aarch64.dmg (Apple Silicon), open it, and drag Wagate to Applications.

This build is unsigned and un-notarized. macOS Gatekeeper will block it on first launch. To open it anyway: right-click the app → Open → Open, or run

xattr -dr com.apple.quarantine /Applications/Wagate.app

Existing installs keep their database, paired WhatsApp session, and stored keys; the guard is enabled on upgrade.

Full changelog: v0.1.0...v0.1.1