v0.8.0

Bulwark v0.8.0 — a kernel-boundary file-read gate for AI agent process trees. Linux (fanotify) & macOS (Endpoint Security).

Install

Homebrew (recommended, Linux & macOS):

brew install obstalabs/tap/bulwark

macOS installer package (signed & notarized):

brew install --cask obstalabs/tap/bulwark

Manual download: grab the archive for your platform below, then:

tar xzf bulwark-0.8.0-<target>.tar.gz
sudo install -m 0755 bulwark-0.8.0-<target>/bulwark /usr/local/bin/bulwark

On macOS the archive also bundles the signed bulwark_es_gate.app (the Endpoint Security gate); keep it alongside the binary.

Quick start

# Run an agent, but deny it any read of your SSH keys — enforced by the kernel.
sudo bulwark run --protect ~/.ssh -- claude
#   the agent works normally; cat ~/.ssh/id_ed25519  ->  Permission denied

Which archive?

Platform	Archive
Linux x86_64	bulwark-0.8.0-x86_64-unknown-linux-gnu.tar.gz (or -musl for a static build)
Linux aarch64	bulwark-0.8.0-aarch64-unknown-linux-gnu.tar.gz (or -musl)
macOS Apple Silicon	bulwark-0.8.0-aarch64-apple-darwin.tar.gz (or .pkg)
macOS Intel	bulwark-0.8.0-x86_64-apple-darwin.tar.gz (or .pkg)

Every archive ships with a .sha256 checksum. See the README for usage, the boundary model, and what Bulwark does not do.

v0.7.1

Bulwark v0.7.1 — kernel-boundary file-read gate for AI agent process trees.

Prebuilt binaries for Linux (x86_64, aarch64) and macOS (Intel, Apple Silicon). macOS tarballs are signed, notarized, and bundle the Endpoint Security gate. Install via brew install obstalabs/tap/bulwark or download below.

See the CHANGELOG inside each archive for details.