Deadbolt v1.0.0

Deadbolt is a local execution gate for software agents. A trusted executor checks admission before each action, applies policy, and refuses every non-allow result. Operators can revoke an identity and its registered descendants and export structured incident evidence.

This is Deadbolt v1.0.0. It establishes the documented admission, integration and compatibility contract. Installing it still requires the application’s trusted executor to route each protected action through the gate.

Included integration surfaces:

• Rust library for embedded dispatch.
• Local HTTP sidecar with Python and Node source clients.
• Stdio MCP proxy for routed individual tools/call messages.
• Native executable archives for Linux x86_64, Windows x86_64, macOS Apple Silicon and Intel.

Validation includes platform/MSRV source CI, native archive extraction/version/drill, live Python/Node contracts, quiescent backup/restore, and upgrade from original source b8a1303. Independent-host acceptance uses pinned Hermes MCP transport and the reference filesystem server, with 13 checks of actual file effects. The same routed MCP path passes on macOS and Linux. No paid model call is needed for the acceptance.

The locked Rust dependencies were audited with cargo-audit 0.22.2 against the 2026-09-29 RustSec database with no matching vulnerability advisories or warnings. This result does not cover every possible vulnerability or replace application-specific review.

Download the ZIP matching your architecture alongside its SHA-256 file. Verify the checksum, extract it, run deadbolt --version and deadbolt drill, and read the bundled installation, quick-start, integration, FAQ, troubleshooting, compatibility and operations guides. Unix users may need chmod 0755 deadbolt. Archives are unsigned; macOS artifacts are not notarized. Linux is glibc-based and tested on Ubuntu 22.04; macOS is tested on version 15; Windows is tested on the GitHub Windows runner. Validate your deployment OS too.

Boundaries: kill denies subsequent admissions and does not cancel a running body. The executor owns identity assignment and all dispatch paths. A sidecar token authorizes all exposed routes. Policy and spend context are caller-supplied. Children need explicit policy. The Hermes showcase covers one routed MCP connection, not Hermes' built-in terminal/browser/delegation or a full model conversation. Systemd remains an experimental template. Evidence files are operator-writable, and admission/execution are separate operations.

The Cargo package is n11-deadbolt; the library and executable are deadbolt. This release does not publish crates.io, npm or pip packages. Source and binary installation are available through this repository.

Native archives include locked-dependency license notices, Rust runtime notices, and the unmodified MPL-2.0 source for option-ext. Each archive includes BUILD.json identifying the exact merged source revision and executable hash.

Start with installation, then quick start. The Hermes showcase gives a reproducible independent-host demonstration.

Release source: 61861c05cadf65022723776de869eabc71475de6. Source CI and native archives, Hermes acceptance and upgrade validate the exact merged release source.