DeadBolt

DeadBolt is a local execution gate for software agents that controls action execution using policy and operator approvals.

DeadBolt is a local execution gate for software agents that lets policy and operator controls decide whether an action runs. You can embed it in Rust, call its local sidecar from another language, or wrap a trusted stdio Model Context Protocol server. It is designed for developers building software agents who want to manage tool allow-lists, destination tokens, reported-spend caps, pause, and clips. It requires no model account, API key, cloud service, or database server. Supported integrations include Rust applications, Python applications, OpenAI Agents SDK function tools, and FastMCP servers.

DeadBolt at a glance

Best for: Software engineer
Runs on: macOS, Windows, Linux, API, VS Code, CLI, open source
Pricing: Free under Apache-2.0
Released: October 2026
Category: AI coding tool
Website: github.com/seanebones-lang/deadbolt

Key features

Tool allow-lists and destination tokens
Reported-spend caps and pause controls
Leases with sliding TTL
Operator kill for IDs and descendants
Broad one-shot approval
SQLite evidence and JSONL mirrors
Default denial on store unavailability

Use it for

Control software agent action execution
Embed execution gates in Rust applications
Wrap trusted stdio Model Context Protocol servers
Manage tool allow-lists and reported-spend caps

Alternatives to DeadBolt

Hlock — Pins entire AI agent setups into a portable file to share and run anywhere.
Daytona — It provisions sandboxes in under 90 milliseconds with full security isolation.
AgentGate — Blocks attacks in under 35ms with a local neural classification head.
Agent Sandbox — Provides a secure and isolated execution layer for autonomous AI agents.
Portkey — Unified API access with observability, guardrails, and caching for LLM applications.
AG-UI — Standardizes agent-user interactions and generative UI for applications.
Unlazy — Verifies AI agent output by running shell-based gate contracts against expectations.
Astrid — It replaces prompt-based trust with OS-grade, capability-based security.
Sandcastle — Orchestrates AI coding agents in isolated Docker, Podman, or Vercel sandboxes.
jevgrep — Reduces coding agent costs by providing targeted, relevant repository context.
zerostack — Minimal memory footprint and high CPU efficiency compared to JS-based agents.
Inbin Gate — Prevents unauthorized agent actions by enforcing strict authority checks.

All DeadBolt alternatives