GateBolt
Documentation

Wire an agent in about a minute.

GateBolt sits between your agent and your git history. You run one command; after that nothing is typed by hand again.

Quickstart

You need Node 20 or later, a git repository with an origin remote, and a GateBolt account. Install the CLI globally (npm i -g @gatebolt/cli) — the hooks GateBolt writes are committed to your repo, so gatebolt has to resolve on every machine that clones it.

Restart your agent session. Agents snapshot their hook configuration when the session starts, so a session already running will not pick up the hooks init just wrote.

Commands

CommandWhat it does
gatebolt initLink the repo, wire the agent hooks, install the pre-push backstop
gatebolt loginBrowser-approved device flow; mints an org-scoped key
gatebolt linkLink this repo only — writes .gatebolt
gatebolt declareOpen a declaration of intent
gatebolt observeDerive the diff, reconcile it, seal the result

HTTP API — custom agents

The CLI is a convenience, not a requirement. Anything that can make an HTTP request can write to the ledger. Authenticate with an org-scoped key (gbolt_…) as a bearer token; inputs and outputs are wrapped in a json envelope.

EndpointPurpose
POST /v1/trpc/repository.linkFind or create a repository
POST /v1/trpc/change.declareOpen a declaration before editing
POST /v1/trpc/change.observeSubmit the real diff, get the reconciliation

Enforcement modes

Set GATEBOLT_ENFORCE, or pass init --enforce strict to write it into the tracked settings. lenient records and scores undeclared edits; strict blocks them at the hook before they reach disk.

Strict mode gates a cooperating agent — it is not a sandbox. The guard is wired to the editing tools, so a file rewritten straight from a shell never reaches it. Those changes still show up in the reconciliation as undeclared; they just aren't prevented.