Solutions
What it does — and what it doesn't yet.
Every capability with its real status. Better you find the gaps here than three days into a rollout.
gatebolt · change recordseq 1206
claude-sonnet-5launched by sam@acme.dev · web
“update the config defaults”
100
Critical drift
1 undeclared
Declared — what it said
✓config/app.tsdeclared
Observed — what it did
✓config/app.tsmatched
▲apps/web/.envsecretsundeclared
ledgera1f9…c3d77b02…9e14chain intact
Agents
Any agent working in a git repositoryAvailable
Agents acting outside a repository — API calls, databases, cloudPlanned
Claude Code — hooks wired automaticallyAvailable
Codex, Cursor, Gemini CLI — auto-wiringPlanned
Integration & API
HTTP API — link, declare, observeAvailable
Versioned wire pathAvailable
Org-scoped API keysAvailable
Full API referenceIn progress
Webhooks on critical driftPlanned
Source control
Any git hostAvailable
Worktrees, clones, monoreposAvailable
Server-side observationIn progress
Record & evidence
Hash-chained ledger and verificationAvailable
Evidence export — JSON and CSVAvailable
Retention beyond 30 daysEnterprise
Policy
11 sensitivity categoriesAvailable
Strict enforcementAvailable
Editing your own category rulesIn progress
What will never appear here: GateBolt doesn't scan your code, run your agents, or review your pull requests.
In practice
Five jobs. Three questions.
Any agent, via the API
Agent oversight
Audit & evidence
Incident forensics
Scope enforcement
“How much of this codebase did we actually write?”
Engineering“Can you prove the record wasn't edited?”
Security & compliance“Can we roll this out without a project?”
Platform & DevEx