Your AI coding agent doesn't have to be malicious to end your week — just shell access and one confident mistake. gate.cat is a deterministic, fail-closed veto that inspects the tool call at the boundary and refuses the irreversible class (rm -rf, DROP TABLE, terraform destroy) before it executes. Claude Code hook, gated shell, or OpenAI-API proxy. Free forever, Apache 2.0. We replayed 1,085,159 real agent commands: 0 real misses — and we publish our own bypass map instead of a clean number.
