Prompt guardrails fail when models get smart. Bartholomew is an inline execution harness for AI agents (Claude, Cursor) that provides atomic 2µs filesystem micro-rollbacks, in-flight secret scrubbing, and offline Merkle audit trails before your OS is touched.