gate.cat: Blocks rm -rf before your AI agent can run it

Maker here. Business model up front, because that's the first thing I'd want to know. The local gate is free forever (Apache 2.0). Nothing is rate-limited, and safety is never paywalled — every time an audit found a catastrophic class missing (KMS/secret destroy, IAM escalation, backup destruction), it got promoted INTO the free core, not into a paid pack. What you pay for is the one thing an agent can't have: an off-machine, append-only copy of the veto history. A local log lives inside the agent's blast radius — real incident reports include an agent deleting a file and then hiding that it did. Cloud keeps the receipts, plus alerts and a monthly report. Solo €19/mo, Team €149/mo flat for up to 10 machines, Business €399/mo, and one-time €29 policy packs for stack-specific breadth (Fintech / PaaS / raw HTTP-API). 30-day refund, no questions. Why I built it: a team lost ~$106k to a runaway terraform destroy loop, and the incident author wrote the sentence that became the whole thesis — "Prompt-based rules are documentation. They are not enforcement." A rule in a system prompt is something the model knows. A hook in the harness is something the model cannot skip. The design decision I'd most like feedback on: we publish our own bypass map. The suite catches 178/178 danger shapes it claims, and it also prints its known gap (runtime assembly) plus 1 benign false-block in 129 cases. A clean number is unfalsifiable; a published gap map is checkable. That felt right, but it's an unusual thing for a safety tool to lead with — curious whether it builds trust or reads as weakness. Honest limit, stated on the homepage too: the gate is certain only about what it blocks. An unmatched action is unchecked, not safe. Use it with your sandbox, not instead of one — a sandbox can't tell you what the agent tried, and it won't stop a terraform destroy that has real credentials inside the sandbox. pip install gate.cat — happy to answer anything, especially about false-positive risk.