bashme

Holds what an agent wants to run until a person agrees.

An agent that can run shell commands is useful exactly to the degree that it is trusted, and trust is hard to give something that acts faster than you can read. bashme takes the command before it runs, works out what it would actually do, and holds it until a person agrees — with standing rules for the routine cases so the gate does not become a thing you click through. Every decision is written to an append-only audit log. It is one codebase with two hosts: a standalone app with its own window and CLI, and a dependency-free core that VIOLINET OS embeds directly.

• Classify before rules — categories no standing rule may ever auto-approve, checked first
• Rules without wildcards — a rule cannot match a chained command, and previews what it would allow as you write it
• Append-only audit — every request, verdict and timeout, on one SQLite handle shared with its host
• HMAC plan/apply tokens — an approval authorises one command, not a session
• Outbound-only device channel — a paired phone may answer, never reach in
• Two hosts, one core — the standalone app and VIOLINET OS run identical decision code

Electron 44 · Node 24 type stripping · SQLite · no bundler

70 core tests green. Live inside VIOLINET OS under System Guard → Approvals, and ships as its own standalone installer with its own window, local IPC surface and CLI. A paired phone can approve over LAN (QR pairing) or over a relay that never opens a port; the relay is deployed but not yet on its own subdomain.