Launched September 22, 2026
Isonapse

Isonapse

Control what AI agents can do — before they do it.

FreeAI Agents1,666 impressions#12 of its week

Isonapse is now in public beta for Claude Code. Let AI agents do real work, without giving up control. Isonapse sits between your AI agent and the systems it can touch — files, shell, web, and tools — and enforces your rules before every action happens. You stay in control, while Isonapse creates a verifiable audit trail of what the agent did.

Isonapse adds a local governance layer that enforces policies on AI agents’ file, shell, web, and tool actions and records a signed audit trail.

for
Teams deploying autonomous AI agents who need deterministic control and auditability.
pricing
freemium
license
open source
Isonapse/isonapse-public 6 0updated 2 months ago
works withClaude Code

Key features

6 features of Isonapse
  • Policy Decision Engine — Define Lua policies that allow, ask, or block actions before they run.
  • Enforcement Gate — Every agent action passes a checkpoint that enforces the policy locally.
  • Tamper-evident Audit Trail — All decisions are written to a signed ledger that can be verified offline.
  • Learned Baseline — The system observes normal behavior to flag abnormal actions without overriding hard rules.
  • Local-only Runtime — Runs on macOS/Linux with zero code changes and no network calls.
  • Multi-level Adoption — Offers a local hook, self-hosted Community Edition, and Enterprise tier with org-wide features.

Use cases

  • Prevent destructive shell commands from autonomous agents in CI pipelines
  • Detect and block prompt-injection attacks on web-fetch actions
  • Provide verifiable compliance reports for regulated AI deployments

Isonapse vs alternatives

IsonapsePocketenvTracciaCalljmp
Best forDeterministic policy enforcement for AI agentsUniversal sandbox for agents and humansVendor-neutral AI agent control planeManaged backend for AI agents
PricingFreemiumFreeSubscriptionFree
DevHunt upvotes5732135
LaunchedSep 2026Apr 2026Sep 2026Feb 2026
  • Isonapse vs Pocketenv: Provides a sandbox runtime but does not enforce deterministic policy or audit trails.
  • Isonapse vs Traccia: Offers a vendor-neutral control plane but focuses on cloud service rather than local enforcement.
  • Isonapse vs Calljmp: Managed backend for agents; lacks on-premise, zero-code, audit-trail features.

Isonapse FAQ

Do I need to modify my agent code to use Isonapse?+

No, the hook installs via a single Homebrew command and works without code changes.

Does Isonapse send data to the cloud?+

No, it runs locally, never calls home, and stores no telemetry.

What actions can I control?+

File edits, shell commands, web requests, and tool calls are all checkpointed.

Can the system learn my normal workflow?+

Yes, in Profile mode it observes behavior and builds a baseline to flag anomalies.

Is the audit trail verifiable?+

Each decision is signed and stored in a tamper-evident ledger that can be verified offline.

Summarized by DevHunt from isonapse.com, developer.isonapse.com · Sep 27, 2026. Details may change; check the official site.