{
  "type": "directory-verdict",
  "slug": "deadbolt",
  "name": "DeadBolt",
  "vendor": "NextEleven",
  "owner": "nexteleven",
  "page": "https://agents.nexteleven.dev/tools/deadbolt",
  "verification": "evidence",
  "lastReviewed": "2026-11-14",
  "criteria": {
    "approvalGates": {
      "support": "native",
      "note": "Operator approval for configured irreversible tools; exact-action grants through a trusted adapter."
    },
    "restartRecovery": {
      "support": "none",
      "note": "DeadBolt keeps its lease and policy state in a private store, but it does not resume agent work. Pair it with a durable workspace or engine."
    },
    "evidenceTrail": {
      "support": "native",
      "note": "The operator store keeps run, decision and approval records."
    },
    "killSwitch": {
      "support": "native",
      "note": "Kill withdraws a run's lease so further gated actions are refused."
    },
    "policyControls": {
      "support": "native",
      "note": "Tool policy, destination policy, ancestor policy and fixed run deadlines."
    },
    "isolation": {
      "support": "none",
      "note": "DeadBolt is a gate, not a sandbox. Keep OS access, child-process credentials and network isolation explicit."
    }
  },
  "evidence": [
    {
      "label": "Evaluation notes, October 2026",
      "url": "https://github.com/seanebones-lang/deadbolt/blob/main/docs/EVALUATION-NOTES-2026-10.md"
    },
    {
      "label": "CI runs",
      "url": "https://github.com/seanebones-lang/deadbolt/actions/workflows/ci.yml"
    },
    {
      "label": "v2.0.2 release with checksums",
      "url": "https://github.com/seanebones-lang/deadbolt/releases/tag/v2.0.2"
    },
    {
      "label": "Python client on PyPI (n11-deadbolt-client)",
      "url": "https://pypi.org/project/n11-deadbolt-client/"
    },
    {
      "label": "Homebrew cask (n11-deadbolt)",
      "url": "https://github.com/seanebones-lang/homebrew-tap"
    }
  ],
  "contentHash": "000a3cd430976de0a0bb0aa4d13dc75b4dd534f2f77ff943eb97716008baf8aa",
  "hashAlgorithm": "sha256",
  "canonicalForm": "SHA-256 of the UTF-8 JSON of every field above except contentHash, hashAlgorithm and this note, in the order published by buildVerdict."
}