OpenViSTAI · Agents · Blockchain · Crypto
Submit a project
Menu
Agent Security & Sandboxing

Vestige

Vestige is a local runtime security project for AI agents. It includes Operator Lite, a deterministic gate for actions routed through supported hooks, and a separate memory server that stores records and receipts in Strata, a signed append-only log. Its causal_walk tool traces recorded relationships among commits, tool calls, and memory writes.

Explore the practical guide ↓

Independent OpenViST project profile, based on linked sources.

Vestige — OpenViST project profile in Agent Security & Sandboxing.
OpenViST project illustration. See the linked sources for product details.
Understand the project

Practical overview

When it fits

Use Vestige when you need local controls for actions passing through a supported hook, an MCP-connected memory server for durable records, or causal investigation based on logged events. Choose the gate and memory-server setup separately according to the control you need.

Who it is for

  • Agent developers who want a deterministic gate on actions routed through supported tool hooks.
  • Teams that need local records of agent memory writes and activity for later investigation.
  • Developers who want to trace causes through recorded commits, tool calls, and memory writes.

Documented uses

  • Review proposed agent actions against deterministic rules before allowing hooked tools to execute them.
  • Record memory writes and agent activity in an append-only history.
  • Replay recent Claude Code history against the gate’s rules without executing that history.
  • Trace a failure backward through recorded event relationships.
Before you choose

Requirements & limits

The repository is public and licensed under AGPL-3.0. Operator Lite is described as free. The README also lists Vestige Operator at a one-time $149 price; it is a separate offering from Operator Lite.

  • Operator Lite receipts are hash-chained digests, while the memory server’s Strata log is described as signed and append-only.
  • The action gate only covers tools routed through its hook.
  • MCP configuration connects clients to the memory server but does not itself add an execution gate.
  • Causal tracing uses recorded event edges rather than embeddings or keyword matching, so its scope follows the events held in the log.
  • The memory-server installer is documented for macOS and Linux; Operator Lite has separate instructions for Windows and OpenClaw.

Check current requirements in the official documentation. Source-based guidance does not mean OpenViST has run or independently tested this project.

Source-based practical guide

Install the Vestige memory server

Install the local Vestige binaries on macOS or Linux.

Before you start

  • A macOS or Linux environment
  • A shell that can run the documented installer command

Steps

  1. Run the official install script with the command below.

    Documented command
    curl -fsSL https://raw.githubusercontent.com/samvallad33/vestige/main/scripts/install.sh | sh

  2. The installer selects a macOS or Linux archive, verifies its SHA-256 checksum, and installs four binaries in ~/.local/bin.

  3. To configure a compatible local client, run the separate guided setup script; it detects clients, lets you choose which to configure, and backs up configuration before changes.

Expected outcome

The local binaries are installed; the optional wizard configures memory-server connections for selected clients.

Guide limitations

  • The setup wizard configures memory-server connections only; it does not enable Operator Lite execution gates.
  • After configuration, restart the client and confirm its MCP tools for live verification.
Documentation 1 ↗
Source-based practical guide

Install and review Operator Lite in shadow mode

Set up the hooked action gate and review its initial verdicts without blocking actions.

Before you start

  • macOS or Linux with Python 3, Windows with Python 3.9 or newer, or OpenClaw
  • A supported pre-tool hook or documented command-hook port for the agent host

Steps

  1. On macOS or Linux, download and install the gate with the command below; on Windows, use the PowerShell command in the README, or install through OpenClaw with `clawhub

    Documented command
    curl -fsSL https://raw.githubusercontent.com/samvallad33/vestige/main/operator-lite/operator-gate.py -o /tmp/operator-gate.py && python3 /tmp/operator-gate.py install

  2. Review the recorded verdicts: installation registers the Claude Code hook and starts in shadow mode, where it records but blocks nothing.

  3. Use the documented replay to assess recent Claude Code history against the rules; the replay does not execute that history.

  4. When the results look right, switch the gate on with mode enforce.

Expected outcome

The hooked gate starts in observation mode and can be changed to enforcement after review.

Guide limitations

  • The gate only blocks actions routed through hooked tools.
  • Shadow mode records verdicts but blocks nothing.
Documentation 1 ↗
Evidence and transparency

Sources & review

Official repository ↗
Source record details
Source availability
Active
Sources checked
14 October 2026
Original website title
samvallad33/vestige · Official homepage title · retained in its source language
How we review sourcesSuggest a correction