Your first watch
Start with one guardrail.
Know what it does.
Choose a module. Install it on your own machine. Verify the configuration before trusting it with real work. Commands on this page are copied, never executed by your browser.
01 / Before you begin
Your machine. Your setup.
- For Pi extensions, install Pi first. Bastille-C3 extends Pi; it does not replace your harness or model provider.
- Use Linux or macOS. On Windows, use WSL2 for the full toolset. Check each module's requirements, especially Linux isolation and CUDA features.
- For zrag, use uv and the separate Python wheel. zrag is not included in the Pi tarball.
- Paid archives need a valid license and access to Polar for activation and entitlement checks. Agent workloads are not hosted by Bastille-C3.
02 / Installation
Choose your first module.
caveman-milk-pi
FreeCuts output token volume by roughly 50% or more.
Requirements & documentation ↗Public release pending. This npm package is not available at its configured identifier yet. Do not treat the command below as a working download until the package is published. Ask for release access.
pi install npm:@bastilleworks/caveman-milk-piAfter publication, run the command in your terminal, then start a new Pi session. No paid license is required for an Apache-2.0 module.
pi-gatekeeper
FreeAST-based bash interception. Blocks destructive commands before they run.
Requirements & documentation ↗Public release pending. This npm package is not available at its configured identifier yet. Do not treat the command below as a working download until the package is published. Ask for release access.
pi install npm:@bastilleworks/pi-gatekeeperAfter publication, run the command in your terminal, then start a new Pi session. No paid license is required for an Apache-2.0 module.
pi-vcc
FreeLossless session compaction. No LLM call. Nothing lost.
Requirements & documentation ↗Public release pending. This npm package is not available at its configured identifier yet. Do not treat the command below as a working download until the package is published. Ask for release access.
pi install npm:@bastilleworks/pi-vccAfter publication, run the command in your terminal, then start a new Pi session. No paid license is required for an Apache-2.0 module.
uv-extension
FreeAuto-redirects pip, poetry, python, and venv to uv.
Requirements & documentation ↗Public release pending. This npm package is not available at its configured identifier yet. Do not treat the command below as a working download until the package is published. Ask for release access.
pi install npm:@bastilleworks/uv-extensionAfter publication, run the command in your terminal, then start a new Pi session. No paid license is required for an Apache-2.0 module.
agent-definitions
ProHigh-leverage configs that enforce a methodology without capping the intelligence.
Requirements & documentation ↗Download the Pro bundle or individual module archive associated with your purchase. If your download is missing, send your order reference to support. No license key or archive is uploaded by this page.
Choose a file to build your exact command.
Run this command from the folder containing the archive. Selecting a file here does not install or execute anything.
Activate after installation
Start a new Pi session. Run the command below in Pi and follow the license bootstrap instructions. License validation contacts Polar.
/bastille-license refresh/bastille-license statusbastille-license
ProManage your BASTILLE-C3 license from the Pi command palette - status, refresh, and clear.
Requirements & documentation ↗Download the Pro bundle or individual module archive associated with your purchase. If your download is missing, send your order reference to support. No license key or archive is uploaded by this page.
Choose a file to build your exact command.
Run this command from the folder containing the archive. Selecting a file here does not install or execute anything.
Activate after installation
Start a new Pi session. Run the command below in Pi and follow the license bootstrap instructions. License validation contacts Polar.
/bastille-license refresh/bastille-license statuspi-change-reason
ProThe agent has to justify every edit or write before running it.
Requirements & documentation ↗Download the Pro bundle or individual module archive associated with your purchase. If your download is missing, send your order reference to support. No license key or archive is uploaded by this page.
Choose a file to build your exact command.
Run this command from the folder containing the archive. Selecting a file here does not install or execute anything.
Activate after installation
Start a new Pi session. Run the command below in Pi and follow the license bootstrap instructions. License validation contacts Polar.
/bastille-license refresh/bastille-license statuspi-change-review
ProFile edits wait for approval before they're applied.
Requirements & documentation ↗Download the Pro bundle or individual module archive associated with your purchase. If your download is missing, send your order reference to support. No license key or archive is uploaded by this page.
Choose a file to build your exact command.
Run this command from the folder containing the archive. Selecting a file here does not install or execute anything.
Activate after installation
Start a new Pi session. Run the command below in Pi and follow the license bootstrap instructions. License validation contacts Polar.
/bastille-license refresh/bastille-license statuspi-edit-guard
ProPost-edit safety net. Suspends on rejection. Forces a re-review before the agent tries again.
Requirements & documentation ↗Download the Pro bundle or individual module archive associated with your purchase. If your download is missing, send your order reference to support. No license key or archive is uploaded by this page.
Choose a file to build your exact command.
Run this command from the folder containing the archive. Selecting a file here does not install or execute anything.
Activate after installation
Start a new Pi session. Run the command below in Pi and follow the license bootstrap instructions. License validation contacts Polar.
/bastille-license refresh/bastille-license statuspi-sandlock
ProTiered process isolation backed by the Sandlock engine (seccomp + Landlock).
Requirements & documentation ↗Download the Pro bundle or individual module archive associated with your purchase. If your download is missing, send your order reference to support. No license key or archive is uploaded by this page.
Choose a file to build your exact command.
Run this command from the folder containing the archive. Selecting a file here does not install or execute anything.
Activate after installation
Start a new Pi session. Run the command below in Pi and follow the license bootstrap instructions. License validation contacts Polar.
/bastille-license refresh/bastille-license statuspi-spawn
ProSpins up and manages agents and long-running processes through PTY sessions, not tmux.
Requirements & documentation ↗Download the Pro bundle or individual module archive associated with your purchase. If your download is missing, send your order reference to support. No license key or archive is uploaded by this page.
Choose a file to build your exact command.
Run this command from the folder containing the archive. Selecting a file here does not install or execute anything.
Activate after installation
Start a new Pi session. Run the command below in Pi and follow the license bootstrap instructions. License validation contacts Polar.
/bastille-license refresh/bastille-license statuspi-tracer
ProFull capture of HTTP requests and responses for LLM model calls. A local record you can inspect.
Requirements & documentation ↗Download the Pro bundle or individual module archive associated with your purchase. If your download is missing, send your order reference to support. No license key or archive is uploaded by this page.
Choose a file to build your exact command.
Run this command from the folder containing the archive. Selecting a file here does not install or execute anything.
Activate after installation
Start a new Pi session. Run the command below in Pi and follow the license bootstrap instructions. License validation contacts Polar.
/bastille-license refresh/bastille-license statuszrag
ProLocal-first retrieval built on zvec. Your embeddings, collections, and storage stay under your control.
Requirements & documentation ↗Download the zrag wheel associated with your purchase. If your download is missing, send your order reference to support. No license key or archive is uploaded by this page.
Choose a file to build your exact command.
Run this command from the folder containing the archive. Selecting a file here does not install or execute anything.
Activate after installation
In your terminal, run the command below and follow the license bootstrap instructions. License validation contacts Polar.
zrag license refreshpi-console-link
TeamConnects your local Pi instance to the self-hosted Bastille-C3 Console. Sends governance events for centralized audit, shared team policy, and team admin.
Requirements & documentation ↗Download the Team bundle or individual module archive associated with your purchase. If your download is missing, send your order reference to support. No license key or archive is uploaded by this page.
Choose a file to build your exact command.
Run this command from the folder containing the archive. Selecting a file here does not install or execute anything.
Activate after installation
Start a new Pi session. Run the command below in Pi and follow the license bootstrap instructions. License validation contacts Polar.
/bastille-license refresh/bastille-license status03 / Verify before trusting
A safe first check.
For pi-gatekeeper, start a fresh Pi session and open its configuration with the command below. Check that the module loaded and review its approval and denial settings.
/gatekeeperAsk the agent to run a harmless command such as pwd in a disposable project. Observe the module's status and behavior. An ordinary command need not trigger an approval prompt.
Product recording: a blocked command. Do not reproduce this on your working machine.
For another module, follow its own usage guide. Governance is an extra layer, not a guarantee that every agent action is safe.
04 / Build from what works
Add one thing at a time.
Pair command interception with pre-edit review when file changes need your sign-off. Add a local trace when you need to understand model calls. Choose a self-hosted Console when the work becomes a team effort.