Skip to content

Governance / Pro

pi-edit-guard

Three post-edit guardrails. Pause on rejection, retry with current state, and verify what actually landed on disk.

ProFSL-1.1-ALv2Pi extensionInstallation ↓

What it does.

  • deny-hold - after a change is rejected, block the next tool call until you send a new prompt.
  • read-before-retry - after an edit or write fails, require the agent to read the file before retrying.
  • post-verification - after a reviewed change applies, verify the on-disk content matches what was approved.

Put it to work.

Use the Pro archive from your purchase. The Pro or Team bundle includes its Pi extensions. An individual module archive uses the same installer.

Only the filename is used. The file stays on your device and is never uploaded.

Choose a file to build your exact command.

Run this command from the folder containing the archive. Selecting a file here does not install or execute anything.

Activate your license with /bastille-license refresh inside Pi. Activation and periodic entitlement validation contact Polar. Your workload is not uploaded to Bastille-C3.

Full installation & activation guide →

In use.

Inside Pi

/edit-guard

Reference syntax · replace arguments

/edit-guard deny-hold on|off

Reference syntax · replace arguments

/edit-guard read-retry on|off

Reference syntax · replace arguments

/edit-guard post-verify on|off

Inside Pi

/edit-guard status

Each guardrail is independent. Toggle them individually or all at once.

Worth knowing.

  • Requires a valid Polar license.
Remove this module

Uninstall this extension

pi uninstall npm:@bastilleworks/pi-edit-guard

Removing an extension does not cancel your subscription. Manage renewal separately.

On the same ground

Works alongside.

pi-change-reason

The agent has to justify every edit or write before running it.

pi-change-review

File edits wait for approval before they're applied.

pi-gatekeeper

AST-based bash interception. Blocks destructive commands before they run.

← Back to every module