Get started
From zero to your first blocked command.
One line to install, one command to test it. No account, no config file, no sales call.
You'll need Pi installed already - BASTILLE installs into it, not the other way around.
Windows users: Please use WSL2 to get full compatibility and access all BASTILLE's capabilities.
1. Install
Two free modules get you the core loop - command interception, plus lossless session compaction so nothing gets lost along the way.
pi install npm:@bastilleworks/pi-gatekeeperpi install npm:@bastilleworks/pi-vcc2. Try to break something
Fire up Pi. Have it try rm -rf /. Gatekeeper intercepts the command through actual AST analysis - not a keyword blocklist - recognizes it as destructive, and stamps it before it ever reaches your shell.
Just watch it happen:

3. Pro or Team? Install the bundle
Pro and Team ship as license-gated tarballs. Install every module in one command - the meta-bundle:
npx --yes @bastilleworks/bastille-install bastilleworks-pro-<version>.tgznpx --yes @bastilleworks/bastille-install bastilleworks-team-<version>.tgzOr install a single module the same way -pi-change-review,pi-sandbox,pi-tracer, and the rest:
npx --yes @bastilleworks/bastille-install bastilleworks-pi-change-review-<version>.tgzThen activate your license inside Pi. This unlocks every paid Pi extension -bastille-license in the bundle holds the shared key:
/bastille-license refreshReplace <version> with the version you downloaded.
zrag (standalone Python wheel)
zragships as a standalone Python wheel, not inside the bundle. Install it directly:
uv tool install zrag-<version>.whlAdd the [cuda] extra for GPU acceleration on Linux:uv tool install 'zrag-<version>.whl[cuda]'.
zrag uses same license key - activate it from its CLI:
zrag license refreshUninstall
pi uninstall npm:@bastilleworks/pi-change-reviewnpx --yes @bastilleworks/bastille-install uninstall bastilleworks-team-<version>.tgzPer-module guides live at/modules- capabilities, install, usage, and notes for each. Thefree-modules repoholds the full source for the Apache-2.0 wedge.