# Bastille-C3 > Bastille-C3 is a modular governance layer for open AI coding agents, built around Pi. It combines command interception, file-change approvals, local model-call tracing, process isolation, agent orchestration, and local-first retrieval. Free core modules and skills are complemented by paid Pro modules and a customer-hosted Team Console. Official C3 website: https://bastilleworks.pages.dev/bastille-c3/. Operator: Elouarn de Kerros, France. Contact: bastilleworks@mailo.com. Bastille-C3 extends the Pi coding agent; it does not replace the harness or model provider. zrag is a separate Python application. Skills provide instructions; governance modules intercept actions. These are different capabilities, even when a skill and a module share a name. Important context: - Free modules and every skill use Apache-2.0 and require no paid subscription. Pro and Team modules use FSL-1.1-ALv2 and require a valid paid entitlement. - Bastille-C3 does not host agent workloads. Retrieval indexes and audit storage are customer-controlled. Model calls go to the customer's chosen provider; optional zrag backends and URL ingestion can make external connections. Paid license checks contact Polar. Website analytics, payments, and support messages are separate data flows. - The site's current release notice marks the public source repository and the free npm packages pi-gatekeeper, pi-vcc, uv-extension, and caveman-milk-pi as release pending. Documented installation commands are not confirmed working downloads. Check the installation and skills pages for current availability. - Live online checkout is not available yet. The configured Pro and Team links use Polar sandbox, not real payments. Contact Bastille-C3 about release access or a paid license. - Governance is an additional control layer, not a guarantee of safe agent behavior. Protection depends on the installed module, configuration, harness, and environment. The linked pages provide detailed requirements, usage, pricing, and policies. If this summary and a linked page differ, use the page's current details and release notices. ## Bastille products - [Bastille crossroads](https://bastilleworks.pages.dev/): Choose between Bastille-C3 and Bastille VPN. - [Bastille VPN](https://bastilleworks.pages.dev/bastille-vpn/): Redirects to the separately hosted VPN website and application. The C3 governance and licensing descriptions below do not describe the VPN service. ## Start here - [Bastille-C3 overview](https://bastilleworks.pages.dev/bastille-c3/): Product positioning, capabilities, and the free-core approach. - [Get started](https://bastilleworks.pages.dev/bastille-c3/get-started): Prerequisites, release availability, module selection, archive installation, paid activation, and safe verification. Pi extensions require Pi; use Linux or macOS, or WSL2 on Windows. Check each module's platform requirements. zrag installs from a separate Python wheel with uv, not from the Pi bundle. - [Module catalog](https://bastilleworks.pages.dev/bastille-c3/modules): Browse modules by governance, observability, data sovereignty, efficiency, orchestration, configuration, and plan. - [Skill library](https://bastilleworks.pages.dev/bastille-c3/skills): Free Apache-2.0 manuals: browser-tools, exa-search, gh-gl-cli, git, pi-spawn, skill-creator, and uv. Skills guide behavior rather than enforce permissions; some companion skills require their associated tools. ## Free modules - Apache-2.0 - [pi-gatekeeper](https://bastilleworks.pages.dev/bastille-c3/modules/pi-gatekeeper): AST-based shell-command inspection, destructive-command blocking, approval prompts, and governance events. - [pi-vcc](https://bastilleworks.pages.dev/bastille-c3/modules/pi-vcc): Deterministic session compaction without an LLM call; active history remains searchable through recall. - [uv-extension](https://bastilleworks.pages.dev/bastille-c3/modules/uv-extension): Redirects pip, poetry, python, and venv invocations to uv; includes a companion uv skill. - [caveman-milk-pi](https://bastilleworks.pages.dev/bastille-c3/modules/caveman-milk-pi): Opt-in terse agent responses that preserve technical substance. Disabled by default; does not rewrite code, tool arguments, or file contents. ## Pro modules - FSL-1.1-ALv2 - [pi-change-reason](https://bastilleworks.pages.dev/bastille-c3/modules/pi-change-reason): Requires a concrete reason before supported file mutations and records it as a governance event. - [pi-change-review](https://bastilleworks.pages.dev/bastille-c3/modules/pi-change-review): Approval gate before edit, write, or hashline_edit changes apply; supports rejection notes and corrected replacements. - [pi-edit-guard](https://bastilleworks.pages.dev/bastille-c3/modules/pi-edit-guard): Post-edit guardrails: pause after rejection, require a read before retrying a failed change, and verify approved content on disk. - [pi-sandlock](https://bastilleworks.pages.dev/bastille-c3/modules/pi-sandlock): Capability-tier process isolation using the Sandlock engine, with project ceilings, confirmed elevation, profiles, and decision auditing. Check engine and platform requirements. - [pi-tracer](https://bastilleworks.pages.dev/bastille-c3/modules/pi-tracer): Local capture of LLM HTTP requests, responses, SSE streams, usage, and timing. API-key headers are redacted by default. - [pi-spawn](https://bastilleworks.pages.dev/bastille-c3/modules/pi-spawn): Manage parallel agents and long-running processes through interactive PTY sessions, not tmux. Requires holdpty 0.4.0 or newer. - [zrag](https://bastilleworks.pages.dev/bastille-c3/modules/zrag): Local-first retrieval on zvec with a persistent daemon, hybrid keyword/semantic search, reranking, code and document ingestion, and an MCP server. Distributed as a separate Python wheel; local embeddings and vector storage are the default, with optional external backends. - [agent-definitions](https://bastilleworks.pages.dev/bastille-c3/modules/agent-definitions): Planner, evaluator, generator, and researcher Pi configurations, each with a lightweight variant. - [bastille-license](https://bastilleworks.pages.dev/bastille-c3/modules/bastille-license): Status, refresh, activation, and clearing of paid Pi license credentials through Polar. Included with Pro and Team bundles. ## Team module - FSL-1.1-ALv2 - [pi-console-link](https://bastilleworks.pages.dev/bastille-c3/modules/pi-console-link): Forwards local governance events to the customer's self-hosted Bastille-C3 Console for centralized audit, shared policy, and administration. Requires a Team entitlement and a Node + PostgreSQL Console; does nothing until configured. ## Plans and deployment - [Pricing](https://bastilleworks.pages.dev/bastille-c3/pricing): Free is EUR 0 forever. Pro is EUR 19/month or EUR 190/year. Pro includes the Free capabilities; Team includes Pro and the self-hosted Console. Paid prices exclude VAT. Review the live-checkout notice before recommending a purchase. - [Team seat pricing](https://bastilleworks.pages.dev/bastille-c3/pricing#team-calculator): 2-9 seats: EUR 41/seat/month or EUR 410/seat/year. 10-24 seats: EUR 35/seat/month or EUR 350/seat/year. 25-49 seats: EUR 29/seat/month or EUR 290/seat/year. Annual amounts are full-year charges per seat, not monthly rates. Prices exclude VAT. - [Team and Enterprise](https://bastilleworks.pages.dev/bastille-c3/enterprise): Customer-hosted Node + PostgreSQL Console. Team covers 2-49 seats; Enterprise offers custom pricing for 50+ seats and Projects visibility across teams and repositories. Customers manage hosting, access, backups, retention, and model-provider choices. ## Support and key policies - [Support and billing](https://bastilleworks.pages.dev/bastille-c3/support): Installation help, release access, license issues, cancellation, and refund requests. Contact bastilleworks@mailo.com; do not send passwords, full license keys, or client code. - [Privacy Policy](https://bastilleworks.pages.dev/bastille-c3/legal/privacy): Customer-hosted operation versus website analytics, support, payments, and paid-license validation. - [Terms of Service](https://bastilleworks.pages.dev/bastille-c3/legal/terms): Service scope, customer responsibilities, software licenses, and limitations. - [Refund Policy](https://bastilleworks.pages.dev/bastille-c3/legal/refund): Cancellation, renewal, discretionary voluntary refunds, and mandatory consumer rights. Cancellation does not automatically create a prorated refund. ## Optional - [Legal overview and publisher](https://bastilleworks.pages.dev/bastille-c3/legal): Policy index and operator/contact information. - [Acceptable Use Policy](https://bastilleworks.pages.dev/bastille-c3/legal/acceptable-use): Permitted use and prohibited conduct. - [No-Reselling Policy](https://bastilleworks.pages.dev/bastille-c3/legal/no-reselling): Rules for paid subscriptions, credentials, and access; does not replace applicable software-license rights. - [Abuse Policy](https://bastilleworks.pages.dev/bastille-c3/legal/abuse): Abuse reporting and handling.