AI agents are powerful and useful — and one wrong step drops a database, leaks a key, or quietly fabricates "done." The usual answer is friction: block, deny, nag, make humans remember the rules. We take the opposite path. We shape the environment so the safe path is the path of least resistance, and the dangerous one is no longer the natural one.
Principiis obsta — resist the beginnings. Not by obstructing the work, but by arranging reality so there is almost nothing to trip over.
Obsta does not block agents. It shapes their environment so useful work happens without accidental overreach.
The public record: 98 dated cases of AI work without a record, a boundary or an independent check, each with its source. What a reviewer asks afterwards, and what the record holds: Why Hiveram.
We are not model vendors. The models are becoming beautiful and useful. Obsta Labs builds the record around them. Hiveram keeps the record of AI work outside the AI that did it, and only someone other than the actor can close it. NeuroRouter Pro shapes what leaves a developer's machine and keeps secrets out of it. Bulwark, free and open source, makes an agent stop and ask before it opens protected files.
This stack exists for teams that refuse to choose between one giant fragile session and total amnesia. The system promise is simple: architect once, move bounded truth when needed, execute with the cheapest capable surface, and apply results back without making authority ambiguous.
No forced migration as sessions age. No transcript replay when a fresh agent takes over. No hidden sync magic that confuses local experiments with shared truth. No premium-model spend on work that cheaper execution could handle.
Obsta Labs' projects group into two areas: agent security (Bulwark) and context & work memory (NeuroRouter, Hiveram).
Open-source, policy-driven consent for AI agents at the filesystem boundary. A protected file read is paused at the Linux/macOS kernel and approved out-of-band by a human before bytes reach the agent. Available now for Linux and macOS (v0.7.x).
Runs locally in front of your model providers and controls what leaves your network. It shapes the active slice of work for Claude and Codex, preserves continuity, and keeps long sessions from rotting into expensive guesswork.
Shared AI work graph and portable handoff layer. Canonical work orders, mission briefings, checkpoints, provenance, and authority-aware bundles for agent fleets.
Short technical notes on agent boundaries, provenance, context, and decision safety.
AI can do the work. It must not be the last word on whether the work was authorised, correct and complete. Why reliable AI came from judges it could not argue with, and the five parts of accountable closure.