Warpthread gates a change against your recorded intent only where it matters, and joins who acted on which route — with what verdict and cost — into one portable receipt. It verifies that what an agent claims matches what it did. Your content never leaves your hands.
Metadata-only by default — Warpthread holds the receipt, never your prompts or documents. Bring your own keys and your own trace store.
Before a change lands, Warpthread checks it against your locked decisions and touched promises. The verdict is policy over your records — not a model's opinion. Good work flows through; it stops only what breaks a commitment.
Who acted · the route it ran · the verdict · the promises it touched · the trace · the cost — joined into one record you own. The receipt is the product, and it travels across agents, sessions, and models.
Agents over-claim. Warpthread checks that what an agent says it did matches the artifact it actually produced — a second opinion that reads the work, not the summary.
Warpthread holds the receipt — the structure and provenance — never your prompts, docs, or quotes. Point it at your own trace store: we keep the metadata, you keep the content.
When a model touches a file outside the declared scope, or review context references unresolved work, Warpthread surfaces it before the change merges.
Blocked, deferred, or cleared — each gate closes into a case record with a resume pointer. Pick the exact thread back up in any session, on any model.
From proposal to receipt, Warpthread keeps the thread intact across agents, sessions, and models — and decides with reproducible policy, not a model's judgment. Nothing lands without a gate; nothing is lost without a record; nothing of yours leaves your store.
Claude, Codex, or any connected model proposes a change. Warpthread intercepts and opens a gate.
The contradiction and verbatim-quote checks run deterministically over your locked decisions. The verdict is reproducible policy, not a model's judgment call.
PROMISE_VIOLATED · P-022 requires security reviewOnce the verdict is decided, a model writes the plain-language summary and recommendation. It explains the call; it doesn't make it.
BLOCKED · token lifetime exceeds the recorded 24h limitWarpthread checks the produced work against what was claimed and flags any mismatch — the second opinion that can't be talked past.
SURFACE_MISMATCH · auth/session.ts not in ENG-1041 scopeThe gate closes into a portable receipt with a resume pointer. The trace lives in your store; Warpthread keeps only the metadata.
CR-2024-0892 · resume after security-review.md