Keel
A harness for coding agents on live systems.
What it is
Coding agents are excellent in a sandbox and dangerous on a live system — the write that returns 200 but silently did nothing, the change made under the wrong identity, the mistake a team already paid for three weeks ago. None of that is the model being dumb. It's the absence of a harness: the discipline senior engineers apply automatically and agents don't have unless you give it to them.
Keel is that discipline, packaged. An operating doctrine — live system is the source of truth, read-only first, verify every write by read-back, attribute everything, log it. Structural guardrails as policy-as-code: an attribution guard that refuses unattributed writes, protected paths, update-set discipline — hooks that intercept the action before it runs, and ship with a passing self-test. A compounding memory where every burn becomes one crisp, agent-readable fact. And an append-only audit ledger, so nothing about a run is ever a mystery.
Why you can believe it
Keel was not designed on a whiteboard. It was forged doing real, paid enterprise platform work with money on the line — every guard exists because the mistake it blocks actually happened, once, and was made structurally impossible after. The mistakes are in the ledger too. That's what makes the rest of it believable.