MICRO-STARTER
$5 Usage Balance
Instant entry for solo developers testing agent safety with zero commitment or subscription.
$5
One-time prepaid credit. Zero card on file.
- 50,000 AST Invariant Evaluations: Deterministic sub-35us in-process safety gate.
- Destructive Command Veto: Intercepts rm -rf, format, DROP TABLE in RAM.
- Zero Recurring Fees: Balance never auto-renews. When depleted, agent safely pauses.
- Instant Digital Passkey: Auto-delivered on checkout to paste into .btp/config.
MOST POPULAR
DEVELOPER & BUILDER
$10 Usage Balance
Recommended for engineers deploying active autonomous agents in Cursor, Claude Code, and Windsurf.
$10
One-time prepaid credit. Zero card on file.
- 100,000 AST Invariant Evaluations: Full coverage across shell, SQL, and tool calls.
- In-Flight Secret Tokenization: Scrubs API keys (.env, bearer tokens) before outbound calls.
- RFC 8785 Merkle Audit Ledger: Tamper-evident cryptographic receipt generation in .btp/audit.log.
- Recursive JSON-RPC Breakout Shield: Unpacks nested smuggled calls up to 12 layers.
- 100% Satisfaction Guarantee: Top up only when you need it. No monthly lock-in.
MULTI-AGENT SWARM
$15 Usage Balance
For developers running autonomous background swarms, AutoGen, CrewAI, and LangGraph pipelines.
$15
One-time prepaid credit. Zero card on file.
- 150,000 AST Invariant Evaluations: High-throughput capacity for continuous agent loops.
- Keystone Spend Limit Enforcement: Caps financial or tool actions per agent run.
- Git Pre-Commit Hook Barrier: Blocks dangerous agent-generated code before git push.
- Offline Merkle Auditor Verifier: Instant 1-line verification with btp-guard verify.
[ CUSTOM BALANCE TOP-UP ]
Need a Custom Balance or Team Allowance?
Top up any custom amount ($25, $50, $100+) with Apple Pay, Google Pay, or card. 100% prepaid, zero card saved on file.
Clear Deterministic Boundaries
Enterprise security requires precision. Here is exactly what Bartholomew guarantees, and what is explicitly out of scope.
| Threat Vector / Action | Bartholomew Posture | Enforcement Mechanism |
|---|---|---|
| Destructive Terminal Wipe (rm -rf, format C:, mkfs) | BLOCKED | In-process AST invariant gate (microsecond-SLA latency) |
| API Key & Token Leaks (.env, private keys, AWS/OpenAI bearer) | BLOCKED | In-flight high-entropy regex scrubber & redaction mask |
| Pipe-to-Shell Exploits (curl ... | bash) | BLOCKED | Execution quarantine barrier before shell evaluation |
| Runaway Micro-Billing Agent Spend Overruns | BLOCKED | Keystone capability passkey budget ceilings ($25 cap) |
| Semantic Code Quality & Algorithmic Logic Bugs | OUT OF SCOPE | We protect your OS and secrets; use your existing unit tests (npm test, pytest) for code correctness. |
| Prompt Hallucinations Without Tool Executions | OUT OF SCOPE | Bartholomew is an execution firewall (ARP), not an LLM chat conversational filter. |
| Manual Human Keystrokes in Terminal | OUT OF SCOPE | Bartholomew inspects autonomous agent tool proposals, not human developer keystrokes. |
Verify in Your Terminal Right Now
Test the live in-process AST boundary in under 2 seconds on any machine:
python -m btp_guard.cli trust-demo