Project Starfish DevlogGitHub
Devlog

Building a governance-first AI

A build journal: how Project Starfish went from a single decision (deny by default) to governing real agents.

2026-06-20

Governing Claude Code itself

Deny-by-default as an overlay, and a lockdown the agent cannot switch off.

2026-06-19

Going public: Apache-2.0, on npm and GitHub

Free for personal and commercial use, with the trademark as the moat.

2026-06-16

No more 'my agent deleted my drive'

Governed, reversible deletion and a Custodian bound by hard rules.

2026-06-15

Model-agnostic, and proving the work

The runtime spine, model independence, and the Evidence Gate: no unbacked word.

2026-06-14

Burning the boat: from strangler to clean-room

We stopped salvaging the fork, rebuilt clean, and hardened the skin.

2026-06-09

Toby and Hank: the only door in, and a watcher that cannot lie

Capability intake, runtime monitoring, and the portable overlay that became the product.

2026-06-08

The governed core: a deny-by-default PDP, a hash-chained audit, and a boundary engine

Phases 0 through 4: the trusted base everything else stands on.

2026-06-04

Why we are building Project Starfish

Everyone ships skills. Nobody ships governance.

Project Starfish · a governance-first, deny-by-default AI ecosystem · Apache-2.0. This devlog is a backdated build journal reconstructed from the project history.