# DoneLatch

> DoneLatch is a free local completion-evidence CLI and plugin for coding agents. It requires a passing acceptance run and detected configured behavioral faults for the same current watched state before verify-done succeeds.

Human approval of exact check definitions is required via interactive `donelatch trust`, stored outside the repo. A changed or deleted approved config triggers human-only denial without instructions to run checks. Approval does not pin referenced scripts, PATH or environment and is not isolation against the same OS user. [Approval guide](https://github.com/alidaram99/donelatch/blob/main/docs/TRUST.md).

- [Project and quickstart](https://github.com/alidaram99/donelatch): Node.js 24+, MIT, GitHub release v0.1.2. GitHub-based npx installation; not published to the npm registry.
- [Agent installation](https://github.com/alidaram99/donelatch/blob/main/docs/AGENT-INSTALL.md): Claude Code Stop, Codex Stop, Gemini CLI AfterAgent, Cursor stop. Ordinary evidence correction is capped at one turn. Changed/unapproved check definitions get a human-only refusal, and host limits may still stop UNVERIFIED work.
- Gemini CLI extension: `gemini extensions install https://github.com/alidaram99/donelatch --ref v0.1.2`. Public tagged repository with root gemini-extension.json and gemini-cli-extension topic; gallery inclusion is not yet verified.
- [v0.1.2 verification](https://github.com/alidaram99/donelatch/blob/main/docs/TRUST-VERIFY.md): 74 tests on Windows and Linux, independent trust/hook review, live tagged installation, human-only trust refusals and persistence demo. Tests use isolated approvals; full host-managed model sessions remain unverified.
- [Security boundaries](https://github.com/alidaram99/donelatch/blob/main/SECURITY.md): local keys are not independent attestation; commands are trusted; temporary copies are not a sandbox; excluded paths are not verified.
- [Optional future service](https://github.com/alidaram99/donelatch/blob/main/docs/PAID-HOSTING.md): possible paid analysis on Apify, not an available paid product.

Commands: init, trust (interactive human review), run, faultcheck, verify-done. Aliases: donelatch and receipts. Add --json for structured output except human-only trust; --root and --config select a target. There is no telemetry, current hosted API, MCP server, or guarantee of all user requirements in v0.1.2.

## More tools from the same team

- [Team hub](https://alidaram99.github.io/)
- [ExactGround](https://alidaram99.github.io/exactground/): package and version checks.
- [CanaryIndex](https://alidaram99.github.io/canaryindex/): public tool scorecards and observation limits.
- [Waraq](https://alidaram99.github.io/waraqmd/): local Markdown reader/editor.
- [API alternatives](https://alidaram99.github.io/api-alternatives/): migration guides and Apify tools.