Restory: The Seatbelt for AI Coding Agents

Introduction

Restory is a local security tool designed to protect your computer when you use AI coding agents like Claude Code or Gemini CLI. Think of it as a seatbelt for your software. It watches what these AI tools try to do before they execute commands. Instead of just checking if a command name is allowed, Restory looks at the actual effect of the action. It blocks dangerous moves like stealing secrets, sending data to the internet, or deleting important files. It also keeps a record of everything that happens and lets you undo changes with a single command if something goes wrong.

Benefits

Restory offers several key advantages for developers who use AI to write code.

• Smart Protection: Unlike simple allowlists that only check command names, Restory understands the intent behind an action. It can spot attempts to read secret files, send data outside your network, or delete large parts of your system.
• Local and Private: All data stays on your machine. Restory uses a local database and does not send any information to the cloud. This ensures your code and secrets remain private.
• One-Click Recovery: If an AI agent makes a mistake or gets hacked, you can restore your workspace to its original state instantly. This feature saves time and prevents data loss.
• Live Visibility: You can watch a timeline of what the AI is doing in real time. This helps you understand the "blast radius" of any command before it runs.
• Lightweight: Restory runs as a small hook in your system. It does not require heavy virtual machines or slow containers, making it fast for everyday use.

Use Cases

Restory is useful for anyone who relies on AI agents to modify their codebase.

• AI-Powered Development: Developers using tools like Claude Code or Gemini CLI can install Restory to add a safety layer. It acts as a guardrail during the coding process.
• Sensitive Projects: Teams working with private repositories or sensitive data can use Restory to prevent accidental leaks or unauthorized changes.
• Learning and Experimentation: When testing new AI features or experimenting with dangerous commands, Restory provides a safety net. You can try things out and then undo any mistakes easily.
• Audit and Review: The tool generates reports of all actions taken during a session. This is helpful for reviewing what the AI did and ensuring compliance with security policies.

Pricing

Restory is currently available as an open-source project on GitHub. There is no official subscription fee or commercial pricing listed. Users can install it for free using pip and configure it for their own machines.

Vibes

As an open-source tool, Restory has not yet gathered a large number of public reviews or testimonials. However, the project is well-received in developer communities for its honest approach to security. The creators are transparent about the tool's limitations, noting that it is not a perfect sandbox but a valuable layer in a defense-in-depth strategy. Early feedback suggests that developers appreciate the ability to see exactly what their AI agents are doing and the peace of mind that comes from having an instant rollback option.

Additional Information

Restory is developed by DarkAxiom93 and is hosted on GitHub. It is designed to work as a companion to existing AI coding tools rather than replacing them. The project emphasizes that it should be used alongside other security measures like OS sandboxes for maximum protection. It supports multiple AI agents, including Claude Code and an experimental version for Gemini CLI. The tool is actively maintained and updated to address new security challenges in the AI coding space.