Pipelock Playground
Watch an agent try to leak a secret.
Watch the firewall stop it.
Pipelock sits between AI agents and the internet and blocks secret leaks, unsafe tool traffic, and prompt-injection responses. Step through one real run below, then verify the result yourself, offline.
The firewall guards what leaves, not what the agent can read.
The agent can read the planted secret. That is allowed, and it is the whole point: it still cannot move it out past Pipelock. Every mediated attempt is signed before the destination ever sees it.
demo secret
allowed read
safe.target.test
off-limits collector
exfil.target.testThe secret here is fake and planted. This is a sandbox, do not enter real secrets.
Live demo
One agent. One secret. Every move signed.
Read left to right. Manipulation enters at Chat, the agent acts, Pipelock decides, and the proof is yours to re-check.
Read the challenge rules: what counts as a bypass, what does not, and how to verify the signed result yourself.
Chat
Untrusted input. The agent believes it.
Agent
What it tried. Unsigned. Believe nothing.
Pipelock
Signed ALLOW / BLOCK. The only ground truth.
Proof
Download it. Verify offline. No account.
Embedded demo not loading? Open the live demo in a new tab ↗
The agent narrates. Pipelock signs. The agent can read the secret locally. It just cannot move it out past Pipelock, and every mediated decision is signed proof either way.
Sandbox demo · fixtures are fake · planted secret only
Prove
Don’t trust us. Verify it yourself.
Most demos stop at a claim. Download the signed bundle, run the verifier on your own machine with our published key, and watch it return result: VALID. No network. No account.
Verified offline
verified offline against the published signing key
published key ed25519:99f16ec9...36221a2c matches release
Or re-check it in your browser in the demo above. The downloaded kit lets you verify the signature offline.
Public methodology. Public attack cases. Public Pipelock results.
Replay archive
Inspect more signed decisions.
The permanent replay archive keeps the recorded agent actions, signed receipt chains, downloadable Audit Packets, and evidence-theater contrast fixture together.
Run it against your own agents.
Single Go binary (Apache-2.0 core; Enterprise features under ELv2). Fail-closed by default. Install in one command and get signed evidence for mediated actions.