Skip to main content

What is Enact?

You just gave an LLM access to real APIs. What happens when it does something stupid? It already has. Replit’s agent deleted a production database. Amazon Kiro caused a 13-hour AWS outage. Claude Code ran rm -rf on a home directory. These weren’t bugs — the agents did exactly what they were told. The problem: nothing was checking whether they should. Enact is the missing layer between your agent and the real world:
  1. Block dangerous actions before they fire — Python policies run before anything executes. Agent tries to push to main? Blocked. Tries to DELETE without a WHERE clause? Blocked.
  2. Execute deterministically — Policies and workflows are plain Python: unit-testable, git diff’able, reviewable in a PR. LLM-generated actions are not.
  3. Prove what happened — Every run (PASS or BLOCK) writes a cryptographically-signed receipt: who ran what, which policies passed, what changed.
  4. Roll back in one callenact.rollback(run_id) reverses the damage. Deleted rows restored. Wrong branches recreated.

Install

pip install enact-sdk

Quickstart (30 seconds)

pip install enact-sdk
python examples/quickstart.py
Three runs — one BLOCK, one PASS, one ROLLBACK — with signed receipts printed to stdout. No credentials, no cloud account, no setup needed. Want the full show? python examples/demo.py runs a 3-act scenario: an agent blocked from pushing to main, a normal PR workflow, and a database wipe rolled back in one command.

Next Steps