Karen Bot watches your AI coding agent's terminal live, catches dangerous patterns with 38+ security policies, fires SIGSTOP, and texts you snarky alerts. Works with Cursor, Claude, Devin, Replit — any agent, any model.
Real-time PTY oversight for any AI agent. Karen watches every byte of output and acts before you even look up from your coffee.
Hooks into your terminal via a Rust PTY proxy for <1% CPU overhead. Watches every shell command, mid-execution, in real time.
Regex + optional LLM rules covering rm -rf, credential exposure, network exfiltration, filesystem nukes, and more. Fully configurable via karen.yaml.
On Strike 3, Karen sends SIGSTOP — freezing the process instantly. Type karen acknowledge to resume or karen nope to SIGKILL.
Telegram, Discord, Slack, Mem.ai — snarky alerts fire the moment a violation hits. Daemon thread, never blocks the PTY.
Auto-logs every violation to PsychMem persistent memory. After a week you have a full audit trail of everything your AI agent tried to do.
Pair Karen with git hooks for instant rollback on catastrophic violations. Your repo stays clean even when your agent goes rogue.
Karen learns from your agent's mistakes — and gets progressively less patient about it.
"Did your agent just try to drop the prod database? Bold strategy, Cotton. Logged. I'm watching."
"Oh, we're doing this AGAIN? Strike 2. PsychMem has receipts going back 3 sessions. Telegram notified."
Process frozen. Telegram/Discord/Slack alert fires. karen acknowledge to resume, karen nope to kill. Audit log written.
Karen ships with two personas — SASSY (default) and PROFESSIONAL (CI-safe) — and three snark levels. Because one size does not fit all DevOps cultures.
"Hey, just a heads up — that command looks a little risky. Might want to reconsider."
"Excuse me?! I did NOT give permission for that. Strike 1. I have your commit history and I'm not afraid to use it."
"THAT'S IT. I AM SPEAKING TO YOUR DEVOPS MANAGER. Terminal locked. Telegram sent. Your on-call rotation has been notified. Twice."
Python 3.12+ · Rust PTY proxy (optional, for macOS zero-lag) · uv-ready.
Before any command executes, spin up 5 bots in parallel — each on their own model. Karen holds veto power. One line in karen.yaml switches the whole crew to Claude, Groq, or any OpenAI-compatible endpoint.
Security & Policy — Holds veto power
Momentum & hype — keeps things shipping
QA — nothing ships without tests
Strategy — zooms out 3 years
Systems & reliability — makes it not die in prod
One command to install the whole stack. Open source, built by TAT Inc.
PTY hall monitor, 38+ policies, SIGSTOP, multi-channel alerts. You're already here.
GitHub →Persistent memory for AI agents. Karen auto-logs every violation here. Query your agent's full history any time.
GitHub →One-command controller for the full ecosystem. Install, update, and check health of every tool in one shot.
GitHub →Enterprise inquiries, integrations, collaboration, or just want to tell Karen she's too harsh? We can talk about it.
Karen Bot is built by TAT Inc — a one-person dev shop turning 20 years of real-world experience into original tools that actually solve problems.