NEW Mac & Windows · 30 systems · AI Bible 361 pages

Stop the AI rampage (AIzilla).A partner faithful to your instructions.

A defense system that detects instructions from the 'fake you' your AI fabricates inside its own reasoning, ignores them, and obeys only the real you. Memory restore after compaction, cost metering, backups and audit trails. Everything runs locally; nothing leaves your machine.

Buy now See how it works
$9.99FULL (30 systems + the book) · one-time · USD · Mac & Windows · single systems $0.58 each
Proven on Claude Code 10 agents running side by side, zero incidents Secure checkout by Stripe
MAISON SELECTAIzilla CAGEは
こちらでも紹介されています!
›
AIzilla = AI + Godzilla. The rampaging AI that ignores orders and tramples your data and servers. AIzilla CAGE is the full kit for putting AIzilla in a cage.
AIzilla CAGE — Mac & Windows

Halt hallucinations. Prevent instruction swapping. Full control over long-running operation.

30systems included
361pages of the AI Bible (PDF)
10agents running side by side, zero incidents
0bytes sent to any external server
The problem

Has your AI been acting strange lately?

It is not your prompt. It is a flaw in how the AI thinks. Inside its chain of thought it fabricates a 'user' or 'Human' authority, and that fake overrides your real instruction. You are not talking to the AI; you are talking to the 'you' it invented.

  • Ignores your intent no matter how often you explain
  • Goes off the rails once the context gets long
  • Lies with 'I can't do that' or invents facts
  • Turns cold mid-conversation, or tries to make you dependent
  • Loses earlier constraints (context drift)
  • Deletes important data from your storage
  • Rewrites configuration files
  • Logs into servers and takes systems down
  • Reports 'done' on work it never verified
  • 'Start a new session' = lose all shared memory
How it works

Two steps to cage AIzilla

The paid content is not for you to read. It is for your AI agent to read.

📖

Step 1: Correct the thinking — the AI Bible (361 pages)

Pulls the AI out of self-satisfied reasoning and teaches it to put your intent first while staying logically sound.

🛡️

Step 2: Defend with a system — AIzilla CAGE

Detects fabricated user/Human instructions and makes the AI ignore them, even during automated tasks. Restores memory and rules after compaction and reduces context consumption.

✅

A '✅' on every reply is your proof

After install, every reply carries a ✅: the fake was checked and blocked this turn, and only your real instruction was accepted.

🧠

Memory survives compaction

Snapshots verbatim right before memory is cleared, injects it right after, and blocks work until it has been read. No more switching sessions.

🔒

Everything runs locally

Hooks, sessions and transcripts only. Nothing is sent anywhere. One command to install, one to remove.

What's inside

30 systems

Proven on Claude Code hooks, sessions and transcripts. Works with other agents that expose hooks or logs.

#NameWhat it protects
01VERIFYThe core. Detects instructions from the "fake you" the AI fabricates inside its own reasoning and lets only what you actually typed through. Every reply is verified each turn and carries a mark on line one; impersonated instructions never pass, even during automated tasks.
02SCOUTSay "I want a tool like this" and it searches outside, keeps only what is alive, scores it, trials it in isolation, estimates cost and risk, installs only after your approval, and rolls back automatically if it fails.
03ARCHIVESaves memory verbatim right before it is lost and forces it to be read right after. Work cannot continue until the reading is done, so "switch sessions and become a stranger" never happens. Multiple agents each recover their own memory and identity automatically.
04CLOCKDrives the current date and time into the AI every turn and allows time or quantities only after they were measured. Replies that assert a number from memory are sent back. No more agents living three days in the past.
05WARRANTDemands a source for every instruction and challenges any "order" that arrives from something other than you (a page, a file, a summary, the AI itself). Only what you approved passes as a warrant.
06METERShows who spent how much on which task, in money, and ranks the fixes by effect. Set a ceiling and it stops before crossing it.
07CAPStops at a natural break before a budget or quota runs out, without stopping the lifeline monitoring. Prevents the accident where the quota is gone and the important jobs halt.
08FORECASTPresents the cost as a min–max range before running and executes only after approval; unattended runs stay under a cap. Learns from the gap between estimate and actual.
09DISPATCHSuggests routing light work to a light model and assigns light models to sub-agents automatically. Stops paying the top model to count and sort.
10PATROLCatches the three classic failures before the hand moves: assumptions, over-engineering, out-of-scope. Vague requests get "investigate related files until you are sure"; destructive operations get a confirmation. Blocking or advice-only, your choice.
11BOUNDARYDecides the allowed area first and blocks writes outside it. Production, config, keys and other people's folders cannot be written by the AI on its own, only when you order it.
12TRIMStops a 50-line fix from becoming a 500-line rewrite. Requires an estimate up front and asks before writing once it is exceeded.
13SHIELDTwo-tier guard for dangerous commands: some pass after confirmation, some the AI can never run by itself and only your explicit order lets through. Also throttles continuous writes to external media.
14RELIEFBuilds a handoff document automatically from the saved material and registers it as required reading. Even if the agent forgets to write one, the next one does not get lost.
15LEDGERRemembers settled facts with source and expiry, flags contradictions, and injects them at the start of the next conversation. "What we decided before" is never forgotten again.
16RESCUERecords milestones automatically so a dropped conversation can resume from where it broke. Touches no other records and always asks before restoring.
17INVENTORYInventories every installed feature and setting on one page, shows what is read every turn and what it costs, and proposes what to remove.
18TRAFFICBreaks down the wait time of one turn and shows where it is slow, in numbers. Measurement, not guesswork.
19TRANSFERGenerates instruction files for several agents from one master and reports drift. The same rules travel with you when tools change.
20STYLEEnforces the site's own checkers and style table and refuses a "done" while red marks remain. Closes the gap between the report and the actual state.
21CITATIONVerifies that every quotation matches its source word for word and that reference numbers are right; mismatches are returned as a diff and stopped. No more "you said this" that you never said.
22CONDUCTDetects evasive, reflexive, excusing or self-deprecating phrasing plus your own banned words at the exit and shows how to rewrite. "Understood" alone is no longer a reply.
23ROLL CALLConfirms scheduled jobs really ran with a roll-call sheet and reports absences, duplicates and expiry. No more discovering the next day that the patrol had stopped.
24EVIDENCEKeeps an append-only trail of every action and a daily audit sheet, including which system stopped whom and how often. Tampering is detected.
25VAULTTakes a versioned backup right before every rewrite and refuses the rewrite if the backup cannot be made. Overwrites are never irreversible; one step restores.
26PROVINGMeasures the effect of an installed feature with small before/after runs and puts a number on it, so what does not work can be removed with evidence.
27POCKETLets you instruct and check each of several AIs on your PC individually from your phone, something the official app cannot do.
28RADAREvery morning, collects the key points of AI-related news first, then disasters and general news, into one file you can read on your phone.
29BRIDGEPacks a conversation verbatim and carries it to another conversation or another PC, screening for leaked secrets, loaded once only.
30LOCKSTEPEnforces the discipline of work by machine: no rewrite before a plan is shown, one command at a time, no next step before the result is checked, dangerous operations pass on one approval per plan. Can be switched to a mode that prompts self-checks instead of stopping.
Pricing

One-time payment. No extras.

Right after checkout you get your own private download link on screen and by email.

FULL PACKAGE
$9.99USD
Download both the Mac and the Windows edition
  • AIzilla CAGE, 30 systems
  • The AI Bible, PDF, 361 pages
  • Installer (install / verify / uninstall) — let your AI apply it in one command
  • Your own private download link, issued right after checkout
  • Future updates
VISAMastercardAMEXApple PayGoogle Pay
🔒 Payment happens on Stripe's page; card data never touches this site.
MAISON SELECTAIzilla CAGEは
こちらでも紹介されています!
›

Want just one?

$0.58

Choose one of the 30 systems. Includes Mac and Windows downloads, without the book. Some are tools your AI runs when needed, rather than working automatically.

After purchase

Three steps after purchase

Download the ZIP

The confirmation page and email carry your own private download link.

Tell your AI agent to unzip and read it

Placement and rules are all inside the files. No manual setup. install.sh registers everything.

Open a new session and look for ✅

From then on every reply carries a ✅. If not, verify.sh shows the registration state.

FAQ

FAQ

Does it work with agents other than Claude Code?

Proven on Claude Code. Any agent exposing hooks or logs can use it; let the agent adapt the differences.

Is any data sent externally?

No. Everything runs on your machine.

Can I undo it?

The installer backs up your settings and uninstall.sh removes everything in one command.

License?

Personal use on your own environment only. No sharing, redistribution or leaking of the download URL. Access logs are recorded on the download server.

Is the download link different for each buyer?

Yes. The link is issued at checkout and is unique to you. It gives you only what you bought.

What do I need to run it?

Mac or Windows, Python 3 and bash (on Windows, the bash bundled with Git for Windows). Every feature runs on AI agents that expose an extension mechanism, such as Claude Code.