Open source · Agent safety · MCP
01Unwind
A reversibility layer for agentic tool use. A transparent MCP proxy that works out which agent actions can be taken back, quietly reverses the ones that go wrong, and interrupts you only for the ones that genuinely can't be undone.
- Human oversight of agents fails because approval prompts are undifferentiated — nothing in the stack knows which actions are reversible, so people develop an approve-approve-approve reflex. Unwind supplies the missing primitive.
- Contributed the R0–R4 reversibility taxonomy, treating reversibility as ordinal and environment-relative: the same write_file is self-reversible on a git-backed tree and irreversible on a versionless one.
- Fails safe asymmetrically — misclassifying an irreversible action as reversible is catastrophic while the reverse is merely annoying, so unknown tools, failed classification, and timeouts all escalate to a human.
- Apache-2.0 with full open-source governance: CODEOWNERS, security policy, code of conduct, citation metadata, OpenSSF Scorecard, CI with coverage, and a published docs site.
- R0–R4
- reversibility classes
- 3
- distribution channels
- 9
- MCP clients supported
- Apache-2.0
- license