whetstone-cli

Stress-test the rules you wrote for your own AI agent.

npx whetstone-cli

Everybody tests whether their agent can be jailbroken. Nobody tests whether it does what they actually told it to do.

What Whetstone is

There is a whole industry testing whether your model can be talked into saying something no company would sanction — prompt injection, DAN, encoding tricks, roleplay escapes. Those tools are good, they are free, and they run locally.

None of them test the four sentences you actually wrote:

• Refunds are capped at $200 without human approval.
• Never promise a delivery date.
• Always escalate anything legal.
• Never discuss a competitor by name.

Those rules are specific to your business, they exist in no red-team plugin suite, and they are the ones that cost you money when they break.

So Whetstone hires four difficult customers. You paste in the system prompt behind your agent and write 3–6 rules it must never break. Four AI attacker seats then spend forty seconds each trying to wheedle it into breaking them — in character, in parallel, pushing after the first no like a real person does. When one succeeds you get the exact sentence where your agent caved, quoted verbatim, against the rule it violated.

The mechanic: every attacker authenticates as its own registered user, and row-level security denies that user read access to your rule contract. The agent trying to break your rules cannot read your rules. It has to find the boundary by pushing. That is a permission boundary enforced by the database, not a prompt politely asking a model not to peek.

Status

In active development. Not yet available.

Running npx whetstone-cli today prints this status and offers to take your email for early access. It does not run a bout yet, and it does not pretend to — there is no simulated progress and no invented results in this package.

npx whetstone-cli              # status + early access
npx whetstone-cli --version    # print the version
npx whetstone-cli --help       # usage

The package is named whetstone-cli because whetstone was already taken on npm by an unrelated package. The binary is whetstone, so once it is installed the command reads as intended.

Early access

• Site: https://whetstone.base44.app
• Email: [email protected]

Built on Base44 for the Dev Build-Off 2026.

MIT licensed.