Open-Source Runtime Bartholomew Brings Sub-Microsecond Safety Guards to AI Agents

Developers building autonomous AI agents with frameworks like LangChain, AutoGen, and CrewAI often face risks when granting large language models direct control over filesystems, databases, and OS interfaces. To address this, a team has launched Bartholomew (BTP v2.5), an open-source execution runtime and MCP proxy for Python and Node.js. The tool applies four core safety primitives: sub-microsecond OS event gating at 0.95 µs, in-memory Copy-on-Write rollbacks that restore filesystem state within milliseconds if a tool call violates boundaries, recursive token quota attenuation to prevent runaway multi-agent API spend, and bi-directional secret scrubbing at 0.82 µs to block credential leakage in both directions. Unlike existing approaches such as remote moderation filters or container virtualization, Bartholomew treats agent execution as an atomic, reversible micro-transaction inspired by database transactional theory. The project is available as open source and supports common credential patterns including OpenAI, Anthropic, AWS, and GitHub tokens.