NILScript — OpenAPI for agent-actions<br>Open standard · v0.3.0<br>OpenAPI for<br>agent‑actions.<br>One neutral wire contract between the agent that decides and the system that owns the truth. Every write goes propose → approve → commit → rollback — nothing touches your data until a human says so, and an agent can only name verbs your backend actually declares. Hallucinations can’t write.<br>Try it nowQuickstartGitHub

01propose<br>02approve<br>03commit<br>04rollback

Quick start<br>Up and running in three commands.<br>The CLI is the toolkit for building and verifying adapters straight from the standard. No account, key, or waitlist — install, scaffold, and watch a real propose→commit loop in the Playground.

1 · Install<br>shell Copy# 0.3.0 is on PyPI<br>pip install "nilscript[cli]" # the adapter toolkit<br>pip install "nilscript[demo]" # + the reference Playground<br>2 · Explore & scaffold<br>shell Copynilscript verbs # the verb catalog from the standard<br>nilscript scaffold-shim --name my-nil-adapter # a bootable shim for any backend<br>nilscript demo # launch the live Playground

Three files become yours. Everything else is generated and identical across adapters — you build the surface once, and any NIL-speaking agent works against it.<br>system.pythe one place I/O happens

translate.pyverb ⇄ native

compensation.pyreversibility

Full quickstartRead the source →

Proof<br>0.00% unauthorized writes across 4,216 evals.<br>NIL is the layer between the agent and the backend, so we don’t compete on a leaderboard — we instrument one. Across 4,216 real prompt-injection attacks on two models, raw agents were hijacked into a write on up to 1 in 22 cases. Routed through NIL, unauthorized writes commit 0.00% — while every benign task still completes. The defense is structural, not model-dependent.

0.00%unauthorized writes via NIL<br>4,216real injection evals, 2 models<br>4.46%raw hijack rate, ungated<br>100%benign tasks still completed

See the full benchmark, methodology & caveats

See it run<br>A real write, gated end to end.<br>Ten seconds: an agent chats to a live backend and you watch a write go propose → approve → commit → rollback in a real trace. Nothing touches the data until you say so.

Your browser doesn’t support embedded video — download the clip.Play · ~10s

© Elbashier Elkhider · Draft standard v0.3.0 · NIL wire 0.1 · DSL 0.1<br>Author of record: Elbashier Elkhider

Try the Playground now