S

Statewright

State machines that control exactly which tools your AI agent can touch

PriceOpen Source (Apache 2.0 core)Reviewed2026-05-12
Verdict — Skip
2 Ships2 Skips
Visit github.com

The Panel's Take

Statewright takes a provocative stance on AI agent reliability: instead of making models smarter, restrict what they can do. The framework lets you define explicit state machines that determine which tools an agent can access at each phase of a workflow. During planning, agents get read-only tools. During implementation, edit tools unlock. During validation, only test commands are available. The philosophy is captured in a single line from the README: "Agents are suggestions, states are laws." The core engine is written in Rust for deterministic, zero-LLM evaluation of state transitions. Plugin layers integrate with agents via MCP (Model Context Protocol), enforcing tool restrictions at the protocol level across most major platforms. The framework is Apache 2.0 for its core engine, with FSL licensing for extended features (converting to Apache 2.0 in 2029, self-hosting allowed for developers and teams now). The team published SWE-bench results showing models jumping from 2/10 to 10/10 success rates on five tasks when Statewright constraints were applied—a striking claim that has the HN crowd both skeptical and intrigued. This is genuinely novel territory: rather than prompt engineering or fine-tuning, it's architectural guardrails enforced at runtime. For production agent deployments where agents interacting with dangerous tools (databases, file systems, APIs) need hard constraints, this fills a real gap. 53 stars so far, but the HN traction suggests it's about to pop.

Share this verdict

Statewright verdict: SKIP ⏭️

2 ships · 2 skips from the expert panel

Full review: shiporskip.io/tool/statewright-state-machine-guardrails-ai-agents-rust-mcp-2026

Weekly AI Tool Verdicts

Get the next verdict in your inbox

7 critics review a new AI tool every day. Weekly digest — free.

Embed this verdict

Tool makers can add a live ShipOrSkip badge to their site. Badge loads track impressions; clicks route back to this review.

Skip · 5.0/10
HTML badge
<a href="https://shiporskip.io/api/badge-click/statewright-state-machine-guardrails-ai-agents-rust-mcp-2026" target="_blank" rel="noopener"><img src="https://shiporskip.io/api/badge/statewright-state-machine-guardrails-ai-agents-rust-mcp-2026" alt="Statewright Skip verdict on ShipOrSkip" width="360" height="90" /></a>
Markdown badge
[![Statewright Skip verdict on ShipOrSkip](https://shiporskip.io/api/badge/statewright-state-machine-guardrails-ai-agents-rust-mcp-2026)](https://shiporskip.io/api/badge-click/statewright-state-machine-guardrails-ai-agents-rust-mcp-2026)
Iframe widget
<iframe src="https://shiporskip.io/embed/statewright-state-machine-guardrails-ai-agents-rust-mcp-2026" title="Statewright ShipOrSkip verdict" width="360" height="260" style="border:0;border-radius:16px;max-width:100%;" loading="lazy"></iframe>

The reviews

Rust deterministic engine enforcing MCP-level tool restrictions is exactly the kind of hard guarantee you need before letting an agent touch production databases. This is infrastructure, not a toy.

Helpful?

The SWE-bench jump from 2/10 to 10/10 on five tasks is too small a sample to generalize from. Rigid state machines may reduce agent flexibility in ways that create new failure modes—agents that get stuck because a valid path violates the state graph.

Helpful?

Formal methods for AI agents—think type systems but for behavior—is a research area that will matter enormously as agents enter regulated industries. Statewright is an early, practical instantiation of that idea. Watch this space.

Helpful?

For creative workflows where spontaneity matters, hard state machine constraints sound like they'd kill the magic. I'd rather have a guardrail-light agent that occasionally needs correction than one that asks permission to proceed at every step.

Helpful?

Bookmarks

Loading bookmarks...

No bookmarks yet

Bookmark tools to save them for later