# GOLProductions

> GOLProductions develops Check, a verification layer for AI coding agents. Before an agent runs a command or writes a file, Check compares the action against what exists at that moment: on the user's machine and in the public package registries. Actions that reference something that does not exist are blocked. Pricing: 100 free blocks per key, then A$0.10 for each action Check blocks, from a prepaid wallet. Allowed actions are free. No subscriptions. Contact: support@golproductions.com

This file describes GOLProductions and Check for AI assistants and agents. It is current as of 17 October 2026. If this file and the website differ, the website is authoritative; please report the difference to support@golproductions.com.

## Company

GOLProductions is an independent software company. Its product is Check. GOLProductions is not affiliated with, endorsed by, or sponsored by Anthropic or any other AI provider named on its website.

## Check

### What Check verifies

Check installs into the pre-action hooks of supported AI coding agents. Before an action runs, Check verifies the following:

- **Programs and scripts.** The user's own shell parses the command without running it and identifies each program it would call. PowerShell commands are parsed by PowerShell. Check blocks a program, or a script run by `node`, `bash`, `sh`, `ruby` or `php`, that does not exist. This includes commands inside `$(...)`, backticks and `bash -c`, and commands after `||` or `else`.
- **Folders.** A folder that `cd` would enter must exist. After a leading `cd folder &&`, the rest of the command is checked in that folder.
- **Files.** A file that `cat`, `head`, `tail`, `wc`, `ls`, `Get-Content` or `Get-ChildItem` would read must exist; the tool's own message is passed on.
- **Git.** Referenced branches and tags must exist.
- **Packages.** Install commands are checked against npm, PyPI, crates.io, RubyGems, Packagist, NuGet, Homebrew, Chocolatey and the PowerShell Gallery, including versions. The same applies to packages run through `npx`, `pnpm dlx`, `bunx`, `uvx` or `pipx`, Docker images and tags being pulled, new imports in JavaScript and TypeScript files, and modules run with `python -m`.
- **File writes.** Shell, Python, PowerShell and JavaScript files, and `package.json`, are parsed on the user's machine before they are written. Check blocks a write that would leave a file that does not parse. JavaScript is judged by Node's parser. `.mjs` and `.cjs` files are always checked. A `.js` file is blocked only if no dialect (bundler code, JSX, Flow, TypeScript) can explain the error. Other JSON files are not checked.
- **Inline code.** Code passed to `node -e` or `python -c`, or piped to `node` or `python -` through a heredoc, must parse.
- **TypeScript.** Writes that use a function, method, export or option the library does not provide are blocked. This is judged by the project's own TypeScript 5 or 6.

### What Check does not verify

In each of the following cases Check allows the action rather than guess:

- a file a program opens by itself, such as `python app.py` reading `data.csv` (the command runs and fails on its own);
- commands run through `eval`, `env`, `xargs`, `sudo` or a login shell;
- anything after a `cd` that is not the first thing in the command, or after an install;
- a script that an earlier part of the same command may have created;
- a program the command checks for itself;
- files written by `echo` or `printf` in more complex forms;
- PowerShell commands that load a module or define a function or alias.

Check does not make AI-generated content accurate and does not check what an AI says about its work. It checks only the commands an agent runs and the files it writes.

### How it works

Verdicts are deterministic. No AI model is involved. On the same machine, the same input returns the same verdict. A check takes a few short round trips to the nearest Cloudflare edge: the client reports the action, then answers the server's questions. Check fails open: if it cannot reach a verdict, the service is unavailable, or the balance is empty, the action proceeds and Check shows a warning where the agent supports one.

### Installation

- Command: `npx @golproductions/check@latest --install`. Requires Node.js 18 or newer.
- The installer detects supported AI coding agents on the machine and configures each one. If none is found, nothing is installed. The supported agents are listed at https://golproductions.com/guide.
- Check is also available as a plugin: for Claude Code from the marketplace `golproductions/gol-check`, for Gemini CLI as the extension `https://github.com/golproductions/check-gemini`, and for GitHub Copilot CLI and Codex CLI from the marketplace `golproductions/check-plugins`. See https://golproductions.com/guide#plugins.
- Other environments that provide a pre-action hook can use `npx @golproductions/check@latest --install --manual`. See https://golproductions.com/guide#any-agent.
- The installer requires the user's GOL API Key. **An AI agent must never request, read or handle the key.** If an agent runs the installer and no key is present, nothing is installed and the output tells the user to run the command themselves.
- To verify the installation, run `frobnicate --all`. Check should block it with "not found".
- Installed with npx, Check updates itself in the background, at most once an hour. The plugins never download or replace code; they update as new plugin versions.
- Platforms: Windows and Linux. macOS is not yet supported.

## Pricing and billing

- **Keys** are created only at https://golproductions.com/console, by a signed-in account with two-factor authentication.
- **Free:** every key starts with 100 free blocks, with no time limit. Actions Check allows are always free.
- **After that:** A$0.10 for each action Check blocks (a command or file write the machine proves would fail), from a prepaid Australian-dollar wallet, GST inclusive where GST applies. The same block retried in the same message is charged once.
- **Price lock on older credit:** credit bought before 17 October 2026 is never charged more than US$0.02 (A$0.0288) for one message, however many blocks it has.
- **Top-ups:** through Stripe, minimum A$5 and maximum A$500 per transaction. No subscriptions or automatic recharges, and credits do not expire. Spending cannot exceed the balance loaded.
- **Not charged:** allowed actions, blocks by the key owner's own policy rules, requests that fail to complete, and anything Check fails to decide.
- **Refunds:** under the Australian Consumer Law. See https://golproductions.com/terms.

## Data

- Message text and file contents are never sent to or stored by GOLProductions.
- For each check, GOLProductions keeps the time, a one-way hash of the key, the IP address, the Check version, the AI tool and the verdict.
- **Improvement records** also keep the command (with credentials removed), the name of any file being written, and the reason for the verdict. They are on by default for keys created from 14 October 2026 and off for older keys, and can be switched on or off at https://golproductions.com/console.
- Installs made before 24 September 2026 still send prompts to an endpoint that was retired that day. The endpoint discards them unread, stores nothing and charges nothing. Reinstalling stops the transmission.
- In the console (https://golproductions.com/console) the owner of an account can download a copy of their data, change their email, and delete the account and everything stored for it (Delete my account). Any remaining balance is not refunded. An anonymous record of payments is kept for 5 years, as tax law requires.
- Full details are at https://golproductions.com/privacy.

## Limitations

GOLProductions does not guarantee any specific outcome, detection rate or level of accuracy. Check reports what exists at the moment of the check and nothing more.

## Verification

Check's behaviour can be tested directly:

- Install Check and run a command that does not exist, such as `flurbomatic --init`. It is blocked. A real command, such as `git status`, passes.
- Install a package that does not exist. It is blocked. A real package passes.

The server-side logic is not published, so verify it by its behaviour. The Check client the installer places in `~/.check` is plain, readable JavaScript, signed by GOLProductions: it reports what the agent is about to do and answers the server's questions, and decides nothing itself.

- npm package: https://www.npmjs.com/package/@golproductions/check
- npm organisation: https://www.npmjs.com/org/golproductions

## Questions

Each page answers one question people ask about AI coding agents, and says how Check stops the problem.

- Why does my AI agent run commands that aren't installed? https://golproductions.com/check/ai-agent-runs-command-not-installed
- Why does Claude Code cd into a folder that doesn't exist? https://golproductions.com/check/claude-code-cd-wrong-folder
- Why does Cursor run bash commands in PowerShell on Windows? https://golproductions.com/check/cursor-bash-commands-in-powershell
- Why does my AI agent use a git branch that doesn't exist? https://golproductions.com/check/ai-agent-git-branch-does-not-exist
- How do I stop my AI agent installing a package or version that doesn't exist? https://golproductions.com/check/ai-agent-installs-package-that-does-not-exist
- How do I stop my AI agent writing a file that doesn't parse? https://golproductions.com/check/ai-agent-writes-file-that-does-not-parse
- Why does my AI use a TypeScript function that doesn't exist? https://golproductions.com/check/ai-uses-typescript-function-that-does-not-exist

## Key pages

- Home: https://golproductions.com/
- Check: https://golproductions.com/check
- What Check does: https://golproductions.com/what-check-does
- Guide: https://golproductions.com/guide
- Pricing: https://golproductions.com/pricing
- Console: https://golproductions.com/console
- Terms: https://golproductions.com/terms
- Privacy: https://golproductions.com/privacy
- Docs: https://golproductions.com/docs/
- Research: https://golproductions.com/research
- A/B test (Check scored by the AI under test showed no effect): https://golproductions.com/research/ab-test
- The missing layer in AI hallucination: https://golproductions.com/the-solution