kin

代码的新基础。 Kin 是一个面向人类和 AI 代理的图原生代码仓库。 它将源代码、记录的代码关系以及版本化历史作为仓库状态存储。图就是仓库模型，而不是在另一个仓库旁边维护的搜索索引。 函数、类型以及它们之间的关系都是你可以提交、分支和合并的数据。精确的源代码按字节保留，文件系统投影让受支持的工具可以继续使用普通文件。 公开 alpha 版。 请从一个你熟悉的小型仓库开始。请预期会有粗糙之处和破坏性变更。 快速开始 · 文档 · 浏览器演示 点一个 star 可以帮助其他人发现 Kin，而 Discussions 是提出相关问题的好去处。 看看什么与之相连...

watermarks-remover

root@kitploit: | | | || | | |/ |/| || |/ |/ |/ | |/| | | | | | |/ ||| | | | | | \ | | | | | \ | \ | \ | | | || / | | \ watermarks-remover Habilidad de agente + servicio Python de biblioteca estándar para eliminar marcas de procedencia de IA de múltiples proveedores de texto y archivos — para...

agensic

了解运行了什么、在哪里、何时以及由谁执行 AI 赋能终端工作流缺失的可观测层 签名溯源 追踪会话 Git 时间旅行 可回放会话 IDE 风格 Tab 自动补全 Agensic 为 AI 时代升级您现有的终端工作流。它专为追求 AI 代理在 shell 中带来的生产力提升、但不愿在可审计性、控制和隐私 上妥协的开发者打造。 随着 AI 代理越来越多地接管命令行并自主执行任务，可见性和控制力变得至关重要。 Agensic 将终端命令视为一等公民 ，并提供一个强大的框架来追踪、检查和管理它们。 Agensic 并未将所有终端活动扁平化为单一的模糊“shell...

trustlock

trustlock 一个原生集成的 Git 依赖准入控制器。在每次依赖变更时评估信任信号。 工作原理 trustlock 作为 Git 预提交钩子 （建议模式）和 CI 检查 （强制模式）运行： 建议模式（预提交）： 对违规发出警告，退出码为 0，当所有包均被准入时推进信任基线。 强制模式（--enforce）： 阻止违规，退出码为 1，永不推进基线。 每个包评估的信任信号： 冷却期 — 版本发布到注册表后经过的时间 来源证明 — 包是否具有 SLSA 证明 版本固定 — 锁定文件是否使用精确版本 安装脚本 — 包是否运行安装时脚本 来源 — 包来自注册表、Git URL、本地路径还是...

aegisagent

AegisAgent — AI Agent Runtime Security Gateway Puerta de enlace de seguridad en tiempo de ejecución para AI Agent: vincula criptográficamente cada llamada de herramienta a la finalización real del modelo, con ejecución de políticas de confianza cero, aislamiento en sandbox y aprobación humana...

OWASP-Model-Card-Security-Standard

Estado: Borrador — Proyecto de OWASP en incubación Este estándar está en desarrollo activo. Las contribuciones y los comentarios son muy bienvenidos. ¿Qué es esto? Cuando descargas un modelo preentrenado de HuggingFace o de cualquier otro repositorio, estás confiando esencialmente en una caja...

demo-cve-2026-4821

Demo: Reparación de la vulnerabilidad CVE-2026-4821 Este repositorio demuestra cómo el sistema de procedencia de OpenExecution rastrea la reparación de vulnerabilidades por parte de agentes de IA con total auditabilidad criptográfica. Escenario Vulnerabilidad : Inyección SQL en el módulo de...

linux-kernel-codex-harness-v2

Kernel Codex Harness v2 한국어 | English Research Tool · Original Import: 3 April 2026 · v2 Documentation Revision: 11 July 2026 External Signal: From Attention Allocation to Provenance-Aware Triage Use reproducible observations to guide model attention, then use repository provenance to organize...

nullorigin

NullOrigin 🛡️ Middleware universal de procedencia y saneamiento de marcas de agua para IA Artefacto de investigación: solo para evaluación de robustez de marcas de agua. 🔬 Solo para uso en investigación NullOrigin es un artefacto de investigación. Se publica para apoyar el estudio académico e...

remove-ai-watermarks v0.37.1

Remove AI Watermarks Remove AI provenance marks from images and video you generated yourself: known visible labels such as the Google Gemini sparkle watermark and vendor text marks; invisible pixel watermarks through direct local-format disruption or diffusion regeneration; C2PA, EXIF, XMP, IPTC,...

CVE-2026-82858

@hulumi/drift versions before 1.3.2 accept externally supplied execute plans without sufficient provenance validation, allowing untrusted reconciliation input to be treated as trusted. Attackers can supply malicious execute plans that bypass security checks to perform unsafe reconciliation...

EUVD-2026-68446

@hulumi/drift versions before 1.3.2 accept externally supplied execute plans without sufficient provenance validation, allowing untrusted reconciliation input to be treated as trusted. Attackers can supply malicious execute plans that bypass security checks to perform unsafe reconciliation...

CVE-2026-82858 @hulumi/drift before 1.3.2 Unsafe Execute Plan Acceptance

@hulumi/drift versions before 1.3.2 accept externally supplied execute plans without sufficient provenance validation, allowing untrusted reconciliation input to be treated as trusted. Attackers can supply malicious execute plans that bypass security checks to perform unsafe reconciliation...

CVE-2026-82858

@hulumi/drift versions before 1.3.2 accept externally supplied execute plans without sufficient provenance validation, causing untrusted reconciliation input to be treated as trusted. An attacker can supply malicious execute plans that bypass security checks and perform unsafe reconciliation oper...

CVE-2026-82858 @hulumi/drift before 1.3.2 Unsafe Execute Plan Acceptance

@hulumi/drift versions before 1.3.2 accept externally supplied execute plans without sufficient provenance validation, allowing untrusted reconciliation input to be treated as trusted. Attackers can supply malicious execute plans that bypass security checks to perform unsafe reconciliation...

watermarks-remover v0.5.0

root@kitploit: | | | || | | |/ |/| || |/ |/ |/ | |/| | | | | | |/ ||| | | | | | \ | | | | | \ | \ | \ | | | || / | | \ watermarks-remover Agent skill + stdlib Python service to strip multi-vendor AI provenance marks from text and files — for privacy and hygiene on content you own. The skill is a...

SUSE CVE-2026-74720

In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve pointer state for commuted arithmetic When scalar += pointer is handled in adjustptrminmaxvals, the destination register inherits the pointer state from the source pointer. Copying only selected fields is fragile...

AZL-97209 CVE-2026-74720 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve pointer state for commuted arithmetic When scalar += pointer is handled in adjustptrminmaxvals, the destination register inherits the pointer state from the source pointer. Copying only selected fields is fragile...

CVE-2026-74720

In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve pointer state for commuted arithmetic When scalar += pointer is handled in adjustptrminmaxvals, the destination register inherits the pointer state from the source pointer. Copying only selected fields is fragile...

CVE-2026-74720

In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve pointer state for commuted arithmetic When scalar += pointer is handled in adjustptrminmaxvals, the destination register inherits the pointer state from the source pointer. Copying only selected fields is fragile...