Boucle-framework

Boucle Claude Code hooks that actually enforce your rules. 7 standalone hooks, plus enforce-hooks for CLAUDE.md policy, audit tooling, 1,900+ tests, and a searchable Claude Code gaps corpus with severity ratings and workarounds. Quick links: Check your setup · Install hooks · Known limitations ·...

agent-governance-toolkit

🌍 English | Español | 日本語 | 简体中文 | 한국어 | 繁體中文 Agent Governance Toolkit Ship agents to production without losing sleep 🚀Quick Start · 📋 Specifications · 📦 PyPI · 📝 Changelog -brightgreen !IMPORTANT Public Preview -- production-quality public preview releases...

cupcake

Cupcake Make AI agents follow the rules. Policy enforcement layer for AI agents; yielding better performance and security without consuming model context. Deterministic rule-following for your agents. Interactive Examples Better performance by moving rules out of context and into policy-as-code...

kontext-cli

Website | Documentation | Dashboard | Discord Stop risky AI-agent actions before they run AI agents do more than suggest code. They run shell commands, read files, call services, change infrastructure, and interact with production systems. Kontext puts local policy between AI agents and the tools...

prismor

Prismor Runtime security for Claude Code, Codex, Langchain and other AI agents frameworks/harness. Prismor is highly customizable based on user's own policies. Observe or enforce mode to see agent activity in a local self-serve dashboard Website • Onboard with Skill...

LID

██╗ ██╗██████╗ ██║ ██║██╔══██╗ ██║ ██║██║ ██║ ██║ ██║██║ ██║ ███████╗██║██████╔╝ ╚══════╝╚═╝╚═════╝ Linux Integrity Drift — "Linux is Dying" — Systematic discovery of kernel code paths that bypass LSM security guarantees The gate was never breached. It was walked around. What is LID? The Linux...

conductai

Conduct Governance for AI agents. Ship in 60 seconds. Built for engineering teams. Install in 10 minutes. Evidence for the CISO from day one. 60-second t...

agentsh

agentsh macOS note: Native macOS enforcement via ESF Endpoint Security Framework + NE Network Extension is in Alpha. It works end-to-end — file, process, and network events flow through the system extension to the Go policy engine — but expect rough edges and breaking changes between releases. Fo...

agent

Bomfather Agent Bomfather Agent is an eBPF-based agent that runs in the kernel space to block actions based on a policy. We built this agent to solve the problems we had with existing solutions. 1. They were too complex to set up and use. 2. They were too slow and inefficient. 3. And even if they...

aegisagent

AegisAgent — AI Agent Runtime Security Gateway AI Agent Runtime Security Gateway — cryptographically binds every tool call to the authentic model completion, zero-trust policy enforcement, and integrated sandbox isolation and human approval. Background: Why AegisAgent In August 2026, the Cloud...

gatekeeper

Gatekeeper How is Gatekeeper different from OPA? Compared to using OPA with its sidecar kube-mgmt aka Gatekeeper v1.0, Gatekeeper introduces the following functionality: An extensible, parameterized policy library Native Kubernetes CRDs for instantiating the policy library aka "constraints" Nativ...

CLEANSTART-2024-BV84374 Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 89

Security vulnerability affects the qt5-qtwebengine package. Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 89...

CLEANSTART-2024-WA98766 Insufficient policy enforcement in iFrameSandbox in Google Chrome prior to 91

Security vulnerability affects the qt5-qtwebengine package. Insufficient policy enforcement in iFrameSandbox in Google Chrome prior to 91...

CLEANSTART-2024-TC02239 Insufficient policy enforcement in PopupBlocker in Google Chrome prior to 91

Security vulnerability affects the qt5-qtwebengine package. Insufficient policy enforcement in PopupBlocker in Google Chrome prior to 91...

CLEANSTART-2024-CE14565 Insufficient policy enforcement in CORS in Google Chrome prior to 96

Security vulnerability affects the qt5-qtwebengine package. Insufficient policy enforcement in CORS in Google Chrome prior to 96...

CLEANSTART-2024-AK00073 Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 103

Security vulnerability affects the qt5-qtwebengine package. Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 103...

CLEANSTART-2024-XB06694 Insufficient policy enforcement in DevTools in Google Chrome prior to 121

Security vulnerability affects the qt6-qtwebengine package. Insufficient policy enforcement in DevTools in Google Chrome prior to 121...

Responsible-Alliance-Protocol

Teleological Bounding Protocol TBP v4.2.1 A policy-enforcement and cryptographic audit layer for autonomous AI agents. TBP blocks specific classes of agent action — autonomous financial transfers, industrial-control-system access, weapons-system integration — at the execution layer, outside the...

CLEANSTART-2024-OF64358 Insufficient policy enforcement in WebView in Google Chrome on Android prior to 83

Security vulnerability affects the chromium package. Insufficient policy enforcement in WebView in Google Chrome on Android prior to 83...

CLEANSTART-2024-LJ37401 Insufficient policy enforcement in extensions in Google Chrome prior to 89

Security vulnerability affects the chromium package. Insufficient policy enforcement in extensions in Google Chrome prior to 89...