gatekeeper

Gatekeeper How is Gatekeeper different from OPA? Compared to using OPA with its sidecar kube-mgmt aka Gatekeeper v1.0, Gatekeeper introduces the following functionality: An extensible, parameterized policy library Native Kubernetes CRDs for instantiating the policy library aka "constraints" Nativ...

conductai

Conduct Governance for AI agents. Ship in 60 seconds. Built for engineering teams. Install in 10 minutes. Evidence for the CISO from day one. 60-second t...

agent-governance-toolkit

🌍 English | Español | 日本語 | 简体中文 | 한국어 | 繁體中文 Agent Governance Toolkit Ship agents to production without losing sleep 🚀Quick Start · 📋 Specifications · 📦 PyPI · 📝 Changelog -brightgreen !IMPORTANT Public Preview -- production-quality public preview releases...

agentsh

agentsh macOS note: Native macOS enforcement via ESF Endpoint Security Framework + NE Network Extension is in Alpha. It works end-to-end — file, process, and network events flow through the system extension to the Go policy engine — but expect rough edges and breaking changes between releases. Fo...

prismor

Prismor Runtime security for Claude Code, Codex, Langchain and other AI agents frameworks/harness. Prismor is highly customizable based on user's own policies. Observe or enforce mode to see agent activity in a local self-serve dashboard Website • Onboard with Skill...

cupcake

Cupcake Make AI agents follow the rules. Policy enforcement layer for AI agents; yielding better performance and security without consuming model context. Deterministic rule-following for your agents. Interactive Examples Better performance by moving rules out of context and into policy-as-code...

kontext-cli

Website | Documentation | Dashboard | Discord Stop risky AI-agent actions before they run AI agents do more than suggest code. They run shell commands, read files, call services, change infrastructure, and interact with production systems. Kontext puts local policy between AI agents and the tools...

Boucle-framework

Boucle Claude Code hooks that actually enforce your rules. 7 standalone hooks, plus enforce-hooks for CLAUDE.md policy, audit tooling, 1,900+ tests, and a searchable Claude Code gaps corpus with severity ratings and workarounds. Quick links: Check your setup · Install hooks · Known limitations ·...

aegis-latent-core

Aegis Latent Core The evidence gateway for AI systems that must be explainable after the fact. Aegis sits between your application and one or more LLM providers. It admits, bounds, redacts, forwards and records governed calls, then emits portable cryptographic evidence that an independent verifie...

LID

██╗ ██╗██████╗ ██║ ██║██╔══██╗ ██║ ██║██║ ██║ ██║ ██║██║ ██║ ███████╗██║██████╔╝ ╚══════╝╚═╝╚═════╝ Linux Integrity Drift — "Linux is Dying" — Systematic discovery of kernel code paths that bypass LSM security guarantees The gate was never breached. It was walked around. What is LID? The Linux...

Responsible-Alliance-Protocol

Teleological Bounding Protocol TBP v4.2.1 A policy-enforcement and cryptographic audit layer for autonomous AI agents. TBP blocks specific classes of agent action — autonomous financial transfers, industrial-control-system access, weapons-system integration — at the execution layer, outside the...

UBUNTU-CVE-2026-93860

In OpenStack Mistral through 23.0.0, the /v2/maintenance API controller clears the request context and calls the maintenance service directly without any policy enforcement. Any holder of a valid Mistral token, regardless of assigned role, can read and change the service's cluster-wide maintenanc...

agent

Bomfather Agent Bomfather Agent is an eBPF-based agent that runs in the kernel space to block actions based on a policy. We built this agent to solve the problems we had with existing solutions. 1. They were too complex to set up and use. 2. They were too slow and inefficient. 3. And even if they...

allstar

Allstar !IMPORTANT La GitHub App de Allstar alojada por OpenSSF ha sido retirada. Allstar, el subproyecto de OpenSSF Scorecard, continúa manteniéndose: ahora debes ejecutarlo tú mismo, ya sea como una GitHub Action o como un daemon de servicio. Consulta ossf/allstar881 para más detalles. Si tu...

opa

Open Policy Agent Open Policy Agent OPA è un motore di policy open source e di uso generale che consente un'applicazione delle policy unificata e sensibile al contesto nell'intero stack. OPA è orgoglioso di essere un progetto graduated nel panorama della Cloud Native Computing Foundation CNCF. Pe...

aegisagent

AegisAgent — AI Agent Runtime Security Gateway AI Agent Runtime Security Gateway — cryptographically binds every tool call to the authentic model completion, zero-trust policy enforcement, and integrated sandbox isolation and human approval. Background: Why AegisAgent In August 2026, the Cloud...

DEBIAN-CVE-2026-93860

In OpenStack Mistral through 23.0.0, the /v2/maintenance API controller clears the request context and calls the maintenance service directly without any policy enforcement. Any holder of a valid Mistral token, regardless of assigned role, can read and change the service's cluster-wide maintenanc...

CVE-2026-93860

In OpenStack Mistral through 23.0.0, the /v2/maintenance API controller clears the request context and calls the maintenance service directly without any policy enforcement. Any holder of a valid Mistral token, regardless of assigned role, can read and change the service's cluster-wide maintenanc...

CVE-2026-93860

In OpenStack Mistral through 23.0.0, the /v2/maintenance API controller clears the request context and calls the maintenance service directly without any policy enforcement. Any holder of a valid Mistral token, regardless of assigned role, can read and change the service's cluster-wide maintenanc...

CVE-2026-93860

In OpenStack Mistral through 23.0.0, the /v2/maintenance API controller clears the request context and calls the maintenance service directly without any policy enforcement. Any holder of a valid Mistral token, regardless of assigned role, can read and change the service's cluster-wide maintenanc...