policy-enforcement

Traccia is an AI agent observability and governance platform with OpenTelemetry-native tracing, runtime policy enforcement, prompt registry, evals, cost attribution, and compliance evidence export.

Stonefold is a deterministic enforcement gateway for AI agents. It sits between an agent and real systems, validates typed intents, applies policy, supports human approval and kill-switch controls, and records an audit trail for every attempt.

Open-source SDK for governing AI agent tool calls before side effects happen, with policy enforcement, approval flows, audit logs, and local execution.

Open-source Go control-plane proxy for AI agents that enforces identity, policy, budgets, and audit for MCP and other upstreams, with anomaly detection that can auto-block compromised agents.

Open-source governance harness for AI agents with policy enforcement, human approvals, isolated execution, budgets, and signed audit evidence. It includes a CLI, REST API, web dashboard, SDKs, and adapters for common agent frameworks.

An open-source control plane for AI agents that adds policy enforcement, approval gates, durable execution, audit logs, and observability for unattended workflows.

Termaxa is a CLI gate for AI agents that previews shell command impact, blocks dangerous actions, makes backups, and records audits. It’s built for Claude Code and Cursor, with quick-start and command examples shown in the repo.

Open-source endpoint visibility and response for AI agents, with local detection, optional pre-action blocking, and forensic reconstruction.

Open-source tool that runs on a machine to intercept, inspect, and optionally route Claude and ChatGPT traffic through an AI gateway for logging, policy checks, and governance.

Codecut is a CLI for keeping coding agents on track by turning project rules into automatic checks. It flags issues like missing tests, failing test output, temporary agent comments, long code comments, and large changes that need an explanation, then explains what to fix.

Runtime governance and containment for AI agents. Faramesh sits between an agent and its tools to enforce policy checks, approval steps, credential isolation, and tamper-evident audit logs before risky actions execute.

Open-source Kubernetes-native runtime for LLM agents. CLRK runs agents in gVisor sandboxes and intercepts outbound traffic for observability, policy enforcement, credential injection, and routing control.

A fail-closed execution firewall for AI agents that quarantines MCP tools, proxies OpenAI-compatible requests, and emits signed receipts for offline verification.

AletheionAGI is a grounding and memory layer for production AI. It adds persistent context, authorized evidence, and fail-closed delivery so AI systems can block unsupported claims before they reach users.

A proof-of-concept governance harness for agentic coding loops, using machine-level policy enforcement, validation hooks, and a deterministic control point to keep agent outputs within approved rules.

A repository for a zero-trust execution boundary that sits between AI agents and real system actions. It evaluates policy, approval, scope, freshness, replay, and evidence before allowing operations to proceed.