policy-engine

Open-source runtime guardrails for AI agents with cost limits, loop detection, policy enforcement, observability, and dashboard/CLI support.

unYOLO is a framework for building credential brokers and proxies for AI agents. It keeps provider credentials out of the agent, applies local policy rules, supports timed grants and operator approvals, and includes brokers for GitHub, Hugging Face, and approved Unix commands.

An open-source governance layer and policy-decision daemon for autonomous AI agents, designed to enforce guardrails, budget limits, and runtime policy checks.

Open-source security scanner and firewall for MCP servers. It scans configs for common MCP risks, enforces runtime policies on tool calls, and produces audit logs, with CLI commands, policy examples, and a programmatic API.

Attestor is a TypeScript control plane for high-risk AI-driven operations. It sits between an AI-generated request and the real system action, applying policy, approval, scope, freshness, replay, and evidence checks before returning admit, narrow, review, or block.