policy-engine

Open-source runtime guardrails for AI agents with cost limits, loop detection, policy enforcement, observability, and dashboard/CLI support.

unYOLO is a framework for building credential brokers and proxies for AI agents. It keeps provider credentials out of the agent, applies local policy rules, supports timed grants and operator approvals, and includes brokers for GitHub, Hugging Face, and approved Unix commands.

OpenAPPA is an open-source deterministic guardrail and information-flow policy engine for LLM agents. The page describes flow-based security labeling, CI validation, remedy plans, sanitizers, authorities, and subagents, with links to docs, GitHub, Discord, and benchmark claims.

LeanGuard is a Lean 4-based runtime guardrail system for agent tool use, with native temporal policies, Python integration, and optional MCP support.

An open-source governance layer and policy-decision daemon for autonomous AI agents, designed to enforce guardrails, budget limits, and runtime policy checks.

Open-source security scanner and firewall for MCP servers. It scans configs for common MCP risks, enforces runtime policies on tool calls, and produces audit logs, with CLI commands, policy examples, and a programmatic API.

Attestor is a TypeScript control plane for high-risk AI-driven operations. It sits between an AI-generated request and the real system action, applying policy, approval, scope, freshness, replay, and evidence checks before returning admit, narrow, review, or block.