security

Attestor is a TypeScript control plane for high-risk AI-driven operations. It sits between an AI-generated request and the real system action, applying policy, approval, scope, freshness, replay, and evidence checks before returning admit, narrow, review, or block.

A Noma Security research post detailing a prompt-injection flaw in GitHub Agentic Workflows, with attack flow, proof-of-concept evidence, and security recommendations.

Python framework for conversational social engineering detection using a finite state machine. The README says it tracks turn-by-turn signals like flattery density, give/ask ratio, escalation velocity, and scope mismatch, and exposes a simple `Xtra().analyze(turns)` usage example.

Giskard presents an AI red-teaming and continuous evaluation platform focused on finding hallucinations, security issues, and agent vulnerabilities. The page explains how it compares tools for agent-level testing, regression checks, and guardrail workflows.

Docker blog post about a real AI coding agent failure and how Docker Sandboxes aim to contain destructive execution mistakes.