Havuz

Intent-bound action authorization for AI agents — deterministic, per-action approval a prompt injection can't re-point, with a signed, tampe

DeepSeek Harness (DSH) plugin: a read-only ledger for the plugins you already have installed — a capability inventory with file:line evidenc

Deterministic, local-only audit reports for Claude Code AI agent sessions. Rust + SQLite. Zero network calls. MCP server for agents.

Permanent code intelligence layer. Learns what matters, expires what changed, proves what existed. Content-addressed graph with Merkle proof

Open-source Supabase security auditor: detects RLS-disabled tables, public buckets, exposed SECURITY DEFINER functions. Active anonymous pro

Provena : Context governance for agentic AI — tamper-evident audit trails, provenance validation, EU AI Act compliance. 6 framework adapters

Heuristic Solidity/DeFi security review toolkit — flags suspicious patterns to review, backed by Foundry scenarios. Educational / authorized

An agents skill for auditing Ruby on Rails applications, identifying security issues, code quality problems, and common misconfigurations.

A self-correcting system of nested engineering loops: plan & execute repo work; safely implement audit findings; design greenfield & improve

Upkeep — an AI audit crew for your repo. Catches docs/spec/asset drift with evidence; output-only. Claude Code plugin/skill + reusable CI wo

eBPF Prometheus exporter for AI-agent activity — per-agent tools, domains, ports, files, CPU & network — with a Grafana dashboard. A yeet se

Live audit log of every command, file, and network connection a Claude Code (or any matched) session makes, from the kernel.

Paste the text you would put in an AI bot's profile. Get back what is already there and the lines that are missing.

CLI, MCP server, and Skill for safe local Codex session audit, cleanup, restore, and verification.

Open-source verifiable audit infrastructure. Built for lean, pre-series B, AWS-Native teams.

Deterministic authorization + tamper-evident audit for AI agents, humans, and workloads — one principal type, safety invariants machine-chec

Deterministic symbolic codes for embedding vectors. Byte-identical across CPUs and languages, content-addressed, diffable and verifiable. C

Reproducible artifact manifests, sandbox-output verification, and evidence-bundle validation for artifact-heavy workflows.

Bounded, layered, approval-gated, auditable cross-session memory for DeepSeek Harness: a ctx.memory capability seam with a zero-dependency S

Keep growing TypeScript codebases maintainable. Trellis measures complexity, duplication, and import cycles, pinpoints structural debt, and

Audit npm, Yarn, and pnpm lockFiles as both an MCP server and a CLI tool.