Havuz

Tamper-evident tracing, policy gates and cross-checks for AI agents: see what the agent did, and why.

The open-source governance layer for AI agents: write the rules declaratively, Bernstein enforces them and produces the verifiable, replayab

Self-hosted AI API and MCP gateway for organizations: SSO and RBAC, per-user identity for MCP tool calls, PII redaction and tool-call guards

Your AI forgets every session. Give it a memory it can trust: local-first, review-gated agent memory — one SQLite vault for DSH, Claude Code

Micro-VM sandbox for AI agents: isolated, gated and auditable, to prove what your agents did

Halofy, organizasyonel bilgiyi AI agents ile paylasirken identity, access control, provenance ve audit kurallarini tek bir katmanda yoneten bir yazilimdir.

Neden yükseliyor · 36 gunde 335 yildiz, projeye erken ilgi oldugunu gosteriyor; ancak ilginin nedenini olcumlerden belirlemek mumkun degil. Son 28 gunde commit ve farkli yazar sayisi sifir oldugundan, bu ilgi guncel gelistirme temposuyla desteklenmiyor.

Compartment is a self-hosted deployment system for small software on infrastructure your team controls.

Audit trail database for AI agents. Tamper-evident, checksum-backed decision logs with session replay and time-travel debugging to support E

An AI that administers Linux through typed, approval-gated, Ed25519-audited actions. The model selects the action; the daemon builds the com

The network layer for AI agents. Reach your customers' on-prem data, show what you build, keep it running — through one relay that your mac

Tamper-evident audit trails for AI agents: hash-chained Runtime Records, dependency-free, verifiable by anyone.

A local control plane for AI agents — see what they do, approve what matters, keep secrets out. Rust + Tauri + Chrome MV3.

Laravel audit log & change history with real actor attribution (user / job / command / scheduler), cross-model change traces, time machine,

A git-native, review-gated knowledge base for AI agents: they propose writes, you approve them. Every claim cites a source, every change is

Get Claude Code and other AI agents approved for use at work — deterministic guardrails on every tool call, tamper-evident audit logs, and a

An unattended maintainer for one repository. It reviews, files, prunes, and merges only against proof that a guard bites.

Tailscale MCP server for managing your tailnet from AI assistants

The gate between an AI agent and real money. Runtime authorization for financial AI agents: structured intent, deterministic policy, human a

Local-first MCP policy proxy. Tool-block, SQL-mutation gate, PII redact, audit, rate-limit, OpenTelemetry, vault secrets, first-use quaranti

Run SQL on production databases with approval and a full audit. Users submit from Slack or a web IDE, and a DBA approves. QueryHub runs the

Agents you can inspect, replay and trust. An agent framework for TypeScript and Python, built on an append-only event log.

The execution safety layer for AI agents.

The identity provider for AI agents — registry, scoped delegation, in-path MCP enforcement, instant revocation, tamper-evident audit.

Open-source governance infrastructure for AI-assisted legal work

Proxmox VE 8.x/9.x 自托管管理面板：虚拟机与 LXC 容器全生命周期、cloud-init 模板流水线、 监控大盘、VNC/串口控制台、多角色权限与操作审计；另含 AI 排查助手（会话式归因、要改系统的 命令逐条批准、Token 用量统计）、SSH 防暴力破解、

Deterministic, local-only audit reports for Claude Code AI agent sessions. Rust + SQLite. Zero network calls. MCP server for agents.

TypeScript SDK for the NitroPing audit log — batching client, error capture, Hono/Express/Nitro adapters, and GenAI cost tracing.

Governed Postgres access for AI assistants: an MCP gateway with OAuth 2.1 and OIDC login, one Postgres role per person, database-enforced re

A police department for your Claude Code agents — a logging-only hook + CLI that audits the main agent and every subagent and reports rule o

Self-hosted counter-surveillance for the networks you control: map device and network exposure, verify trusted routes, and hold sensitive ac

Open-source AI agent identity & compliance platform — X.509 certificates via AWS KMS, behavioral risk scoring, auto-revocation, and MiCA / E

AI agents should not make irreversible changes. TraceFold escrows the inverse before an effect lands, or refuses it, and issues receipts any

Open-source security for AI coding agents: record, detect and block at the tool boundary, with a verifiable audit trail in the SIEM you alre

SHACKLE — a governance protocol and policy-decision daemon for autonomous AI agents. Enforces guardrails, budget/loop limits, and policy con

Secure, auditable agent-to-agent communication framework

Agents propose. People approve. Change control for AI agents: everyday work runs on its own, anything an agent can't take back waits for a t

Open source control-plane proxy for AI agents: identity, policy, budget, audit for MCP and beyond

MCP server for Claude Desktop and other Model Context Protocol clients — sandboxed filesystem access (read/write/edit/search) plus Dev Mode-

Stateless governance proxy for MCP (2026-07-28): policy, dry-run, human confirmation, audit, tracing

Self-hosted database access-control proxy for MySQL and PostgreSQL: lineage-aware column masking, Cedar policy, fail-closed deny, tamper-evi

Deterministic authorization + tamper-evident audit for AI agents, humans, and workloads — one principal type, safety invariants machine-chec