Havuz

Smriti (स्मृति): private, local-first agentic RAG with System 1 + System 2 thinking over your notes, books and documents. Guardrails, tracin

Fast, deterministic verifier and gate for AI agents: exact math, claim and citation checks, shell/write policy, hash-chained step ledger and

Hook-driven multi-agent CLI — one prompt to specs, code, tests, and a shipped release.

Self-hosted PII redaction proxy for LLM APIs and agent CLIs. Scrubs names, emails and secrets from Claude Code, Codex and any OpenAI-compati

Knowledge-enhanced multimodal Fire Safety Agent with two-hop reasoning, evidence-tree RAG, open-set guardrails, and four-layer memory.

A lightweight, zero-dependency Python checkpoint layer for structured LLM output reliability.

Agentic Runtime

Brakes for the software factory: deterministic checks, a fresh-context reviewer that commits its fixes, and one-way-door triage for coding a

Fable-style spec + evidence gate for Claude Code + Codex. Makes Opus/Codex work under Fable-like discipline: blocks every edit until a deter

The gate between an AI agent and real money. Runtime authorization for financial AI agents: structured intent, deterministic policy, human a

Coding-agent tools on TypeSafe's Jev, measured in public. review-router: caught 13 of 13 CVE fixes a filename rule sent to a quick review. j

Offline prompt-contract auditor for Hermes, Claude Code, Codex, OpenCode & OpenClaw. Pre-write guard before agents ship vague code. Zero dep

When Claude says “tests pass”, makoto checks the record — every claim held against the agent's own logged deeds; fakes blocked, not warned.

Code samples for building AI applications on AWS with Amazon Bedrock, including Converse API, tool use, RAG with Knowledge Bases, guardrails

Open source authorization engine for AI agents. Confidence-aware gating · Human-in-the-loop review · Policy-as-code · Full audit trail

x402 risk-check provider: signed pre-payment verdicts — OFAC, phishing feeds, transaction simulation, drainer-kit code, and our own EIP-7702

Screens an AI agent's tool calls before they run and tool results before the agent reads them. An MCP proxy plus a hooks adapter for a clien

Stateless governance proxy for MCP (2026-07-28): policy, dry-run, human confirmation, audit, tracing

Auto-permission engine for Antigravity CLI (agy): deterministic AST parser + LLM classifier

Runtime constraints for the pi coding agent: checks every side-effecting tool call against what you said, before it runs. Powered by TypeSaf

Get Claude Code and other AI agents approved for use at work — deterministic guardrails on every tool call, tamper-evident audit logs, and a

Six skills tell coding agents how to work. Two guards enforce the parts that should not depend on judgment.

Agent observability and guardrails for OpenClaw — risk scoring, audit trails, dashboard.

Privacy and security guardrails for Spring AI: request-scoped PII tokenization, least-privilege disclosure to tools, and tool authorization

Clyro is a governance platform for AI agents. While most tools let you watch agents fail, Clyro stops failures before they happen, catching

Python SDK for LLM guardrails with safety classification, PII detection, prompt injection defense, and grounding checks. Protect AI applicat

AI Firewall & LLM security toolkit - protect your AI applications from prompt injection, jailbreaks, PII leakage, and adversarial attacks

Public SDKs and integration contracts for Armorer Guard.

Workflow-agnostic guardrails for AI coding agents: spec sync + risk-triggered engineering discipline for Claude Code and Codex.

Zero-dependency guardrail framework for AI agents. Stops runaway loops, prompt injection, hallucination and unsafe tool calls before they ex

Guardrails for AI coding agents — block catastrophic tool calls before they run. Semantic, agent-neutral, near-zero false positives.

Open-source control plane for private, governed enterprise AI — one gateway for every model, composable governed pipelines, and apps your wh

Framework-neutral control contract for AI agents: eight interception points, three verdicts, and a conformance kit.

Local-first MCP policy proxy. Tool-block, SQL-mutation gate, PII redact, audit, rate-limit, OpenTelemetry, vault secrets, first-use quaranti

Guard rails for Claude Code: workspace boundaries, protected branches, production targets, lost exit status, and foreground time.

Safe runtime for Claude Code, built to be yours.

Lightweight RAG provenance middleware. Verifies every claim in an LLM response is grounded in a retrieved source - without an LLM call.

Make your specs actually comprehensive. Pair your specs with tests to make your coding agent stop improvising bad code

Streaming privacy for LLM apps: pii-leak-benchmark (does your gateway leak PII in streams?), chunk-invariance (one-line test for split-bound

An MCP server that lets AI agents operate a multi-cluster Kubernetes fleet through an Open Cluster Management hub, with policy, approval, an

Validate and retry LLM outputs for ruby_llm. Describe the JSON response you expect, fall back to a stronger model when the cheaper one fails

AI makes users productive — but also cognitively lazy. Lucid detects cognitive dependency in real-time and adapts AI responses to keep users

Guardrails para desenvolver com agentes de IA: gate de CI bloqueante, hooks determinísticos, supply chain travada e fluxo de task com evidên

🛡️ Runtime guardrails for AI agents. Intercept and block unsafe tool calls caused by prompt injection.

a DSL for automated deterministic rules. Built for AI agents and quantitative Trading systems.

Guardian Runtime sits securely on your machine, acting as a bodyguard for your code. Whenever you use AI tools like Cursor or Claude Code, i

Lightweight, agent-friendly AI security toolkit for Node.js & TypeScript. Check if your agent has loaded the skill, Stop prompt injection, a

Real-time guardrail runtime for AI agents.

SHACKLE — a governance protocol and policy-decision daemon for autonomous AI agents. Enforces guardrails, budget/loop limits, and policy con

Open-source AI gateway for LLM and agent traffic — multi-provider routing, guardrails, semantic caching and MCP support. Written in Go.