policy-gate

A policy-based security gate that blocks unsafe crypto transactions and auto-fires remediation playbooks with tamper-evident audit

Rust policy gate and JSON decision receipts for autonomous agent tool invocations.

WCP — Worker Class Protocol specification

NORNR Sentry local airbag for dangerous agent actions

SLSA/SBOM Evidence Bridge Layer connecting SBOM, provenance, artifact attestation, policy gate, and Ed25519 review evidence to the REMEDA/QSP verification rail.

Authorized CI/CD auto-pentest policy gate for GitHub Actions

TypeScript coding-agent runtime showcase with policy-gated tools, audit logging, secret redaction, fake/OpenAI-compatible providers, and plugin loading.

Paid remote MCP for AI agent safety replay checks, policy gates, eval receipts, control-fix suggestions, and release evidence exports.

Local deterministic CLI that checks proposed agent actions against approved scope and flags when human reapproval is required.

Local deterministic intake gate for instruction-bearing repo surfaces with explicit human acknowledgment before approval.

Fail-closed 'is this policy in force yet?' date gate for Go services (KST). Shared fleet library.

PyHall Python SDK — Python reference implementation of WCP (Worker Class Protocol)

Deterministic integrity gate over already-merged code: AST purity closures, file invariants, and a byte-level source-encoding scan. No model in the decision path. Report-only.

Portfolio extract of a production accounting-ops agent: closes the books over 10 typed MCP tools, auto-books only what a deterministic in-code policy gate proves safe, routes the rest to a human, prints a full audit trail. Every hazard branch is pinned by a stdlib check in CI.

Report-only pre-merge policy gate as a Claude Code skill — checks a diff against versioned rulesets and returns a PASS/WARN/FAIL verdict. Never edits code.

勞工自持雙簽憑證錢包＋三層 Policy Gate——讓 AI Agent 只能問到答案，拿不到資料。2026 可信 AI 黑客松 Track 05 × 06。