🐊 Policy Controller for Kubernetes
-
Updated
May 4, 2026 - Go
🐊 Policy Controller for Kubernetes
AI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10.
The open agent control plane. Govern autonomous AI agents with pre-execution policy enforcement, approval gates, and audit trails. Works with LangChain, CrewAI, MCP, and any framework.
ClawLess — A serverless browser-based runtime for Claw AI Agents powered by WebContainers
Runtime policy enforcement for AI agents. Cryptographic audit trail, human-in-the-loop approvals, kill switch. Zero code changes.
API that leverages Clair to scan Docker Registries and Kubernetes Clusters for vulnerabilities
fct 0.1.2 — Rust compiler/runtime for FACET specification v2.1.3 (NADL)
The antivirus for OpenClaw — approve dangerous actions, scan skills, block secret leaks, and keep humans in control, for safety.
Governance gateway for AI agents — bounded, auditable, session-aware control with MCP proxy, shell proxy & HTTP API. Works with Cursor, Claude Code, Codex, and any MCP-compatible agent.
INTERCEPT / Policy as Code Auditing
Open Source Reliability Harness: Make your agents follow rules. One line of code to enforce, trace, and improve.
[DEPRECATED] Moved to microsoft/agent-governance-toolkit
Stop AI agents from doing things they shouldn't. The action authorization layer — pre-execution, deterministic, policies included. Drop in. Day one.
Open-source firewall for AI agents. Policy engine that audits and controls what OpenClaw, Claude Code, Cursor, Codex, and any AI tool can do on your machine.
RBAC/ABAC/ReBAC policy engine for Python with policy sets, condition DSL, and hot reload
Sandboxed Rhai script execution engine with Cedar policy authorization for every system operation.
Control every MCP tool call your agent makes. Set budgets, approvals, and hard limits across MCP servers. So your agent can do its job without breaking things. Open Source
The STAPL policy language for tree-structured, attribute-based access control policies
ReleaseGuard is an open-source artifact policy engine and hardening suite. It scans, transforms, obfuscates, attests, and verifies release artifacts before they ship across every build ecosystem.
Add a description, image, and links to the policy-engine topic page so that developers can more easily learn about it.
To associate your repository with the policy-engine topic, visit your repo's landing page and select "manage topics."