capabilities

This repository contains the CHERI extension specification, adding hardware capabilities to RISC-V ISA to enable fine-grained memory protection and scalable compartmentalization.

Not another agent orchestrator — ORCA is a runtime for executable cognition.

Packages for CloudABI

Open-source textbook about CHERI capabilities, for a developer audience

Public source of the Dreadnode capabilities in app.dreadnode.io — agents, tools, skills, MCP servers, and workers.

Least Authority S4

A tool for analyzing Android malware source code capabilities

Agents should execute whenever possible — open registry of reusable AI agent skills and capability definitions

Open semantic language and registry for describing capabilities (YAML grammar + catalogs)

Sample framework with python, appium and pytest, using CI GitHub Actions and Poetry, dynaconf

helper to guess required linux capabilities for pods in your Kubernetes cluster

Verified Agent Capabilities Marketplace — MCP-first trust + policy + execution layer for agents

Actenon-Permit: an open-source authority broker for AI agents. Bounded, revocable capability grants with hard runtime limits, human-in-the-loop approvals, kill switch, and a tamper-evident action ledger.

A security-oriented programming language that enforces memory safety, information-flow, constant-time, and capability guarantees from one type discipline — with noninterference machine-checked in Lean 4.

Python SDK for the Disentangle Protocol RPC API

A deny-by-default capability linter for Python. A one-screen policy says what the code may do; the check fails on anything else. Separates capability from vulnerability, and import-time from call-time.

Python bindings for Linux capabilities

A small dependently-typed language whose type system enforces ten safety and security guarantees at compile time.

The features schema for the API Commons — a machine-readable way to publish what an API can do.

Splice-proof, offline-attenuating delegation credentials for AI-agent chains. Ed25519 + canonical CBOR, offline-verifiable. Pre-audit reference implementation.