The home of the Cadence website
梁神按需模式 / LiangShen Lazy — DeepSeek Harness 的按需工具隔离 preset：默认极简，需要什么能力才临时开放什么，用完自动收回。A minimal-by-default, capability-on-demand agent preset for DeepSeek Harness.
Self-hosted AI workspace with capability-token security: local LLM chat, agents that modify code under owner approval, and a tamper-evident audit trail. Zero runtime dependencies, offline by default.
🛡️ WASI 0.2 security simulation: A data diode runtime that allows sensor reads but blocks network exfiltration. Built with Rust, Leptos, and the Component Model
Research preview of execution contracts for portable placement across client, edge, and server.
A pattern for implementing "insider" encapsulation (trusted/"friend"-only access) of properties and methods in native JavaScript using ES2022 private fields and explicit trust declarations.
An open-source research prototype of a Webpack plugin for isolating untrusted browser-side npm dependencies in per-library QuickJS WebAssembly sandboxes. It generates proxy modules, applies deny-by-default capability policies, mediates host interaction through membranes, and includes compatibility testing and browser security evaluations.
To associate your repository with the capability-based-security topic, visit your repo's landing page and select "manage topics."