Default-deny execution gate for AI agents, APIs, and distributed systems. Policies, drift detection, hard invariants, post-quantum signed permits.Written in Rust. Says no unless policy says yes.
-
Updated
Jul 13, 2026 - Rust
#
default-deny
Here are 17 public repositories matching this topic...
AXIOM Mesh 0.12.0-dev.3: local-first, fail-closed coordination substrate for human and machine principals, with policy-bound execution, cryptographic evidence, constrained-machine discovery and receipts, and governed runtime boundaries. No live deployment or production promotion claimed.
nodejs security progressive-web-app audit-log policy-engine ai-agents zero-trust secrets-management mtls causal-consistency local-first capability-security network-segmentation production-readiness fail-closed explainable-systems cryptographic-evidence default-deny authenticated-capabilities
-
Updated
Sep 23, 2026 - JavaScript
The firewall for AI agents. Default-deny action broker with tap-to-approve on Telegram/WhatsApp and a tamper-evident audit log - for OpenClaw, Hermes, and friends.
security typescript ai firewall ai-safety human-in-the-loop ai-agents llm prompt-injection llm-security agent-security openclaw default-deny
-
Updated
Aug 23, 2026 - TypeScript
Security-first programming language for building high-assurance services, secure communications, privacy-aware networking tools, policy-enforced runtimes, secret-safe data pipelines, and auditable least-authority systems.
programming-language rust cryptography sandboxing memory-safety formal-methods systems-programming privacy-preserving policy-enforcement effect-system capability-security supply-chain-security proof-carrying-code auditability runtime-assurance secure-by-construction default-deny security-language least-authority secret-tracking
-
Updated
May 25, 2026 - Rust
The official "kavach" skill repository
-
Updated
Jul 13, 2026 - JavaScript
Destination-aware, default-deny egress control for AI coding agents, at the tool-dispatch layer across Claude Code and Codex from one shared policy.
hooks mcp egress-filtering codex ai-safety data-exfiltration security-tools devsecops ai-agents prompt-injection llm-security model-context-protocol agent-security claude-code default-deny
-
Updated
Jul 3, 2026 - Shell
Classify every column or fail the build — a runtime registry cannot see the module that forgot to register.
-
Updated
Sep 7, 2026 - TypeScript
Default-deny local execution and model-runner boundary for broker workflows, with bounded JSON results, resource controls, model verification and JSONL streaming.
python security streaming sandbox jsonl least-privilege resource-limits model-runner llm local-ai safe-execution default-deny
-
Updated
Jul 26, 2026 - Python
Open default-deny policy and protocol foundation for securing AI-agent capabilities.
-
Updated
Sep 10, 2026 - JavaScript
Default-deny outbound filter
-
Updated
Sep 11, 2026
Security-first AI artifact registry — digest-based storage, policy-gated promotion, signed provenance, and reproducible trust metadata for local models, adapters, and tokenizers
golang ai-safety audit-logging model-registry trust-model artifact-lifecycle integrity-verification llm-security default-deny policy-gated-promotion
-
Updated
Aug 3, 2026 - Go
The SQL firewall for AI agents: a default-deny sidecar / MCP enforcement point that governs what an AI agent runs against your database. Open core, AGPL-3.0.
python sql mcp ai-agents ai-security database-security llm-security agent-security default-deny sql-firewall
-
Updated
Jul 16, 2026 - Python
Governance controls for edge AI that either fire, or do not. A signed model card is checked before the model loads, every actuation is refused unless a rule allows it, the stop channel starts engaged and needs a named operator, and the journal names the entry where it was altered.
arduino policy-engine audit-trail tamper-evident edge-ai model-cards ai-governance eu-ai-act nist-ai-rmf iso-42001 human-oversight default-deny glossolalie-advisory
-
Updated
Aug 30, 2026 - Python
Default-deny policy gateway for LLM/agent tool calls. Rate limiting, path validation, argument filtering, audit logging.
golang mcp rate-limiting ai-safety policy-engine audit-logging llm-security agent-safety tool-firewall default-deny
-
Updated
Sep 8, 2026 - Go
Settlement-rail enforcement for DORA-compliant payment infrastructure. Companion to hsm + gatekeeper.
java spring-boot signature-verification dora central-bank settlement-layer default-deny financial-supervision hsm-attestation rix-inst pacs-008 data-minimisation
-
Updated
Sep 2, 2026 - Java
ZDOS Lab: source-first forge for ZDOS and Zlang contracts, evidence, gates, and portable release bundles.
-
Updated
Sep 1, 2026 - Python
Governed execution kernel for AI agents. Default-deny policy, bounded capabilities, typed execution, transactional Git. Evidence over claims.
-
Updated
Aug 27, 2026 - Rust
Add this topic to your repo
To associate your repository with the default-deny topic, visit your repo's landing page and select "manage topics."