Default-deny local execution and model-runner boundary for broker workflows, with bounded JSON results, resource controls, model verification and JSONL streaming.
-
Updated
Jul 26, 2026 - Python
Default-deny local execution and model-runner boundary for broker workflows, with bounded JSON results, resource controls, model verification and JSONL streaming.
The SQL firewall for AI agents: a default-deny sidecar / MCP enforcement point that governs what an AI agent runs against your database. Open core, AGPL-3.0.
Governance controls for edge AI that either fire, or do not. A signed model card is checked before the model loads, every actuation is refused unless a rule allows it, the stop channel starts engaged and needs a named operator, and the journal names the entry where it was altered.
ZDOS Lab: source-first forge for ZDOS and Zlang contracts, evidence, gates, and portable release bundles.
To associate your repository with the default-deny topic, visit your repo's landing page and select "manage topics."