AI agent firewall that intercepts tool calls (file, shell, network) and enforces deterministic policies at sub-microsecond latency using CEL, IFC, secret scanning, and audit logging.
Greywall | See everything your AI coding agent does
Prefix any AI coding agent with `greywall --` for a live feed of every read, write, and connection. Allow by default; ask mode and deny rules opt-in via config. Linux and macOS.
CrabTrap: Secure Agents in Production
CrabTrap is an LLM-as-a-judge HTTP proxy to secure agents in production. It intercepts and audits AI agent requests in real time. Try it on GitHub now.
Introducing the Agent Governance Toolkit: Open-source runtime security for AI agents | Microsoft Open Source Blog
Discover how the Microsoft Agent Governance Toolkit brings policy, identity, and reliability to autonomous AI agent systems.
Declarative Server with NixOS: A Reproducible Infrastructure | Mustafa Erbay
A technical guide exploring how to create a declarative server configuration with NixOS, covering reproducibility and rollback processes.
agentOS — A faster, lighter, cheaper alternative to sandboxes
A portable open-source operating system for agents. Stateful runtime, universal agent interface, and secure code execution. One SDK, deploy anywhere.
Linux Foundation Welcomes TRACE to Advance Verifiable Runtime Evidence for AI Workloads
The Linux Foundation introduces TRACE, a new open standard for verifiable evidence in AI workloads, ensuring portable and trustworthy governance across platforms.
.png)
FOSDEM 2025 - Goblins: The framework for your next project!
Building peer-to-peer decentralised applications remains difficult and error-prone. Most attempts at this either abandon collaborative features entirely or fall back on centralised architectures. The Spritely Institute is working on this challenge by creating (among other things) Goblins, a Guile framework that makes secure, fault-tolerant peer-to-peer applications accessible to developers. These tools are especially valuable for developers building secure collaborative applications that aim to foster healthy online communities. This talk walks you through Goblins’ most powerful features, including the actor model, object capability security, networking, time travel debugging, and persistence.
39C3 - Agentic ProbLLMs: Exploiting AI Computer-Use and Coding Agents
trace-spec/ROADMAP.md at 738358dfac58047eaf689ca824f9e15008aabf36 · agentrust-io/trace-spec
TRACE: Trust Runtime Attestation and Compliance Evidence. Open attestation standard for agentic AI governance. - agentrust-io/trace-spec
Introducing eve
Introducing eve, the open-source agent framework from Vercel for building, running, and scaling agents in production, with durable execution, sandboxed compute, approvals, channels, tracing, and evals built in.
cua/blog/inside-macos-window-internals.md at main · trycua/cua
Open-source infrastructure for Computer-Use Agents. Sandboxes, SDKs, and benchmarks to train and evaluate AI agents that can control full desktops (macOS, Linux, Windows). - trycua/cua
Runtime Governance for AI Agents: Policies on Paths
AI agents -- systems that plan, reason, and act using large language models -- produce non-deterministic, path-dependent behavior that cannot be fully governed at design time, where with governed we mean striking the right balance between as high as possible successful task completion rate and the legal, data-breach, reputational and other costs associated with running agents. We argue that the execution path is the central object for effective runtime governance and formalize compliance policies as deterministic functions mapping agent identity, partial path, proposed next action, and organizational state to a policy violation probability. We show that prompt-level instructions (and "system prompts"), and static access control are special cases of this framework: the former shape the distribution over paths without actually evaluating them; the latter evaluates deterministic policies that ignore the path (i.e., these can only account for a specific subset of all possible paths). In our view, runtime evaluation is the general case, and it is necessary for any path-dependent policy. We develop the formal framework for analyzing AI agent governance, present concrete policy examples (inspired by the AI act), discuss a reference implementation, and identify open problems including risk calibration and the limits of enforced compliance.
The Trust Fabric: Decentralized Interoperability and Economic Coordination for the Agentic Web
The fragmentation of AI agent ecosystems has created urgent demands for interoperability, trust, and economic coordination that current protocols (MCP Hou et al. (2025); Desai (2025), A2A Habler et al. (2025), ACP Liu et al. (2025), and Cisco’s AGP Edwards (2025)) cannot address at scale. We present the Nanda Unified Architecture, a decentralized framework built around three core innovations: fast DID-based agent discovery through distributed registries enables efficient lookup across decentralized networks, while semantic agent cards with verifiable credentials and composability profiles provide rich, machine-readable descriptions of capabilities. At the heart of the system, a dynamic trust layer integrates behavioral attestations with policy compliance mechanisms to create verifiable reputation signals. The architecture introduces X42/H42 micropayments for economic coordination and MAESTRO, a comprehensive security framework incorporating Synergetics’ patented AgentTalk protocol (US 12,244,584 B1) and secure containerization. Real-world implementations demonstrate 99.9% compliance in healthcare applications and significant monthly transaction volumes while maintaining strong privacy guarantees. Our federated registry system enables efficient agent discovery while supporting high-performance autonomous systems. By unifying MIT’s trust research with production systems from Cisco’s Agency Framework and Synergetics’ commercial deployments, we demonstrate how cryptographic proofs and policy-as-code transform agents into trust-anchored participants in a decentralized economy Lakshmanan (2025); Sha (2025). The result enables a globally interoperable Internet of Agents where trust becomes the native currency of collaboration across both enterprise and Web3 ecosystems.
AI #163: Mythos Quest
There exists an AI model, Claude Mythos, that has discovered critical safety vulnerabilities in every major operating system and browser.
Top AI Security Incidents of 2025 Revealed | Adversa AI
Discover how AI systems are being hacked in the wild — from prompt injection to agent abuse — with real breaches, lessons, and defenses in Adversa AI’s 2025 report.
