Repo · Safety & guardrails
agent-control-plane
Sharing what I'm building: ZIFFER, a deterministic authorization layer for AI agents.
Open github.com ↗From the repository
A credential is not authorisation. ACP moves the authorise/refuse decision for AI agent actions outside the model, where prompt injection cannot reach it. Specification, Dafny proofs, and a reference implementation — every claim replays locally.
access-controlagentic-aiai-agentsai-securityaudit-logauthorizationdafnyed25519formal-verificationhuman-in-the-loopllm-securitymcpmitre-atlasowasp-llm-top10post-quantum-cryptographyprompt-injectionsecurity-architecturethreat-model
How builders describe it
Sharing what I'm building: ZIFFER, a deterministic authorization layer for AI agents. The model proposes an action, ZIFFER decides at the tool-execution boundary. Policy-as-code in git, signed decisions, full audit trail. Model-agnostic, so it sits next to any LLM, including Jev once I'm off the…
The decision Jev makes
Allow, flag or escalate a message, tool call or action.
Where it fits
Screening messages, tool calls and outputs before they cause trouble. Jev gives a fast, calibrated verdict that can sit in front of every request or agent action. All 229 safety & guardrails projects →
Related projects
Safety & guardrailssnapifRust crate and CLI that scores one agent tool call against a shipped policy and returns Auto, Review or Escalate, using TypeSafe Jev…GitHub · ★ 2 · snapif
Safety & guardrailsjev-sec.github.ioJev IDS website: one flow.GitHub · ★ 2 · jev-sec
Safety & guardrailsclaudetiquetteClaude Code plugin that rewrites a hostile prompt into a plain request.GitHub · ★ 2 · zahlekhan
Safety & guardrailsdsh-backdoor-guardGuard for DeepSeek Harness: every model-requested tool call is judged by a decision model, hosted TypeSafe Jev or a self-hosted LiquidAI d1, before…GitHub · miketako3
Safety & guardrailsopencode-auto-classifierOpenCode plugin that sends each shell command, file read, and edit to TypeSafe Jev for typed classifications, then folds those answers into…GitHub · schemaitat
Safety & guardrailspi-thunder-guardSafety guard for Pi: before each bash call (and writes outside the repo) TypeSafe Jev must be at least 85% sure the call keeps to a short restriction…GitHub · Mandalorian007