InnerWarden

InnerWarden/innerwarden

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

100 good first / help-wanted issues · Rust · last activity Jul 5, 2026

162 stars 31 forks 162 watchers Rust Apache License 2.0

agent-guard ai-agent-security anomaly-detection autonomous-defense behavioral-analysis correlation-engine ebpf honeypot host-security incident-response intrusion-detection kernel kill-chain linux mitre-attack rust security sigma-rules threat-detection yara

View on GitHub Website

100 Open Issues Need Help Last updated: Jul 5, 2026

Open Issues Need Help

View All on GitHub

test(agent): cover knowledge-graph recon detectors (recon.rs) 4 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(agent): cover knowledge-graph persistence detectors (persistence.rs) 4 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(agent): cover SSH posture parsing in posture/sshd.rs 4 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

Add 'Run InnerWarden under Podman' install guide (docs) 4 months ago

documentation help wanted good first issue

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(ctl): cover suspicious-crontab detection in harden/crontabs.rs 4 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(agent): cover sudo posture parsing in posture/sudo.rs 4 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(sensor): cover JsonlWriter file output and guard branches 4 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

Implement dashboard 2FA approval endpoints 4 months ago

enhancement help wanted

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

How to uninstall 4 months ago

enhancement help wanted

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

Make dashboard configuration to enable all ips by default 4 months ago

enhancement help wanted

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

spec: AI budget as $-per-day cap with tiered fallback (replace max_ai_calls_per_tick) 4 months ago

enhancement help wanted

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/agent/src/abuseipdb.rs above 70% 5 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

Add n8n integration recipe for Agent Guard API 5 months ago

documentation good first issue

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(agent): cover honeypot_post_session pure-parser helpers 5 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

Add executable entropy analyzer for packed/obfuscated malware detection 5 months ago

enhancement help wanted good first issue

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(agent): cover Ollama provider HTTP response branches 5 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(agent-guard): cover session tracker boundary alerts 5 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(agent): cover block-container metadata cleanup paths 5 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(smm): cover SPI hash_image and readiness contracts 5 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(agent): make XDP availability diagnosis deterministic 5 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(dna): wire ingest.rs into coverage and anchor JSONL offset reads 5 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(sensor): extract testable systemd inventory scan planning 5 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(sensor): cover syslog_firewall file polling without an infinite loop 5 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(sensor): cover journald collector command and cursor branches 5 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

Add Splunk HTTP Event Collector (HEC) sink 5 months ago

enhancement help wanted stale

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

Add Sigma rule: AWS instance metadata access (169.254.169.254) from non-root user 5 months ago

enhancement help wanted good first issue

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(agent): anchor ss-dump parsers in posture/services.rs 5 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(agent): anchor pure helpers in abuseipdb.rs (detector_to_categories, resolve_api_key) 5 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/agent/src/webhook.rs above 70% 5 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/ctl/src/commands/reconcile.rs above 70% 5 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/smm/src/baseline.rs above 70% 5 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/agent/src/incident_notifications.rs above 70% 5 months ago

help wanted test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/sensor/src/detectors/yara_scan.rs above 70% 5 months ago

help wanted test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/agent/src/skills/builtin/kill_process.rs above 70% 5 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/sensor/src/collectors/systemd_inventory.rs above 70% 5 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/agent/src/posture/firewall.rs above 70% 5 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/smm/src/microcode.rs above 70% 5 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/sensor/src/sinks/syslog_cef.rs above 70% 5 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/sensor/src/collectors/tcp_stream.rs above 70% 5 months ago

help wanted test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/sensor/src/collectors/proc_maps.rs above 70% 5 months ago

help wanted test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/sensor/src/collectors/usb_monitor.rs above 70% 5 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/agent/src/dashboard/push.rs above 70% 5 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/agent/src/geoip.rs above 70% 5 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/agent/src/skills/builtin/block_container.rs above 70% 5 months ago

help wanted test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/ctl/src/commands/chain_break.rs above 70% 5 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/agent/src/skills/builtin/rate_limit_nginx.rs above 70% 5 months ago

help wanted test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/ctl/src/welcome.rs above 70% 5 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/ctl/src/capabilities/shell_audit.rs above 70% 5 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/sensor/src/collectors/macos_log.rs above 70% 5 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/agent/src/bot_commands.rs above 70% 5 months ago

help wanted test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/agent/src/firmware_tick.rs above 70% 5 months ago

help wanted test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/agent/src/hypervisor_tick.rs above 70% 5 months ago

help wanted test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/sensor/src/detectors/data_encoding.rs above 70% 5 months ago

help wanted test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/smm/src/kintegrity.rs above 70% 5 months ago

help wanted test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/sensor/src/collectors/docker.rs above 70% 5 months ago

help wanted test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/sensor/src/detectors/stego_detect.rs above 70% 5 months ago

help wanted test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/agent/src/dashboard/compliance.rs above 70% 5 months ago

help wanted test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/agent/src/bot_actions.rs above 70% 5 months ago

help wanted test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/agent/src/dna_inline.rs above 70% 5 months ago

help wanted test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/agent/src/ai/anthropic.rs above 70% 5 months ago

help wanted test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/agent/src/crowdsec.rs above 70% 5 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/agent/src/skills/builtin/suspend_user_sudo.rs above 70% 5 months ago

help wanted test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/agent/src/dashboard/auth.rs above 70% 5 months ago

help wanted test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/agent/src/dashboard/sensors.rs above 70% 5 months ago

help wanted test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/agent/src/correlation_response.rs above 70% 5 months ago

help wanted test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/ctl/src/main.rs above 70% 5 months ago

help wanted test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/agent/src/skills/builtin/kill_chain_response.rs above 70% 5 months ago

help wanted test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/agent/src/dashboard/intelligence.rs above 70% 5 months ago

help wanted test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/agent/src/honeypot_post_session.rs above 70% 5 months ago

help wanted test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/hypervisor/src/main.rs above 70% 5 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/agent/src/main.rs above 70% 5 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/smm/src/main.rs above 70% 5 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/sensor/src/main.rs above 70% 5 months ago

help wanted test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/supervisor/src/main.rs above 70% 5 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/sensor/src/bin/test-ebpf.rs above 70% 5 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/sensor-ebpf-types/src/lib.rs above 70% 5 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

Add --output {text,json} flag to 'innerwarden status' for scriptability 6 months ago

enhancement help wanted good first issue

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

Honor INNERWARDEN_NO_COLOR env var in CTL output (parity with NO_COLOR) 6 months ago

enhancement help wanted good first issue

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

Add 8+ scanner User-Agent signatures to user_agent_scanner.rs 6 months ago

enhancement help wanted good first issue

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(sensor): extend sandbox_evasion detector coverage 6 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(agent): cover knowledge_graph/types.rs accessors + conversions 6 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(sensor): cover usb_monitor.rs event classification 6 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(sensor): cover collectors/systemd_inventory.rs parsing 6 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(sensor): cover proto_smb collector classification 6 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(agent): cover dashboard/sse.rs file-watcher + stream handler 6 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(agent): cover narrative_autofp.rs threshold + cooldown logic 6 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(agent): cover incident_auto_rules.rs rule matching 6 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(agent): cover trust_rules.rs persistence + matching 6 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(agent): cover telegram/commands.rs /add /rm /fp bot commands 6 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(sensor): integration harness for CAP_NET_RAW + CAP_BPF collectors (dns, http, tls, ebpf) 6 months ago

enhancement help wanted test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(agent): cover telegram templates, commands, and burst dedup 6 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(ctl): raise commands/setup.rs coverage to 80% (likely 2+ PRs) 6 months ago

help wanted test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(ctl): raise commands/ops.rs coverage to 80% (must split; needs refactor) 6 months ago

help wanted test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(ctl): raise commands/notify.rs coverage to 80% (likely 2-3 PRs) 6 months ago

help wanted test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(ctl): raise commands/integrations.rs coverage to 80% 6 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(ctl): extend commands/capability.rs coverage (follow-up to #141) 6 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(ctl): raise commands/update.rs coverage to 80% 6 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(ctl): raise commands/responder.rs coverage to 80% 6 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(ctl): raise commands/mesh.rs coverage to 80% 6 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(ctl): raise commands/firmware.rs coverage to 80% 6 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara