Rul1an

Rul1an/assay

Policy-as-code for MCP agents: deny risky tool calls before they run, prove what ran with verifiable evidence, and enforce egress in the kernel (eBPF/LSM, Linux). Deterministic, offline-first, bounded claims.

10 stars 1 forks 10 watchers Rust MIT License
agent-security ai-agents ai-security ci cyclonedx ebpf evidence-bundles github-actions llm-security mcp mcp-security mcp-server openfeature policy-as-code policy-enforcement promptfoo provenance rust sbom supply-chain-security
View on GitHub Website
1 Open Issue Need Help Last updated: Jul 26, 2026

Open Issues Need Help

View All on GitHub
Independent reproduction wanted: privileged-mcp-action/v0 conformance corpus about 2 hours ago
help wanted
Rul1an/assay
10

Policy-as-code for MCP agents: deny risky tool calls before they run, prove what ran with verifiable evidence, and enforce egress in the kernel (eBPF/LSM, Linux). Deterministic, offline-first, bounded claims.

Rust
#agent-security#ai-agents#ai-security#ci#cyclonedx#ebpf#evidence-bundles#github-actions#llm-security#mcp#mcp-security#mcp-server#openfeature#policy-as-code#policy-enforcement#promptfoo#provenance#rust#sbom#supply-chain-security