What can your AI agent do to the real world? Scan your code. See which tool calls have zero checks

Deterministic pre-execution gate for AI agents (fail-closed, YAML policy)

Open specification for pre-execution AI action authorization records

Core execution boundary engine (decision + proof + ledger)

A production-grade pre-execution authority layer that binds AI agent identity to deterministic state. Standard IdPs (Entra ID, Okta, OIDC) issue passport to your Agent, predicate-authority issues/revokes "work permit" to your Agent based on intent & state

Transport-layer application profile for Execution Boundary Core Spec.

The effect layer for AI-agent firewalls — simulate an action, get a canonical effect delta. Zero-dep, deterministic, fail-closed. 5 domains (fs, sql, shell, http, solana).

Execution-boundary gate interface. Contamination cases. Adversarial suite. Admissibility at execution time.