A solo founder open-sourced Gorgona, a Python guardrail engine that halts misbehaving autonomous agents in real time. It detects leaked API keys, cross-project context leaks, and recursive loops, and halts execution immediately on hard violations. Built from the author's own experience running coding and marketing agents without safeguards.
OpShield is an open-source Python platform that adds a safety layer around AI agents by intercepting every tool call. It classifies risk, blocks critical actions, enforces budgets, and enables rollback via state snapshots. It targets developers building agents with OpenAI, Anthropic, LangChain, CrewAI, or AutoGen who need guardrails and audit trails.
OpShield is an open-source Python platform that adds a safety layer around AI agents by intercepting every tool call. It classifies risk, blocks critical actions, enforces budgets, and enables rollback via state snapshots. It targets developers building agents with OpenAI, Anthropic, LangChain, CrewAI, or AutoGen who need guardrails and audit trails.
A developer open-sourced cogext-scan, a zero-dependency Python CLI that uses static AST parsing to flag failure modes in agent code before deployment. It was motivated by production incidents where agents reported success despite failing tools, such as a SendGrid wrapper returning "Email sent" on a 401 Unauthorized. The tool runs offline, requires no account, and outputs an Agent Safety Index score.
A developer open-sourced cogext-scan, a zero-dependency Python CLI that uses static AST parsing to flag failure modes in agent code before deployment. It was motivated by production incidents where agents reported success despite failing tools, such as a SendGrid wrapper returning "Email sent" on a 401 Unauthorized. The tool runs offline, requires no account, and outputs an Agent Safety Index score.
Scyvera is a runtime enforcer that gates what AI agents are allowed to do, via declarative contract files specifying permissions and side effects. It complements MCP and A2A protocols, which standardize agent communication but not authorization. It targets developers building agents who need to prevent unauthorized actions before execution.
Scyvera is a runtime enforcer that gates what AI agents are allowed to do, via declarative contract files specifying permissions and side effects. It complements MCP and A2A protocols, which standardize agent communication but not authorization. It targets developers building agents who need to prevent unauthorized actions before execution.
A new open-source static analysis tool called SafeAI has been released, designed specifically to analyze AI agent applications for risks related to prompts, tool permissions, agent capabilities, autonomy, memory, governance, and framework detection. The initial implementation was built in five days using OpenCode with GPT Codex 5.3, DeepSeek V4, and Kimi K3. The project is hosted on GitHub and invites community contributions to improve framework support and detection rules.
A new open-source static analysis tool called SafeAI has been released, designed specifically to analyze AI agent applications for risks related to prompts, tool permissions, agent capabilities, autonomy, memory, governance, and framework detection. The initial implementation was built in five days using OpenCode with GPT Codex 5.3, DeepSeek V4, and Kimi K3. The project is hosted on GitHub and invites community contributions to improve framework support and detection rules.
FailProofAi is a tool designed to make AI agents, such as ClaudeCode, more reliable by preventing token waste from loops and context drift. It ensures agents don't miss critical tasks, targeting developers who rely on AI agents for complex workflows. The project is open-source on GitHub.
FailProofAi is a tool designed to make AI agents, such as ClaudeCode, more reliable by preventing token waste from loops and context drift. It ensures agents don't miss critical tasks, targeting developers who rely on AI agents for complex workflows. The project is open-source on GitHub.