Skip to content
#

capability-security

Star

Here are 7 public repositories matching this topic...

Language: Python
Filter by language
All 21 Python 7 Rust 7 C 1 JavaScript 1 Jupyter Notebook 1 Makefile 1 Scheme 1 TypeScript 1
command-scope-contract

madeinplutofabio / command-scope-contract

Star 1

Bounded shell and CLI execution for AI agents: structured contracts, policy-gated execution, hardened Linux runtime enforcement, and signed receipts.

cli mcp provenance sandboxing ed25519 command-execution policy-engine devsecops ai-agents bubblewrap open-protocol capability-security approval-workflows secure-execution agentic-ai agent-security agent-safety agent-governance shell-security signed-receipts
  • Updated Apr 13, 2026
  • Python
kingpin_demo

putmanmodel / kingpin_demo

Star 0

Toy governance CLI demo: deny-by-default “danger actions” gated by signed, expiring capability leases (global revoke-all + nonce revoke) plus guarded memory quarantine. Simulation-only: no real network/shell/files. Includes tripwire + tests to prevent misuse.

python cli simulation pytest access-control governance ai-safety security-engineering least-privilege policy-enforcement capability-security safety-engineering least-privilege-governance capability-based-security ai-safety-design ai-safety-research
  • Updated Feb 17, 2026
  • Python

Improve this page

Add a description, image, and links to the capability-security topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the capability-security topic, visit your repo's landing page and select "manage topics."

Learn more