Go · npm
dadrus/heimdall
A cloud native Identity Aware Proxy and Access Control Decision service
Apache-2.0Sep 6, 2026 · metrics 2.10.0
All tags
Catalogue tag
#policy-enforcement
Every repository in the public record carrying this tag — from its GitHub topics or the keywords its package registries publish. Health is measured under the same versioned methodology as the rest of the record.
10 records
PyPI · crates.io
Rul1an/assay
Open evidence profile for MCP tool actions. Enforce configured tool-call policies and record decisions and observations in offline-verifiable bundles. Optional Linux kernel controls. No hosted backend required.
MITOct 13, 2026 · metrics 2.10.0
PyPI
mcp-hangar/mcp-hangar
MCP policy enforcement plane — deterministic policy on every Model Context Protocol call: identity, RFC 8707 audience binding, tool schema digest pinning, full audit trail. Python, self-hosted, MIT.
MITSep 21, 2026 · metrics 2.10.0
PyPI · npm · Go
responsibleai/agent-hooks
Framework-neutral control contract for AI agents: eight interception points, three verdicts, and a conformance kit.
MITOct 6, 2026 · metrics 2.10.0
npm
emiliaprotocol/emilia-protocol
Authority control plane for autonomous work. EMILIA Gate enforces finite customer-owned mandates at protected executor boundaries; the open protocol keeps evidence verifiable.
Apache-2.0Sep 5, 2026 · metrics 2.10.0
PyPI · npm
PrismorSec/prismor
Self-hosted runtime control plane for AI agents. Observe or HITL approve or Block rogue tool calls before it executes: secret leaks, prompt injection, supply chain etc in a local dashboard. Agent agnostic (Claude, codex, langchain etc.)
Apache-2.0Sep 11, 2026 · metrics 2.10.0
Go
themayursinha/mcp-visor
Runtime policy enforcement and audit control plane for MCP tool execution. Deterministic, non-AI policy engine that intercepts MCP tools/call requests before execution.
MITOct 18, 2026 · metrics 2.10.0
npm
bookedsolidtech/rea
Zero-trust governance layer for Claude Code. Policy-enforced MCP gateway with autonomy controls, middleware chain, audit log, HALT kill-switch, and prompt-injection defense.
MITSep 14, 2026 · metrics 2.10.0
Packagist
fissible/verdict
A Laravel security boundary for AI-triggered application actions. It bounds what an agent may do — authority, duplication, rate, approval — not what it was trying to do.
MITOct 21, 2026 · metrics 2.10.0
—
openagentidentityprotocol/agentidentityprotocol
Agent Identity Protocol - Zero-trust security layer for AI agents. Policy enforcement proxy for MCP with Human-in-the-Loop approval, DLP scanning, and audit logging.
Apache-2.0Sep 22, 2026 · metrics 2.10.0