Shared governance engine for the opskit family of CLIs for AI agents — R0–R3 risk tiers, change-ticket & allow-flag authorization, RBAC, tamper-evident audit, credstore & redaction. Go library.
Embeddable Go SDK for Atol: in-process JWT validation, OPA policy evaluation, and Zanzibar relationship checks for sub-millisecond, no-network authorization.
Go-native, zero-dependency LLM command-output compressor — an embeddable take on rtk (the Rust 'token killer') with lossless-by-default compression and credential redaction.