Shared governance engine for the opskit family of CLIs for AI agents — R0–R3 risk tiers, change-ticket & allow-flag authorization, RBAC, tamper-evident audit, credstore & redaction. Go library.
Generate OpenAPI v3 specs from Go source code via static analysis — no magic comments, no annotations, no codegen. Framework-agnostic (chi, gin, echo), with a fluent metadata API for overrides.
SecScan is a fast, configurable secret scanning tool written in Go that detects API keys, tokens, credentials, and high-entropy secrets across source code and full Git history. Built for developers and CI pipelines, with strong defaults and low false positives.
Passive network sensor: JA4 TLS fingerprinting, C2 beacon and DNS-tunnel detection, MITRE ATT&CK-mapped alerts. Single static Go binary with an embedded dashboard.
A high-performance, resilient dual-tier (Redis + In-Memory) hybrid rate limiter for Go with lock-free atomic evaluation, graceful failover, and auto IETF headers.