From 745c2fb6bd3ef8d82201ee120c4290cc2cd758e4 Mon Sep 17 00:00:00 2001 From: Rul1an Date: Sun, 14 Jun 2026 08:48:31 +0200 Subject: [PATCH] Add Assay to Agent Firewalls & Gateways Policy-as-code gate for MCP: a fail-closed proxy that denies risky tool calls before they run, emits offline-verifiable evidence bundles, and enforces IPv4/TCP egress in-kernel via eBPF/LSM and Landlock on Linux. --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index 64858d4..8b4dea2 100644 --- a/README.md +++ b/README.md @@ -24,6 +24,7 @@ This list is organized by the **security lifecycle** of an autonomous agent, cov *Tools that sit between the agent and the world to filter traffic, prevent unauthorized tool access, and block prompt injections.* - **[AgentGateway](https://github.com/agentgateway/agentgateway)** - A Linux Foundation project providing an AI-native proxy for secure connectivity (A2A & MCP protocols). It adds RBAC, observability, and policy enforcement to agent-tool interactions. +- **[Assay](https://github.com/Rul1an/assay)** - Policy-as-code for MCP: a fail-closed proxy that denies risky tool calls before they run, emits offline-verifiable evidence bundles of what executed, and enforces IPv4/TCP egress in-kernel via eBPF/LSM and Landlock on Linux. Rust, MIT. - **[Envoy AI Gateway](https://gateway.envoyproxy.io/)** - An Envoy-based gateway that manages request traffic to GenAI services, providing a control point for rate limiting and policy enforcement. - **[Immunity Agent](https://github.com/PrismorSec/immunity-agent)** - Security-focused AI agent runtime for scanning prompt injection, MCP risks, unsafe package installs, and dangerous agent actions before execution.