Ubuntu NordVPN gateway with a LAN web panel, per-device policy routing, nftables NAT, and fail-closed routing for TVs, tablets, and other devices.
-
Updated
Jul 21, 2026 - Shell
Ubuntu NordVPN gateway with a LAN web panel, per-device policy routing, nftables NAT, and fail-closed routing for TVs, tablets, and other devices.
Open-source authorization gateway for AI agent tool calls. Enforce allow, deny, and approval-required decisions before agents execute tools.
Policy-driven, fail-closed model routing for OpenClaw
Systems language and runtime for explicit authority, typed distribution, and security-first process supervision.
deterministic governance layer for AI-assisted task execution
Deterministic pre-execution gate for AI agents (fail-closed, YAML policy)
Deterministic verification layer for AI-generated financial decisions. Verifies math (NPV, IRR, Black-Scholes, YTM, VaR), compliance (AML/KYC via Z3), and banking schemas (ISO 20022, SWIFT) — fail-closed, proof-backed. Not execution. Verification.
🏛️ Deterministic rejection layer for computational legal claims. Verifies dates, amounts, and structured constraints; blocks unproven legal outputs.
Deterministic three-state stop controller. Constraint-first design. Fail-closed.
Deterministic verification layer for infrastructure as code. Verifies AWS IAM policies, network reachability, and cost estimates before deployment — sits between AI agents and cloud execution. Powered by Z3 and NetworkX.
Copy-me examples of the receipt-driven (logless) pattern: require a signed, offline-verifiable receipt before you act.
Cryptographic Harness for Uncensorable AI Agent Communication. Post-quantum verification architecture for autonomous AI agents. Fail-closed network policy. NTRU-Encrypt KEM at λ=128. 17/17 leaks fixed. The fence that holds.
Produktivreifes .NET-Tool für deterministische Datei- & MIME-Erkennung mit fail-closed Archivvalidierung, sicherer Extraktion und Hashing-Evidenz (SHA-256/HMAC).
Receipt-gated SDK for AI agents — an agent cannot authorize its own actions or rewrite what it did. No valid receipt, no action.
Distributed process supervisor and coordination wrapper (leader election, semaphores, cron) built on etcd v3 for zero-dependency Linux process orchestration.
Public proof surface of the ACE doctrine: bounded briefs with code-generated, inspectable receipts.
Governed vision input and perception contract surface for Riverbraid.
An LLM knowledge base where every claim is anchored to a source and 'verified' is a receipt over the current text.
Fail-closed local/cloud router for LLMs: sensitive data stays on-device. French PII detection (GLiNER + Presidio + regex), reversible pseudonymization with a burned in-memory vault, GDPR art. 32 audit log. LiteLLM + Ollama. EN/FR docs.
Cluster wide verification harness for byte floor, seals, and stationary state checks.
Add a description, image, and links to the fail-closed topic page so that developers can more easily learn about it.
To associate your repository with the fail-closed topic, visit your repo's landing page and select "manage topics."