Directory
Search, filter by tool or topic, sort, and save ideas in this browser.
Loading directory…
Tools
Topics
4matches
PATH-fronted proxies for terraform/aws/kubectl: TOML policies allow plan/read but block destroy/terminate/recursive deletes before the real binary runs—no LLM judgment in the safety path.
Beta plugin sits between the model and your app: write hard-deny/soft-deny/allow rules in prose; Armor evaluates every tool call (powered by a decision model) and blocks policy violations before bash/git/exfil runs—Claude Code auto mode works via Ori on any OpenRouter model.
MCP server plus local hooks route agent-written commits, PR text, emails and support replies into one editable queue; you rewrite and approve, then the agent sends exactly your version—Claude Code tested; Codex/Gemini/Copilot/Cursor installer-configured; free tier then paid.
Open-source MIT guardrail tracks audience×trust labels across tool calls (algebra, not LLM-as-judge), returns remedy plans (sanitize/authority/subagent) so agents keep ~90% task completion with 0% exfil on their benches—plugs via pre/post tool hooks; docs also as MCP.