Audit Log Python Packages

bernstein

The open‑source AI Agents Governance & Orchestration framework: write the rules declaratively, Bernstein enforces them and produces the verifiable, replayable record. Free, Apache-2.0. https://bernstein.run

tempus-ddb

Fail-closed B2A security gate for autonomous agent actions with signed policies and verifiable receipts.

tulip-agents

The agent framework where the model never holds the trigger — every consequential action clears your policy first, waits for a human when it matters, and lands on a record you can verify. Build on it, or put it around the agent you already have.

squidbrake

Brakes for your AI agents: every tool call is checked against your rules, held for human approval when risky, and recorded in a tamper-evident audit trail. Works with Claude Code and any MCP app.

ctrlrun

The execution safety layer for AI agents.

vmware-policy

Unified audit logging, policy enforcement, and sanitization for VMware MCP skills

bemi-sqlalchemy

Automatic data change tracking for SQLAlchemy

agentmetry

Local-first flight recorder for AI coding agents. Hash-chained audit trail, MITRE-mapped sequence detection, DLP. Forwards to the SIEM you already run.

cloudfall

The operator's record for self-hosted servers run by an AI agent. The agent decides, Ansible executes, Cloudfall gates every action, verifies the result and keeps the receipt. Plain Debian, no Kubernetes.

attenu-guard

Permissions that narrow when one AI agent delegates: a sub-agent never holds more than its parent. In-process, with a hash-chained audit log you verify offline. Python and TypeScript, adapters for 19 frameworks and A2A.

agentraas

The reliability layer for what AI agents do: exactly-once execution, action policies, human approval and a full audit trail. Self-hosted, MCP-native, free Community edition (MIT/Apache-2.0).

recusal

Deterministic governance for AI agent tool calls in Claude Code, MCP, LangGraph, or any agent loop. Pin approved capabilities, detect drift, and refuse unsafe or unapproved actions before execution. No model in the decision path.

nomosguard

Deterministic security reasoning core: hash-chained evidence ledger, attack-path rule engine, fail-closed policy gate. LLMs produce evidence and explain decisions; they never cross the decision boundary.

vibey-engine

Open-source orchestrator for AI coding agents: a spec interview, unattended builds on local (Ollama) or paid agents, human-gated review, and an append-only PostgreSQL ledger so a crashed agent's work is picked up, not lost.

django-activity-audit

Extended logging implementation to track CRUD events alongside application logs.

halo-record

Tamper-evident audit trails for AI agents: hash-chained Runtime Records, dependency-free, verifiable by anyone.

provio

A safety floor your AI agents can't get under: one policy for Claude Code, Codex, Gemini CLI, Cursor, Windsurf and MCP, judged by what each call will run, backstopped by the kernel, with a signed, tamper-evident ledger.

taper-broker

A credential broker for AI agents. The agent names a typed operation instead of holding a credential, and tokens narrow but never widen. Ed25519 capability chains, Postgres and SSH adapters, 231 red-team scenarios. Unaudited.

writ-cli

A safety floor your AI agents can't get under: one policy for Claude Code, Codex, Gemini CLI, Cursor, Windsurf and MCP, judged by what each call will run, backstopped by the kernel, with a signed, tamper-evident ledger.

agentguardproxy

The firewall for AI agents. Every tool call, every API call: gated by policy, logged, and routed for human approval.

haldir

The guardian layer for AI agents — identity, secrets, audit via MCP. Gate + Vault + Watch.

kepil

Accountability layer for AI agents: passport, mandate, action gateway, tamper-evident journal — and undo

plan-auditor

Make an AI agent's 'done' mean 'here is the command output that proves it.' Deterministic, LLM-free verification for AI coding agents: sealed plans, SHA-256 hash-chained evidence, STRIPS/PDDL reachability, and a fail-closed completion gate.

forum-engine

Coordinate agent fleets: routing, quality checks, prose contracts, and a replayable hash-chained ledger that preserves plans, evidence, results, and resumable handoffs. Model-agnostic.