Capabilities Python Packages

tenuo

Task-scoped authorization for AI agents. Cryptographic warrants constrain tools and arguments, prevent privilege escalation at every delegation hop, and produce signed evidence of what was allowed or denied.

nemo-agent-toolkit-tenuo

Task-scoped Tenuo authorization for OpenShell supervisor middleware and NeMo Agent Toolkit.

netelpro

A programming language designed for LLMs — semantic, honest, universal. Honesty enforced at compile time: capabilities as types, no silent holes.

posixcaps

Python bindings for Linux capabilities

cepheus-engine

Container escape scenario modeler — enumerate container security posture and model realistic escape paths

frostlang

A shell scripting language for when machines write the scripts and humans only review them. No interpolation, so injection is unrepresentable. Capability manifest, business-rule policy engine and a kernel-held sandbox — checked before anything runs.

pinspect-cli

⚡ Fast Linux process-intelligence CLI & forensics tool that goes far beyond 'ps aux'. Inspects origin, capabilities, FDs, sockets, namespaces, secrets, and process trees with SIEM/EDR JSON and interactive TUI.

actenon-permit

Actenon-Permit: an open-source authority broker for AI agents. Bounded, revocable capability grants with hard runtime limits, human-in-the-loop approvals, kill switch, and a tamper-evident action ledger.

orca-agent-skills

Not another agent orchestrator — ORCA is a runtime for executable cognition.

wassette-bin

Wassette: A security-oriented runtime that runs WebAssembly Components via MCP